From 8702a68a9b12248599f9cdf073fc1b5efb8b556f Mon Sep 17 00:00:00 2001 From: Rod Soto Date: Wed, 12 Nov 2025 11:57:44 -0500 Subject: [PATCH 1/7] shaidatasets --- .../local_llms/4688_local_llms.txt | 5076 ++++ .../local_llms/sysmon_local_llms.txt | 21718 ++++++++++++++++ 2 files changed, 26794 insertions(+) create mode 100644 datasets/suspicious_behaviour/local_llms/4688_local_llms.txt create mode 100644 datasets/suspicious_behaviour/local_llms/sysmon_local_llms.txt diff --git a/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt b/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt new file mode 100644 index 00000000..4828d9f1 --- /dev/null +++ b/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt @@ -0,0 +1,5076 @@ +4688201331200x80200000000000003276367Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a04C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276371Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x970C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276372Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3984C:\Windows\System32\conhost.exe%%19360x970\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276376Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e70C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276380Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2c60C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276381Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ecC:\Windows\System32\conhost.exe%%19360x2c60\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276385Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d7cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276411Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1e8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276412Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3720C:\Windows\System32\conhost.exe%%19360x1e8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276416Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276423Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x330cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276424Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a1cC:\Windows\System32\conhost.exe%%19360x330c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276428Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x280cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276432Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ae8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276433Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1538C:\Windows\System32\conhost.exe%%19360x3ae8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276437Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d40C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276455Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x594C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276456Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3738C:\Windows\System32\conhost.exe%%19360x594\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276460Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3788C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276477Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2da0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276478Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e84C:\Windows\System32\conhost.exe%%19360x2da0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276482Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x738C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276486Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35a0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276487Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39a0C:\Windows\System32\conhost.exe%%19360x35a0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276491Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276504Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a90C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276505Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c90C:\Windows\System32\conhost.exe%%19360x3a90\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276509Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x257cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276515Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3910C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276516Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3974C:\Windows\System32\conhost.exe%%19360x3910\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276520Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c30C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276535Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x20c8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276536Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e90C:\Windows\System32\conhost.exe%%19360x20c8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276540Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3610C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276544Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x24bcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276545Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38c0C:\Windows\System32\conhost.exe%%19360x24bc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276549Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x354cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276553Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3554C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276554Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x11d8C:\Windows\System32\conhost.exe%%19360x3554\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276558Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3488C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276562Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3accC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276563Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f80C:\Windows\System32\conhost.exe%%19360x3acc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276567Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f10C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276583Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276584Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3eacC:\Windows\System32\conhost.exe%%19360x3f20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276588Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14b4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276592Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276593Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2454C:\Windows\System32\conhost.exe%%19360x39c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276597Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276601Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39c0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276602Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ed0C:\Windows\System32\conhost.exe%%19360x39c0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276606Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276610Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x359cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276611Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xba8C:\Windows\System32\conhost.exe%%19360x359c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276615Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfe8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276630Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1168C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276631Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c8cC:\Windows\System32\conhost.exe%%19360x1168\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276635Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x305cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276639Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3eecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276640Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d4cC:\Windows\System32\conhost.exe%%19360x3eec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276644Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b3cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276648Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3290C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276649Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x383cC:\Windows\System32\conhost.exe%%19360x3290\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276653Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276656Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e60C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe%%19360x2eb4"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003276668Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e88C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wusvcs -p -s WaaSMedicSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276677Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14ccC:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003276678Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18f0C:\Windows\System32\RuntimeBroker.exe%%19360x3e4C:\Windows\System32\RuntimeBroker.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003276695Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fb4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276696Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3748C:\Windows\System32\conhost.exe%%19360x3fb4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276700Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f78C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276715Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b4C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe%%19360x3e4\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003276717Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a08C:\Windows\System32\smartscreen.exe%%19360x3e4C:\Windows\System32\smartscreen.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003276730Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x347cC:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe%%19360x3e4\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003276746Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1538C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276747Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x11f4C:\Windows\System32\conhost.exe%%19360x1538\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276751Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f98C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276771Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x82cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276772Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37d4C:\Windows\System32\conhost.exe%%19360x82c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276776Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276798Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x738C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276799Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dd8C:\Windows\System32\conhost.exe%%19360x738\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276803Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d68C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276807Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37b0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276808Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x15ecC:\Windows\System32\conhost.exe%%19360x37b0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276812Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d48C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276841Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dacC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276842Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3974C:\Windows\System32\conhost.exe%%19360x3dac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276846Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xca0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276849Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38ecC:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exeS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003276851Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3964C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276852Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d2cC:\Windows\System32\conhost.exe%%19360x3964\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276856Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276860Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f94C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276861Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a14C:\Windows\System32\conhost.exe%%19360x3f94\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276865Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3868C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276870Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276871Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x11d8C:\Windows\System32\conhost.exe%%19360x3bcc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276875Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xaecC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276890Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1a48C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276891Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1408C:\Windows\System32\conhost.exe%%19360x1a48\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276895Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2140C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276899Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276900Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36ecC:\Windows\System32\conhost.exe%%19360x3b38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276904Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f44C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276909Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276910Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xe50C:\Windows\System32\conhost.exe%%19360xb54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276919Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276940Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e5cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276941Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2890C:\Windows\System32\conhost.exe%%19360x3e5c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276945Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbd8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276948Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2168C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276949Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x277cC:\Windows\System32\conhost.exe%%19360x2168\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276971Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cc8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003276972Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x156cC:\Windows\System32\conhost.exe%%19360x3cc8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003276977Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003276981Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eecC:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe%%19360x2eb4"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003276993Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36f8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wusvcs -p -s WaaSMedicSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003277001Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38b4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003277002Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f3cC:\Windows\System32\conhost.exe%%19360x38b4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003277010Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29a8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003277032Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a50C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003277033Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x620C:\Windows\System32\conhost.exe%%19360x3a50\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003277037Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003277041Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1614C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003277042Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8b0C:\Windows\System32\conhost.exe%%19360x1614\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003277046Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003277064Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x382cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003277065Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c40C:\Windows\System32\conhost.exe%%19360x382c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003277069Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bacC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003277078Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3834C:\Windows\System32\wbem\WmiPrvSE.exe%%19360x3e4C:\WINDOWS\system32\wbem\wmiprvse.exe -EmbeddingS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003278439Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3424C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278440Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c3cC:\Windows\System32\conhost.exe%%19360x3424\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278444Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3630C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278445Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x315cC:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exeS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003278449Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3770C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278450Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a20C:\Windows\System32\conhost.exe%%19360x3770\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278454Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278466Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e9cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278467Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xe88C:\Windows\System32\conhost.exe%%19360x3e9c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278471Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278487Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278488Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x263cC:\Windows\System32\conhost.exe%%19360x36d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278492Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3658C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278496Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x44C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278497Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x18cC:\Windows\System32\conhost.exe%%19360x44\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278507Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3efcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278511Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xc44C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278512Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2810C:\Windows\System32\conhost.exe%%19360xc44\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278516Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fe4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278520Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32b8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278521Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a54C:\Windows\System32\conhost.exe%%19360x32b8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278525Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x17a4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278544Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3654C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278545Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f58C:\Windows\System32\conhost.exe%%19360x3654\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278549Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3868C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278554Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ba8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278555Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36c0C:\Windows\System32\conhost.exe%%19360x3ba8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278561Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x290cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278566Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278567Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b1cC:\Windows\System32\conhost.exe%%19360x3e04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278571Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278575Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x365cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278576Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x202cC:\Windows\System32\conhost.exe%%19360x365c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278580Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3af8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278605Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x31d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278606Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x508C:\Windows\System32\conhost.exe%%19360x31d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278610Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15d8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003278629Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e4cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003278630Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3628C:\Windows\System32\conhost.exe%%19360x2e4c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003278634Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d58C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003279974Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bf4C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe /RuntimeWideS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003279975Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1dd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exe%%19360x3bf4"C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:552S-1-0-0--0x0C:\Windows\System32\taskhostw.exeS-1-16-16384 +4688201331200x80200000000000003279976Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x28e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe%%19360x3bf4"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:1012S-1-0-0--0x0C:\Windows\System32\taskhostw.exeS-1-16-16384 +4688201331200x80200000000000003279977Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd4C:\Windows\System32\conhost.exe%%19360x28e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003279978Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c70C:\Windows\System32\conhost.exe%%19360x1dd4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003279979Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c74C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x28e8"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" RemoveTaskDelayStartTrigger /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003279980Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1068C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe%%19360x1dd4"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" RemoveTaskDelayStartTrigger /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003279985Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x28e8"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" ExecuteQueuedItems /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003279988Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe%%19360x1dd4"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" ExecuteQueuedItems /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003279990Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3820C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 1dc -Pipe 204 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003279991Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b4cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003279992Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13a0C:\Windows\System32\conhost.exe%%19360x3b4c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003279996Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a60C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280000Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38b0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280001Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3998C:\Windows\System32\conhost.exe%%19360x38b0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280005Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280022Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a34C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280023Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b68C:\Windows\System32\conhost.exe%%19360x2a34\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280027Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280033Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x347cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280034Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b9cC:\Windows\System32\conhost.exe%%19360x347c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280038Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b2cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280043Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x197cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280044Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a10C:\Windows\System32\conhost.exe%%19360x197c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280049Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x394cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280058Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x15e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280059Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3810C:\Windows\System32\conhost.exe%%19360x15e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280063Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x391cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280078Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3df0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280079Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3718C:\Windows\System32\conhost.exe%%19360x3df0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280083Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b70C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280087Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x203cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280088Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34b0C:\Windows\System32\conhost.exe%%19360x203c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280092Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x42cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280096Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ef4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280097Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c30C:\Windows\System32\conhost.exe%%19360x1ef4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280101Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x366cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280105Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x7acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280106Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1258C:\Windows\System32\conhost.exe%%19360x7ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280110Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280129Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8f8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280130Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32b8C:\Windows\System32\conhost.exe%%19360x8f8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280134Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a58C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280137Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2854C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2b4 -InterruptEvent 0 -NGENProcess 2f0 -Pipe 2b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280139Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xea8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2bc -InterruptEvent 0 -NGENProcess 1b4 -Pipe 22c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280142Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3558C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2f0 -InterruptEvent 0 -NGENProcess 2f4 -Pipe 2d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280144Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2028C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2e8 -InterruptEvent 0 -NGENProcess 2b4 -Pipe 2d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280146Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280147Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e28C:\Windows\System32\conhost.exe%%19360xb24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280151Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2048C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280152Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2f0 -InterruptEvent 0 -NGENProcess 2ec -Pipe 2bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280156Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3290C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 1dc -InterruptEvent 0 -NGENProcess 2d4 -Pipe 2f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280159Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 310 -InterruptEvent 0 -NGENProcess 320 -Pipe 318 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280161Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x24c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280162Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3850C:\Windows\System32\conhost.exe%%19360x24c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280163Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 320 -InterruptEvent 0 -NGENProcess 31c -Pipe 310 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280168Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280172Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x352cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280173Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2bc4C:\Windows\System32\conhost.exe%%19360x352c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280177Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x508C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280192Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b0cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280193Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b9cC:\Windows\System32\conhost.exe%%19360x3b0c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280197Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280201Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3014C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280202Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b50C:\Windows\System32\conhost.exe%%19360x3014\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280206Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280209Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1848C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 31c -InterruptEvent 0 -NGENProcess 340 -Pipe 320 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280211Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c48C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 33c -InterruptEvent 0 -NGENProcess 210 -Pipe 2ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280214Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a4cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280215Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ba0C:\Windows\System32\conhost.exe%%19360x3a4c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280219Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a44C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280222Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d68C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 34c -InterruptEvent 0 -NGENProcess 368 -Pipe 350 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280224Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a60C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 33c -InterruptEvent 0 -NGENProcess 324 -Pipe 2e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280227Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2e0 -InterruptEvent 0 -NGENProcess 340 -Pipe 2fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280229Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 340 -InterruptEvent 0 -NGENProcess 344 -Pipe 2e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280231Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x162cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280232Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3becC:\Windows\System32\conhost.exe%%19360x162c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280236Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2464C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280239Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2d4 -InterruptEvent 0 -NGENProcess 2e4 -Pipe 2f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280241Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1590C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 210 -InterruptEvent 0 -NGENProcess 358 -Pipe 31c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280254Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d64C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 2d4 -Pipe 30c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280256Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d3cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 210 -InterruptEvent 0 -NGENProcess 1dc -Pipe 2e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280259Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3530C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 1dc -InterruptEvent 0 -NGENProcess 324 -Pipe 210 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280261Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e9cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 344 -InterruptEvent 0 -NGENProcess 2d4 -Pipe 328 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280263Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38ecC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 32c -Pipe 2f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280265Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2820C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280266Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c94C:\Windows\System32\conhost.exe%%19360x2820\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280267Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3694C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2b4 -InterruptEvent 0 -NGENProcess 344 -Pipe 34c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280269Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 340 -InterruptEvent 0 -NGENProcess 308 -Pipe 2d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280271Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x255cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 354 -InterruptEvent 0 -NGENProcess 32c -Pipe 2dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280273Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3824C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 364 -InterruptEvent 0 -NGENProcess 358 -Pipe 344 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280275Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x363cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 1dc -Pipe 2b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280280Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1100C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280281Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 370 -Pipe 314 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280283Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35dcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 380 -InterruptEvent 0 -NGENProcess 338 -Pipe 32c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280285Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3814C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 1b4 -InterruptEvent 0 -NGENProcess 370 -Pipe 324 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280287Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15a8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 370 -Pipe 364 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280292Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x395cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 308 -Pipe 388 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280294Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e80C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 398 -Pipe 1b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280297Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 374 -InterruptEvent 0 -NGENProcess 340 -Pipe 1dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280299Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f4cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess 384 -Pipe 370 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280301Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bb8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280302Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34b4C:\Windows\System32\conhost.exe%%19360x3bb8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280308Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280311Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e68C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 39c -Pipe 3a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280313Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e80C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 384 -InterruptEvent 0 -NGENProcess 394 -Pipe 354 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280315Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2354C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 398 -InterruptEvent 0 -NGENProcess 36c -Pipe 378 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280317Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 340 -Pipe 308 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280319Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11bcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3a4 -InterruptEvent 0 -NGENProcess 39c -Pipe 3a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280322Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280323Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e10C:\Windows\System32\conhost.exe%%19360xb1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280324Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 390 -InterruptEvent 0 -NGENProcess 360 -Pipe 340 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280326Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 394 -Pipe 380 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280331Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc20C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280334Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36f8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3c4 -InterruptEvent 0 -NGENProcess 368 -Pipe 3b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280336Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e78C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 3dc -Pipe 3cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280338Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3c4 -InterruptEvent 0 -NGENProcess 36c -Pipe 368 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280340Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x834C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3a4 -InterruptEvent 0 -NGENProcess 3b8 -Pipe 3ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280356Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3af0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280357Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ac8C:\Windows\System32\conhost.exe%%19360x3af0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280361Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37e0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280364Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3e4 -InterruptEvent 0 -NGENProcess 398 -Pipe 3e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280366Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b20C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 36c -InterruptEvent 0 -NGENProcess 37c -Pipe 3d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280379Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f64C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 3e4 -Pipe 3a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280381Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6d8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 3c4 -Pipe 398 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280384Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3990C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3dc -InterruptEvent 0 -NGENProcess 3b4 -Pipe 35c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280386Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1854C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 3b4 -Pipe 3e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280388Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 360 -Pipe 390 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280390Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3614C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 3d8 -Pipe 330 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280392Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e24C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 384 -Pipe 3d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280394Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 3b4 -Pipe 3dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280396Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2630C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3f8 -InterruptEvent 0 -NGENProcess 36c -Pipe 3ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280398Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3324C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3d4 -InterruptEvent 0 -NGENProcess 3e8 -Pipe 384 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280400Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3858C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 358 -Pipe 338 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280403Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36c8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 3bc -Pipe 37c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280405Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1a20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280406Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x380cC:\Windows\System32\conhost.exe%%19360x1a20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280407Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a08C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 3bc -Pipe 3c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280409Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3fc -InterruptEvent 0 -NGENProcess 39c -Pipe 374 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280414Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a8cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280425Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b68C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 33c -InterruptEvent 0 -NGENProcess 3f4 -Pipe 39c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280427Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3e8 -InterruptEvent 0 -NGENProcess 360 -Pipe 3c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280429Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f40C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3d4 -InterruptEvent 0 -NGENProcess 33c -Pipe 3f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280431Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3f8 -InterruptEvent 0 -NGENProcess 394 -Pipe 3f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280433Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3d4 -InterruptEvent 0 -NGENProcess 358 -Pipe 3e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280435Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e58C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 33c -Pipe 38c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280438Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ad0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280439Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3474C:\Windows\System32\conhost.exe%%19360x3ad0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280440Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 3d4 -Pipe 3f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280442Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f48C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 36c -InterruptEvent 0 -NGENProcess 3c8 -Pipe 3fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280447Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2f50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280448Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 394 -Pipe 358 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280450Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x814C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 3d4 -Pipe 3c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280454Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c60C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 418 -Pipe 33c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280456Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c10C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 430 -Pipe 424 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280458Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ff4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 36c -InterruptEvent 0 -NGENProcess 40c -Pipe 3b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280461Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3718C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280462Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3df8C:\Windows\System32\conhost.exe%%19360x3718\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280466Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fd8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280469Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 40c -InterruptEvent 0 -NGENProcess 418 -Pipe 36c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280471Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 420 -Pipe 3bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280474Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26a0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 394 -Pipe 430 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280476Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 42c -Pipe 408 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280478Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c58C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280479Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e7cC:\Windows\System32\conhost.exe%%19360x3c58\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280483Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280484Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19acC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 40c -Pipe 434 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280486Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x310C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 444 -Pipe 394 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280490Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f7cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 43c -InterruptEvent 0 -NGENProcess 438 -Pipe 414 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280492Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x10f0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess 468 -Pipe 360 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280505Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ca8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 454 -InterruptEvent 0 -NGENProcess 44c -Pipe 43c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280507Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xea8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 438 -InterruptEvent 0 -NGENProcess 444 -Pipe 464 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280510Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3238C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 478 -InterruptEvent 0 -NGENProcess 490 -Pipe 484 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280512Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1744C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 494 -InterruptEvent 0 -NGENProcess 428 -Pipe 488 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280514Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x21c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4ac -InterruptEvent 0 -NGENProcess 4b4 -Pipe 420 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280516Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c08C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 498 -InterruptEvent 0 -NGENProcess 480 -Pipe 428 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280518Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f2cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4bc -InterruptEvent 0 -NGENProcess 478 -Pipe 4a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280520Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess 480 -Pipe 4cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280522Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280523Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3de4C:\Windows\System32\conhost.exe%%19360x2b24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280527Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280528Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cf0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 48c -InterruptEvent 0 -NGENProcess 4ac -Pipe 47c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280530Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc38C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 478 -InterruptEvent 0 -NGENProcess 4bc -Pipe 490 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280534Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x375cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 4b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280536Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b38C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4e0 -InterruptEvent 0 -NGENProcess 4ac -Pipe 4b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280538Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a14C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 48c -InterruptEvent 0 -NGENProcess 46c -Pipe 450 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280540Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cfcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 474 -Pipe 468 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280542Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 46c -InterruptEvent 0 -NGENProcess 4c0 -Pipe 48c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280544Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b30C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4f4 -InterruptEvent 0 -NGENProcess 50c -Pipe 4e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280546Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c80C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4d0 -InterruptEvent 0 -NGENProcess 4e4 -Pipe 4a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280548Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37d4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess 510 -Pipe 4d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280550Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x152cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4fc -InterruptEvent 0 -NGENProcess 51c -Pipe 500 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280552Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbd8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 524 -InterruptEvent 0 -NGENProcess 4e4 -Pipe 530 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280554Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3794C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess 518 -Pipe 51c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280557Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34e0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280558Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34c0C:\Windows\System32\conhost.exe%%19360x34e0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280562Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1680C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280565Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15e0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 534 -Pipe 4f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280567Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 524 -Pipe 548 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280569Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a4cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 508 -InterruptEvent 0 -NGENProcess 520 -Pipe 544 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280571Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd5cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 520 -InterruptEvent 0 -NGENProcess 524 -Pipe 508 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280573Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36c8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 524 -InterruptEvent 0 -NGENProcess 4f0 -Pipe 520 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280575Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b4cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 564 -InterruptEvent 0 -NGENProcess 56c -Pipe 558 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280577Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 564 -Pipe 554 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280579Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3818C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 55c -InterruptEvent 0 -NGENProcess 53c -Pipe 49c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280581Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 53c -InterruptEvent 0 -NGENProcess 580 -Pipe 55c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280583Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 550 -InterruptEvent 0 -NGENProcess 53c -Pipe 564 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280585Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3464C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 584 -Pipe 510 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280587Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x399cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 580 -InterruptEvent 0 -NGENProcess 538 -Pipe 4f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280589Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2dacC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 538 -InterruptEvent 0 -NGENProcess 54c -Pipe 580 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280591Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 538 -InterruptEvent 0 -NGENProcess 4b8 -Pipe 560 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280593Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3500C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 584 -InterruptEvent 0 -NGENProcess 590 -Pipe 5a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280595Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e58C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 50c -Pipe 584 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280597Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5b0 -InterruptEvent 0 -NGENProcess 534 -Pipe 504 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280599Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x197cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess 518 -Pipe 54c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280601Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f00C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5b4 -InterruptEvent 0 -NGENProcess 470 -Pipe 588 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280603Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3278C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess 5b0 -Pipe 52c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280605Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5b0 -InterruptEvent 0 -NGENProcess 524 -Pipe 514 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280607Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3694C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c4 -InterruptEvent 0 -NGENProcess 53c -Pipe 470 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280609Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c18C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5b0 -InterruptEvent 0 -NGENProcess 5c0 -Pipe 4ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280612Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x290cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 5c8 -Pipe 518 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280615Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3468C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5d0 -InterruptEvent 0 -NGENProcess 4b8 -Pipe 53c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280617Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x363cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5d0 -InterruptEvent 0 -NGENProcess 550 -Pipe 5b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280619Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3524C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 590 -Pipe 5b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280621Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3718C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280622Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3df8C:\Windows\System32\conhost.exe%%19360x3718\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280627Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a78C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280636Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2ff4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280637Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e30C:\Windows\System32\conhost.exe%%19360x2ff4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280641Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2834C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280657Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x33d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280658Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2d04C:\Windows\System32\conhost.exe%%19360x33d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280662Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a34C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280680Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k GPSvcGroupS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280682Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1258C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280683Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ecC:\Windows\System32\conhost.exe%%19360x1258\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280687Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xea8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280701Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x900C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280702Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1744C:\Windows\System32\conhost.exe%%19360x900\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280706Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3868C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280710Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3860C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280711Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x16ccC:\Windows\System32\conhost.exe%%19360x3860\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280715Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280745Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280746Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3de4C:\Windows\System32\conhost.exe%%19360x2b24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280750Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x620C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280754Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3678C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280755Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36ccC:\Windows\System32\conhost.exe%%19360x3678\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280759Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14b4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280763Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280764Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x9ecC:\Windows\System32\conhost.exe%%19360x32ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280768Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fe4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280772Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3014C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280773Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x152cC:\Windows\System32\conhost.exe%%19360x3014\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280777Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d94C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280780Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a90C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5dc -InterruptEvent 0 -NGENProcess 594 -Pipe 5c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280782Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34c0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5d8 -InterruptEvent 0 -NGENProcess 550 -Pipe 5b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280784Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3794C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 534 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280786Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15e0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 550 -InterruptEvent 0 -NGENProcess 5e0 -Pipe 5e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280788Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5d8 -InterruptEvent 0 -NGENProcess 410 -Pipe 574 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280790Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x288cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5d8 -InterruptEvent 0 -NGENProcess 474 -Pipe 4c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280792Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3954C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 57c -InterruptEvent 0 -NGENProcess 4e4 -Pipe 40c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280794Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3670C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5f8 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 5f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280796Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x267cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4dc -InterruptEvent 0 -NGENProcess 5e4 -Pipe 5ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280798Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f6cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5e4 -InterruptEvent 0 -NGENProcess 4c8 -Pipe 4dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280800Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b68C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 604 -Pipe 540 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280802Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3abcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 438 -InterruptEvent 0 -NGENProcess 4c8 -Pipe 4fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280804Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 610 -InterruptEvent 0 -NGENProcess 5fc -Pipe 60c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280817Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e2cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5fc -InterruptEvent 0 -NGENProcess 5f8 -Pipe 610 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280819Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 474 -InterruptEvent 0 -NGENProcess 45c -Pipe 458 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280821Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2464C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 614 -InterruptEvent 0 -NGENProcess 618 -Pipe 624 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280823Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6e4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 4c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280825Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d40C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5d4 -InterruptEvent 0 -NGENProcess 614 -Pipe 528 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280827Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5e0 -InterruptEvent 0 -NGENProcess 438 -Pipe 550 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280830Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fa8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5d0 -InterruptEvent 0 -NGENProcess 474 -Pipe 620 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280832Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c54C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 524 -InterruptEvent 0 -NGENProcess 59c -Pipe 56c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280834Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x474C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 45c -InterruptEvent 0 -NGENProcess 5d4 -Pipe 5f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280836Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c8 -InterruptEvent 0 -NGENProcess 5dc -Pipe 5cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280838Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c78C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c8 -InterruptEvent 0 -NGENProcess 628 -Pipe 5d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a48C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 5a4 -Pipe 598 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280843Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2904C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 634 -InterruptEvent 0 -NGENProcess 5a4 -Pipe 630 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280844Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f18C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 650 -InterruptEvent 0 -NGENProcess 644 -Pipe 64c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280846Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e7cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5dc -InterruptEvent 0 -NGENProcess 640 -Pipe 5a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280848Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x81cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 63c -InterruptEvent 0 -NGENProcess 59c -Pipe 5dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280850Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b84C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 594 -InterruptEvent 0 -NGENProcess 660 -Pipe 638 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280852Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280853Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3298C:\Windows\System32\conhost.exe%%19360x3e38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280854Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35dcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2bc -InterruptEvent 0 -NGENProcess 578 -Pipe 648 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280856Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3994C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 684 -InterruptEvent 0 -NGENProcess 68c -Pipe 594 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280858Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 694 -InterruptEvent 0 -NGENProcess 6a8 -Pipe 698 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280860Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38d0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 538 -InterruptEvent 0 -NGENProcess 688 -Pipe 674 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280865Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e1cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280866Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 690 -InterruptEvent 0 -NGENProcess 6b0 -Pipe 66c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280868Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3774C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 678 -InterruptEvent 0 -NGENProcess 68c -Pipe 6ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x345cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 538 -InterruptEvent 0 -NGENProcess 68c -Pipe 67c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280874Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fe4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 59c -Pipe 538 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280876Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cbcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 684 -InterruptEvent 0 -NGENProcess 660 -Pipe 69c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280878Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x12fcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4b8 -InterruptEvent 0 -NGENProcess 690 -Pipe 2d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280880Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe14C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5a4 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 628 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280882Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a28C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 690 -InterruptEvent 0 -NGENProcess 68c -Pipe 59c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280884Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2928C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4b8 -InterruptEvent 0 -NGENProcess 524 -Pipe 5d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280886Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ca4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 65c -InterruptEvent 0 -NGENProcess 68c -Pipe 690 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280888Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 684 -InterruptEvent 0 -NGENProcess 670 -Pipe 5a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280890Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 2f4 -InterruptEvent 0 -NGENProcess 65c -Pipe 2bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280893Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f54C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 670 -InterruptEvent 0 -NGENProcess 660 -Pipe 684 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280895Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d2cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 644 -InterruptEvent 0 -NGENProcess 6b0 -Pipe 5bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280897Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 670 -InterruptEvent 0 -NGENProcess 578 -Pipe 6b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280899Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 688 -InterruptEvent 0 -NGENProcess 68c -Pipe 65c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280901Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3440C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280902Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3850C:\Windows\System32\conhost.exe%%19360x3440\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280903Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 670 -InterruptEvent 0 -NGENProcess 45c -Pipe 658 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280905Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x82cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 2f4 -Pipe 688 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280907Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39fcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 58c -InterruptEvent 0 -NGENProcess 45c -Pipe 2d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280909Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xaecC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6b0 -InterruptEvent 0 -NGENProcess 524 -Pipe 5d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280914Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280915Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c6cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 670 -InterruptEvent 0 -NGENProcess 45c -Pipe 678 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280917Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3878C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 668 -InterruptEvent 0 -NGENProcess 46c -Pipe 6a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280919Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2340C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c0 -InterruptEvent 0 -NGENProcess 50c -Pipe 6bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280923Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3810C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 680 -InterruptEvent 0 -NGENProcess 694 -Pipe 668 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280925Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b20C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess 660 -Pipe 618 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280927Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x263cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 62c -InterruptEvent 0 -NGENProcess 46c -Pipe 654 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280929Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d28C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess 640 -Pipe 6a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280931Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 6c0 -Pipe 50c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280933Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2768C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5fc -InterruptEvent 0 -NGENProcess 578 -Pipe 660 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280935Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a44C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 664 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 45c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280937Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e24C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 438 -InterruptEvent 0 -NGENProcess 4b8 -Pipe 5e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280939Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd2cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 5c8 -Pipe 2f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280941Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3794C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c0 -InterruptEvent 0 -NGENProcess 5e4 -Pipe 61c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280943Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15e0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c8 -InterruptEvent 0 -NGENProcess 6c4 -Pipe 460 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280946Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5fc -InterruptEvent 0 -NGENProcess 634 -Pipe 4b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280948Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x288cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 634 -InterruptEvent 0 -NGENProcess 6d8 -Pipe 5fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280950Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x269cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280951Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c48C:\Windows\System32\conhost.exe%%19360x269c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280957Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3818C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280960Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 4e0 -Pipe 4e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280962Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1120C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 570 -Pipe 680 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280964Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6d0 -InterruptEvent 0 -NGENProcess 6dc -Pipe 6e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280966Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x398cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 480 -InterruptEvent 0 -NGENProcess 4ac -Pipe 4d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280968Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 4e0 -Pipe 570 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280970Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2f08C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4e0 -InterruptEvent 0 -NGENProcess 6cc -Pipe 590 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280972Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc9cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 6d0 -Pipe 63c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280974Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb4cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6ec -InterruptEvent 0 -NGENProcess 474 -Pipe 6a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280977Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e78C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003280978Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3290C:\Windows\System32\conhost.exe%%19360x3e78\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003280982Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c0cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003280985Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fa8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 6d8 -Pipe 58c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c54C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4a0 -InterruptEvent 0 -NGENProcess 6b8 -Pipe 474 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280989Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4f8 -InterruptEvent 0 -NGENProcess 6ec -Pipe 438 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003280991Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3694C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 700 -InterruptEvent 0 -NGENProcess 714 -Pipe 704 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281004Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c18C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6d8 -InterruptEvent 0 -NGENProcess 4f8 -Pipe 578 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281006Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f74C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6d0 -InterruptEvent 0 -NGENProcess 728 -Pipe 6dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281008Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 728 -InterruptEvent 0 -NGENProcess 6e0 -Pipe 6d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281010Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6d0 -InterruptEvent 0 -NGENProcess 72c -Pipe 480 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281013Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e88C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 728 -InterruptEvent 0 -NGENProcess 708 -Pipe 6e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281015Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3364C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 708 -InterruptEvent 0 -NGENProcess 6ec -Pipe 728 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281017Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dfcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281018Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6c4C:\Windows\System32\conhost.exe%%19360x3dfc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281019Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 720 -InterruptEvent 0 -NGENProcess 710 -Pipe 6d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281021Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1334C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 6f4 -Pipe 70c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281023Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 650 -InterruptEvent 0 -NGENProcess 6b0 -Pipe 4d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281028Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2854C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281029Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c98C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6f8 -InterruptEvent 0 -NGENProcess 41c -Pipe 730 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281031Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1100C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 6e4 -Pipe 710 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281033Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2650C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 41c -InterruptEvent 0 -NGENProcess 734 -Pipe 6f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281037Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7acC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6d0 -InterruptEvent 0 -NGENProcess 758 -Pipe 71c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281039Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ae0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 734 -InterruptEvent 0 -NGENProcess 6fc -Pipe 41c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281041Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b6cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6b0 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 650 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281043Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 738 -InterruptEvent 0 -NGENProcess 6f4 -Pipe 734 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281045Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 4c4 -Pipe 6e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281047Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1744C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 76c -InterruptEvent 0 -NGENProcess 6f0 -Pipe 738 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281049Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x68cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 700 -Pipe 720 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281051Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d38C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 404 -InterruptEvent 0 -NGENProcess 440 -Pipe 3d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281053Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b40C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 758 -InterruptEvent 0 -NGENProcess 5ac -Pipe 754 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281055Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d2cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 440 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 404 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281057Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 494 -InterruptEvent 0 -NGENProcess 76c -Pipe 6f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281059Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a04C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 4f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281061Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6fc -InterruptEvent 0 -NGENProcess 76c -Pipe 410 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281063Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a0cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 740 -InterruptEvent 0 -NGENProcess 714 -Pipe 4e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281066Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5d4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 76c -Pipe 440 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281068Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3920C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 740 -InterruptEvent 0 -NGENProcess 4a0 -Pipe 6b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281070Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3910C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4ac -InterruptEvent 0 -NGENProcess 6d4 -Pipe 640 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281072Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x42cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 740 -InterruptEvent 0 -NGENProcess 440 -Pipe 5f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281074Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34bcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c8 -InterruptEvent 0 -NGENProcess 6c4 -Pipe 6d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281076Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3770C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c8 -InterruptEvent 0 -NGENProcess 440 -Pipe 5ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281078Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e60C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 418 -InterruptEvent 0 -NGENProcess 744 -Pipe 724 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281080Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32acC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c8 -InterruptEvent 0 -NGENProcess 4ac -Pipe 6d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281082Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e5cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 758 -InterruptEvent 0 -NGENProcess 6b0 -Pipe 494 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281084Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 774 -InterruptEvent 0 -NGENProcess 76c -Pipe 768 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281086Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3014C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281087Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2bd0C:\Windows\System32\conhost.exe%%19360x3014\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281088Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6cc -InterruptEvent 0 -NGENProcess 76c -Pipe 6f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281090Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1cdcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 708 -InterruptEvent 0 -NGENProcess 6ec -Pipe 440 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281092Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 778 -InterruptEvent 0 -NGENProcess 750 -Pipe 770 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281094Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c78C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4ac -InterruptEvent 0 -NGENProcess 74c -Pipe 708 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281096Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3824C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 788 -Pipe 740 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281098Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a3cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 634 -InterruptEvent 0 -NGENProcess 600 -Pipe 6ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281100Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x125cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 77c -InterruptEvent 0 -NGENProcess 5c8 -Pipe 79c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281102Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x738C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6fc -InterruptEvent 0 -NGENProcess 74c -Pipe 600 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281107Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3998C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281108Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a74C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7a0 -InterruptEvent 0 -NGENProcess 794 -Pipe 4a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281110Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b68C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 78c -InterruptEvent 0 -NGENProcess 7a4 -Pipe 714 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281112Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c4 -InterruptEvent 0 -NGENProcess 5c8 -Pipe 7bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281114Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2954C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 764 -InterruptEvent 0 -NGENProcess 790 -Pipe 7a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281116Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e2cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 784 -InterruptEvent 0 -NGENProcess 794 -Pipe 7ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281120Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a00C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 774 -InterruptEvent 0 -NGENProcess 790 -Pipe 7a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281122Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c4 -InterruptEvent 0 -NGENProcess 7a4 -Pipe 6fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281124Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6e4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 73c -InterruptEvent 0 -NGENProcess 758 -Pipe 750 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281126Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 788 -InterruptEvent 0 -NGENProcess 780 -Pipe 78c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281128Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 634 -InterruptEvent 0 -NGENProcess 7c8 -Pipe 4ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281130Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x394cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 780 -InterruptEvent 0 -NGENProcess 5c8 -Pipe 788 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281132Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 790 -InterruptEvent 0 -NGENProcess 6cc -Pipe 634 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281134Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 778 -InterruptEvent 0 -NGENProcess 700 -Pipe 73c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281136Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3278C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 798 -InterruptEvent 0 -NGENProcess 42c -Pipe 748 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281138Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ae8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 758 -Pipe 700 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281140Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 748 -InterruptEvent 0 -NGENProcess 5c0 -Pipe 744 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281142Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x870C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5e4 -InterruptEvent 0 -NGENProcess 76c -Pipe 75c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281144Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c4 -InterruptEvent 0 -NGENProcess 7b0 -Pipe 694 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281146Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a84C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 62c -InterruptEvent 0 -NGENProcess 76c -Pipe 604 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281149Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x244cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 524 -InterruptEvent 0 -NGENProcess 798 -Pipe 7b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281151Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x610C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 22c -InterruptEvent 0 -NGENProcess 1e0 -Pipe 270 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281153Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281154Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x381cC:\Windows\System32\conhost.exe%%19360x38f4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281158Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3db4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281159Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bf8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7b0 -InterruptEvent 0 -NGENProcess 6c8 -Pipe 478 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281161Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eacC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 670 -Pipe 7b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281163Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3790C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 22c -InterruptEvent 0 -NGENProcess 4bc -Pipe 76c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281165Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb54C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 4bc -InterruptEvent 0 -NGENProcess 5e4 -Pipe 22c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281167Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d08C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 760 -InterruptEvent 0 -NGENProcess 778 -Pipe 764 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281171Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 748 -InterruptEvent 0 -NGENProcess 5c0 -Pipe 778 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281174Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3424C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 1e0 -Pipe 46c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281175Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7ecC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 748 -InterruptEvent 0 -NGENProcess 5e4 -Pipe 664 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281177Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 644 -InterruptEvent 0 -NGENProcess 5e4 -Pipe 608 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281179Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d60C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6cc -InterruptEvent 0 -NGENProcess 5e4 -Pipe 62c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281181Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b44C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 774 -InterruptEvent 0 -NGENProcess 758 -Pipe 760 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281183Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 77c -InterruptEvent 0 -NGENProcess 748 -Pipe 790 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281185Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x327cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 6c0 -Pipe 6cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281187Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xff4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 57c -InterruptEvent 0 -NGENProcess 644 -Pipe 6c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281189Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b48C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 418 -InterruptEvent 0 -NGENProcess 644 -Pipe 524 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281191Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11bcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 774 -Pipe 5e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281193Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36f8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 57c -InterruptEvent 0 -NGENProcess 780 -Pipe 454 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281195Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3860C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 418 -InterruptEvent 0 -NGENProcess 7cc -Pipe 57c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281197Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 498 -InterruptEvent 0 -NGENProcess 7cc -Pipe 42c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281199Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x354cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 758 -Pipe 5c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281201Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3340C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 780 -InterruptEvent 0 -NGENProcess 7cc -Pipe 798 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281203Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a30C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 448 -InterruptEvent 0 -NGENProcess 6c8 -Pipe 774 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281205Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38bcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 568 -InterruptEvent 0 -NGENProcess 77c -Pipe 614 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281208Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1040C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281209Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f68C:\Windows\System32\conhost.exe%%19360x1040\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281213Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x28e4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281235Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b50C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281236Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3440C:\Windows\System32\conhost.exe%%19360x1b50\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281240Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34bcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281252Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3848C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 448 -InterruptEvent 0 -NGENProcess 7d4 -Pipe 780 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281254Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d1cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 318 -Pipe 418 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281256Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e18C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7a4 -InterruptEvent 0 -NGENProcess 74c -Pipe 7d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281258Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1564C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 74c -InterruptEvent 0 -NGENProcess 758 -Pipe 7a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281260Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7d4 -InterruptEvent 0 -NGENProcess 7cc -Pipe 448 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281262Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35ccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281263Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b08C:\Windows\System32\conhost.exe%%19360x35cc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281264Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 498 -InterruptEvent 0 -NGENProcess 6c8 -Pipe 568 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281266Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c90C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 7c8 -Pipe 748 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281268Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x206cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 7dc -Pipe 7b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281270Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15e0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 5c8 -InterruptEvent 0 -NGENProcess 6c8 -Pipe 7d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281272Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f70C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 7cc -Pipe 5c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281274Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2414C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 77c -InterruptEvent 0 -NGENProcess 498 -Pipe 7cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281276Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3db8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7e4 -InterruptEvent 0 -NGENProcess 498 -Pipe 7d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281278Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7e4 -InterruptEvent 0 -NGENProcess 318 -Pipe 498 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281280Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd48C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7e8 -InterruptEvent 0 -NGENProcess 6c0 -Pipe 4bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281285Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2960C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281286Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2768C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7e4 -InterruptEvent 0 -NGENProcess 7ec -Pipe 1e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281289Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 7e4 -Pipe 318 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281290Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e58C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 44c -InterruptEvent 0 -NGENProcess 77c -Pipe 670 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281292Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7f4 -InterruptEvent 0 -NGENProcess 7c8 -Pipe 77c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281294Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3378C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7ec -InterruptEvent 0 -NGENProcess 7c0 -Pipe 444 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281299Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 7f0 -Pipe 7f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281301Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x162cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7e4 -InterruptEvent 0 -NGENProcess 7c0 -Pipe 74c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281303Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3818C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 784 -InterruptEvent 0 -NGENProcess 7f8 -Pipe 44c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281305Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7f0 -InterruptEvent 0 -NGENProcess 7c0 -Pipe 7c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281307Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39f8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 7f8 -Pipe 7ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281308Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e9cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 794 -InterruptEvent 0 -NGENProcess 3b8 -Pipe 7f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281311Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37d0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 758 -Pipe 794 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281312Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d20C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 758 -Pipe 7e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281315Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x814C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 7d8 -Pipe 72c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281317Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x970C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7e4 -InterruptEvent 0 -NGENProcess 68c -Pipe 758 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281318Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e90C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 7d8 -Pipe 7f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281321Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3694C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 7c0 -Pipe 644 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281323Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2f50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 7d8 -Pipe 7fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281325Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3078C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7d8 -InterruptEvent 0 -NGENProcess 6c0 -Pipe 7c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281326Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d4cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7d8 -InterruptEvent 0 -NGENProcess 7c4 -Pipe 3b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281329Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x269cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c4 -InterruptEvent 0 -NGENProcess 7e4 -Pipe 7d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281331Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x363cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c0 -InterruptEvent 0 -NGENProcess 6c8 -Pipe 818 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281332Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c1cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 820 -InterruptEvent 0 -NGENProcess 804 -Pipe 81c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281335Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 7dc -Pipe 6c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281337Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e9cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 80c -Pipe 68c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281339Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ea0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 830 -InterruptEvent 0 -NGENProcess 7c4 -Pipe 7dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281341Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39bcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 7c4 -InterruptEvent 0 -NGENProcess 82c -Pipe 830 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281342Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2cc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 82c -InterruptEvent 0 -NGENProcess 6c8 -Pipe 7c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281345Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe88C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 840 -InterruptEvent 0 -NGENProcess 848 -Pipe 818 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281347Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 828 -InterruptEvent 0 -NGENProcess 838 -Pipe 824 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281349Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2070C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 814 -InterruptEvent 0 -NGENProcess 80c -Pipe 784 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281351Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b58C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 838 -InterruptEvent 0 -NGENProcess 82c -Pipe 828 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281353Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d08C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 6c8 -InterruptEvent 0 -NGENProcess 858 -Pipe 85c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281355Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c98C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 858 -InterruptEvent 0 -NGENProcess 814 -Pipe 6c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281357Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x44C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 848 -InterruptEvent 0 -NGENProcess 84c -Pipe 808 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281359Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2650C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 848 -InterruptEvent 0 -NGENProcess 80c -Pipe 834 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281361Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2df4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 840 -InterruptEvent 0 -NGENProcess 83c -Pipe 844 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281363Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 87c -InterruptEvent 0 -NGENProcess 890 -Pipe 880 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281365Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2574C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 88c -InterruptEvent 0 -NGENProcess 884 -Pipe 874 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281367Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 83c -InterruptEvent 0 -NGENProcess 840 -Pipe 87c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281369Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2838C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 870 -InterruptEvent 0 -NGENProcess 858 -Pipe 850 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281371Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 848 -InterruptEvent 0 -NGENProcess 8a8 -Pipe 870 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281373Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33c0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 820 -InterruptEvent 0 -NGENProcess 868 -Pipe 80c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281375Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bb4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 858 -InterruptEvent 0 -NGENProcess 840 -Pipe 864 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281376Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd98C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 86c -InterruptEvent 0 -NGENProcess 860 -Pipe 888 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281379Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 840 -InterruptEvent 0 -NGENProcess 84c -Pipe 858 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281381Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x346cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 86c -InterruptEvent 0 -NGENProcess 890 -Pipe 884 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281383Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x151cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 88c -InterruptEvent 0 -NGENProcess 8ac -Pipe 894 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281384Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8ac -InterruptEvent 0 -NGENProcess 84c -Pipe 88c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281386Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bdcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8b4 -InterruptEvent 0 -NGENProcess 814 -Pipe 86c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281388Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35f4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 89c -InterruptEvent 0 -NGENProcess 898 -Pipe 868 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281391Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8a8 -InterruptEvent 0 -NGENProcess 84c -Pipe 860 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281393Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f88C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8c8 -InterruptEvent 0 -NGENProcess 878 -Pipe 820 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281395Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8a0 -InterruptEvent 0 -NGENProcess 8c4 -Pipe 8a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281396Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 878 -InterruptEvent 0 -NGENProcess 8cc -Pipe 8c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281399Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c6cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 89c -InterruptEvent 0 -NGENProcess 910 -Pipe 898 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281400Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f68C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8d4 -InterruptEvent 0 -NGENProcess 8e0 -Pipe 914 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281402Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x718C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8f4 -InterruptEvent 0 -NGENProcess 8d4 -Pipe 878 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281404Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3598C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8d8 -InterruptEvent 0 -NGENProcess 8cc -Pipe 8bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281406Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x372cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8cc -InterruptEvent 0 -NGENProcess 8e8 -Pipe 8d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281409Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3628C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 904 -InterruptEvent 0 -NGENProcess 924 -Pipe 8dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281411Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x82cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 918 -InterruptEvent 0 -NGENProcess 938 -Pipe 91c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281412Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b90C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 900 -InterruptEvent 0 -NGENProcess 934 -Pipe 90c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281414Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b20C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 934 -InterruptEvent 0 -NGENProcess 940 -Pipe 900 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281416Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b00C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 950 -InterruptEvent 0 -NGENProcess 908 -Pipe 954 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281419Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ad8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 970 -InterruptEvent 0 -NGENProcess 964 -Pipe 96c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3924C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 944 -InterruptEvent 0 -NGENProcess 948 -Pipe 8d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281423Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 930 -InterruptEvent 0 -NGENProcess 960 -Pipe 978 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281424Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3204C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 93c -InterruptEvent 0 -NGENProcess 964 -Pipe 904 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281427Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a2cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 964 -InterruptEvent 0 -NGENProcess 95c -Pipe 93c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281429Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36ccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 95c -InterruptEvent 0 -NGENProcess 92c -Pipe 964 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281431Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3808C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 928 -InterruptEvent 0 -NGENProcess 970 -Pipe 92c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281433Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x324cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 958 -InterruptEvent 0 -NGENProcess 8cc -Pipe 908 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281434Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a60C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 924 -InterruptEvent 0 -NGENProcess 974 -Pipe 97c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281437Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f70C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 944 -InterruptEvent 0 -NGENProcess 958 -Pipe 94c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281439Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3310C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 980 -InterruptEvent 0 -NGENProcess 970 -Pipe 934 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281440Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x27e4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 944 -InterruptEvent 0 -NGENProcess 8cc -Pipe 924 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281443Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bbcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8e0 -InterruptEvent 0 -NGENProcess 930 -Pipe 8d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281444Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 984 -InterruptEvent 0 -NGENProcess 8cc -Pipe 980 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281447Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31d0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 98c -InterruptEvent 0 -NGENProcess 920 -Pipe 990 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281449Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 928 -InterruptEvent 0 -NGENProcess 974 -Pipe 968 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281450Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c40C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9a4 -InterruptEvent 0 -NGENProcess 9ac -Pipe 99c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281453Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3624C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9ac -InterruptEvent 0 -NGENProcess 9b0 -Pipe 9a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281454Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 974 -InterruptEvent 0 -NGENProcess 9a0 -Pipe 9b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281458Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15d8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess 950 -Pipe 9a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281459Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a70C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9a0 -InterruptEvent 0 -NGENProcess 9ac -Pipe 974 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281462Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e58C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess 970 -Pipe 938 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281464Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x364C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess 928 -Pipe 9b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281466Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37dcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 988 -InterruptEvent 0 -NGENProcess 944 -Pipe 984 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281468Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3940C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 988 -InterruptEvent 0 -NGENProcess 920 -Pipe 9c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281470Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9bc -InterruptEvent 0 -NGENProcess 9c4 -Pipe 8e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281472Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3474C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9c4 -InterruptEvent 0 -NGENProcess 9b4 -Pipe 9bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281474Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9dc -InterruptEvent 0 -NGENProcess 8cc -Pipe 9e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281476Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x395cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 994 -InterruptEvent 0 -NGENProcess 9dc -Pipe 9f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281477Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x393cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9cc -InterruptEvent 0 -NGENProcess 8e8 -Pipe 960 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281479Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa6cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 970 -InterruptEvent 0 -NGENProcess 9c8 -Pipe 8e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281481Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3580C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess 9d8 -Pipe 9d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281484Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess 9cc -Pipe 9d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281486Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c18C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess 9d8 -Pipe 9c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281488Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x290cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 958 -InterruptEvent 0 -NGENProcess 9e8 -Pipe 9e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281490Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 920 -InterruptEvent 0 -NGENProcess 8cc -Pipe 998 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281492Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9d8 -InterruptEvent 0 -NGENProcess 9c4 -Pipe a0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281494Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c0cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a08 -InterruptEvent 0 -NGENProcess 9f8 -Pipe 98c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281496Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x378C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8cc -InterruptEvent 0 -NGENProcess a10 -Pipe 9f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281498Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x638C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a18 -InterruptEvent 0 -NGENProcess a08 -Pipe a1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281500Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2140C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 970 -InterruptEvent 0 -NGENProcess a00 -Pipe 958 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281502Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3364C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a04 -InterruptEvent 0 -NGENProcess a0c -Pipe a28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281503Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3460C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a00 -InterruptEvent 0 -NGENProcess 8cc -Pipe 970 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281506Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9e8 -InterruptEvent 0 -NGENProcess 928 -Pipe 9c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281508Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eacC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a24 -InterruptEvent 0 -NGENProcess a0c -Pipe a30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281509Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ec4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281510Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cfcC:\Windows\System32\conhost.exe%%19360x3ec4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281511Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3efcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a0c -InterruptEvent 0 -NGENProcess a10 -Pipe a24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281513Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20e0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a3c -InterruptEvent 0 -NGENProcess a00 -Pipe a34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281515Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x594C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a14 -InterruptEvent 0 -NGENProcess a18 -Pipe 920 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281517Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd88C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9b4 -InterruptEvent 0 -NGENProcess a30 -Pipe 8cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281520Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa20C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a30 -InterruptEvent 0 -NGENProcess a08 -Pipe 9b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281522Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7ecC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a4c -InterruptEvent 0 -NGENProcess a44 -Pipe 9ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281524Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a3cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a44 -InterruptEvent 0 -NGENProcess a38 -Pipe a4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281525Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d60C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a38 -InterruptEvent 0 -NGENProcess 928 -Pipe a44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281528Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a38 -InterruptEvent 0 -NGENProcess 9d8 -Pipe 9e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281530Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b64C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a54 -InterruptEvent 0 -NGENProcess 9f0 -Pipe a58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281531Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x10d4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a04 -InterruptEvent 0 -NGENProcess 9dc -Pipe a14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281533Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x327cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a00 -InterruptEvent 0 -NGENProcess a30 -Pipe 928 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281535Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xff4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 988 -InterruptEvent 0 -NGENProcess 9f0 -Pipe 9cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281538Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2680C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 930 -InterruptEvent 0 -NGENProcess a48 -Pipe 948 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281548Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3868C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a30 -InterruptEvent 0 -NGENProcess a38 -Pipe a00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281550Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xac8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 988 -InterruptEvent 0 -NGENProcess 9f0 -Pipe a08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281554Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b40C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281555Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3970C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a0c -InterruptEvent 0 -NGENProcess a64 -Pipe a04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281557Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a30 -InterruptEvent 0 -NGENProcess a3c -Pipe a6c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281560Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d2cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9a0 -InterruptEvent 0 -NGENProcess 988 -Pipe a2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281561Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24d8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 988 -InterruptEvent 0 -NGENProcess a38 -Pipe 9a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281564Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a40 -InterruptEvent 0 -NGENProcess 930 -Pipe 9ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281566Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f88C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a60 -InterruptEvent 0 -NGENProcess a0c -Pipe a54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281568Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a70 -InterruptEvent 0 -NGENProcess 950 -Pipe 930 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281570Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11d0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a5c -InterruptEvent 0 -NGENProcess a84 -Pipe a20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281572Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3920C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8ec -InterruptEvent 0 -NGENProcess a40 -Pipe 950 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281573Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3518C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a90 -InterruptEvent 0 -NGENProcess a38 -Pipe a78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281578Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d18C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a94 -InterruptEvent 0 -NGENProcess a98 -Pipe aa4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281579Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3960C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a74 -InterruptEvent 0 -NGENProcess a70 -Pipe a88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281581Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2854C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 940 -InterruptEvent 0 -NGENProcess 9dc -Pipe 910 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281583Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x343cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a84 -InterruptEvent 0 -NGENProcess a80 -Pipe aac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281586Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38bcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a84 -InterruptEvent 0 -NGENProcess a10 -Pipe a74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281587Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x263cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a10 -InterruptEvent 0 -NGENProcess 8ec -Pipe a84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281590Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b6cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a94 -InterruptEvent 0 -NGENProcess a7c -Pipe aa0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281591Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b04C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9dc -InterruptEvent 0 -NGENProcess a94 -Pipe 95c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281594Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a9c -InterruptEvent 0 -NGENProcess a7c -Pipe a5c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281596Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e08C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a0c -InterruptEvent 0 -NGENProcess a70 -Pipe a60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281597Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x369cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 988 -InterruptEvent 0 -NGENProcess 8f4 -Pipe a98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281600Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ab0 -InterruptEvent 0 -NGENProcess a68 -Pipe a8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281601Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a3c -InterruptEvent 0 -NGENProcess 8a8 -Pipe a9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281604Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x370cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a50 -InterruptEvent 0 -NGENProcess 8f4 -Pipe 9f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281606Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x125cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9dc -InterruptEvent 0 -NGENProcess a50 -Pipe a70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281608Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d60C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a50 -InterruptEvent 0 -NGENProcess a18 -Pipe 9dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281609Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3748C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a38 -InterruptEvent 0 -NGENProcess a64 -Pipe a50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281612Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a0c -InterruptEvent 0 -NGENProcess a94 -Pipe 988 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281613Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f40C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9d8 -InterruptEvent 0 -NGENProcess 994 -Pipe a7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281616Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 918 -InterruptEvent 0 -NGENProcess a64 -Pipe a0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281617Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1854C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 994 -InterruptEvent 0 -NGENProcess 8a8 -Pipe a30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281620Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8ac -InterruptEvent 0 -NGENProcess 8f4 -Pipe 8c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281622Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8b8 -InterruptEvent 0 -NGENProcess 84c -Pipe 8b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281623Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e58C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a90 -InterruptEvent 0 -NGENProcess a68 -Pipe a3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281625Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e70C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a68 -InterruptEvent 0 -NGENProcess a64 -Pipe a90 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281628Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e38C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ac4 -InterruptEvent 0 -NGENProcess 9d8 -Pipe 8fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281630Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a64 -InterruptEvent 0 -NGENProcess 8f4 -Pipe a68 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281632Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3378C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 994 -InterruptEvent 0 -NGENProcess 840 -Pipe 8ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281634Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a94 -InterruptEvent 0 -NGENProcess 8f8 -Pipe a64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281636Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x850C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ac4 -InterruptEvent 0 -NGENProcess 8e4 -Pipe a10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281637Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f6cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a94 -InterruptEvent 0 -NGENProcess 8a0 -Pipe 994 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281640Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34c4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent a40 -InterruptEvent 0 -NGENProcess 8e4 -Pipe ac0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281641Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39f8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 840 -InterruptEvent 0 -NGENProcess 8b4 -Pipe a38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281644Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e9cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ab0 -InterruptEvent 0 -NGENProcess 89c -Pipe a80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281645Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ad0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8f8 -InterruptEvent 0 -NGENProcess 8ec -Pipe ac4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281647Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16b8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 918 -InterruptEvent 0 -NGENProcess aa8 -Pipe 940 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281650Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f98C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 814 -InterruptEvent 0 -NGENProcess 8e4 -Pipe a94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281651Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3278C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8e4 -InterruptEvent 0 -NGENProcess 9d8 -Pipe 814 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281654Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e90C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 9d8 -InterruptEvent 0 -NGENProcess ab4 -Pipe 8e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281655Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ad0 -InterruptEvent 0 -NGENProcess ab8 -Pipe abc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281658Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2f50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ad8 -InterruptEvent 0 -NGENProcess acc -Pipe ae0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281660Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3078C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ab0 -InterruptEvent 0 -NGENProcess af8 -Pipe 7e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281661Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d4cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 8a0 -InterruptEvent 0 -NGENProcess afc -Pipe 8c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281663Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3998C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ae4 -InterruptEvent 0 -NGENProcess aec -Pipe ae8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281666Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ad8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b14 -InterruptEvent 0 -NGENProcess af8 -Pipe b08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281667Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b00 -InterruptEvent 0 -NGENProcess b18 -Pipe b04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281670Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c18C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent adc -InterruptEvent 0 -NGENProcess af8 -Pipe ab0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281672Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfe8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b18 -InterruptEvent 0 -NGENProcess aec -Pipe b00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281674Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x794C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b34 -InterruptEvent 0 -NGENProcess b44 -Pipe b30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281675Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1334C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b44 -InterruptEvent 0 -NGENProcess b14 -Pipe b34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281678Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b58 -InterruptEvent 0 -NGENProcess b2c -Pipe b1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281680Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1928C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b58 -InterruptEvent 0 -NGENProcess ae4 -Pipe b38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281682Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ae4 -InterruptEvent 0 -NGENProcess b40 -Pipe b58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281683Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x345cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b40 -InterruptEvent 0 -NGENProcess aec -Pipe ae4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281686Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dfcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b6c -InterruptEvent 0 -NGENProcess b68 -Pipe b40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281688Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess b2c -Pipe b18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281689Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cbcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b68 -InterruptEvent 0 -NGENProcess b0c -Pipe b6c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281692Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ae4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ac8 -InterruptEvent 0 -NGENProcess af4 -Pipe b20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281693Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7acC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b78 -InterruptEvent 0 -NGENProcess aec -Pipe b54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281695Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1f98C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b78 -InterruptEvent 0 -NGENProcess a18 -Pipe b2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281698Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a64C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b88 -InterruptEvent 0 -NGENProcess b7c -Pipe b84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281699Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ae0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent aec -InterruptEvent 0 -NGENProcess b60 -Pipe b48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281701Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x514C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b44 -InterruptEvent 0 -NGENProcess b74 -Pipe b14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281703Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3488C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b28 -InterruptEvent 0 -NGENProcess b64 -Pipe b8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281706Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c60C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b94 -InterruptEvent 0 -NGENProcess b50 -Pipe aec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281707Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3750C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b50 -InterruptEvent 0 -NGENProcess b4c -Pipe b94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281710Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e1cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b44 -InterruptEvent 0 -NGENProcess b64 -Pipe b78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281712Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13f0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ba4 -InterruptEvent 0 -NGENProcess b60 -Pipe ba0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281714Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bac -InterruptEvent 0 -NGENProcess b24 -Pipe b28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281716Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b50 -InterruptEvent 0 -NGENProcess b90 -Pipe b64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281718Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b4c -InterruptEvent 0 -NGENProcess bc4 -Pipe ba8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281720Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fccC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bc8 -InterruptEvent 0 -NGENProcess b9c -Pipe b60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281722Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a50C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bc8 -InterruptEvent 0 -NGENProcess bd0 -Pipe b9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281724Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bf8 -InterruptEvent 0 -NGENProcess bcc -Pipe bf4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281726Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bfc -InterruptEvent 0 -NGENProcess bd0 -Pipe bf8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281727Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c98C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b50 -InterruptEvent 0 -NGENProcess bcc -Pipe bc0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281729Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a1cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bec -InterruptEvent 0 -NGENProcess ba4 -Pipe be8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281732Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a14C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bcc -InterruptEvent 0 -NGENProcess be0 -Pipe b50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281735Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x174cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bec -InterruptEvent 0 -NGENProcess bb8 -Pipe bd4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281737Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bcc -InterruptEvent 0 -NGENProcess bd8 -Pipe b4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281739Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33d0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent be4 -InterruptEvent 0 -NGENProcess ac8 -Pipe bec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281740Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x196cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ac8 -InterruptEvent 0 -NGENProcess bcc -Pipe be4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281742Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x9ecC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bd8 -InterruptEvent 0 -NGENProcess bc4 -Pipe bfc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281745Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x333cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent ac8 -InterruptEvent 0 -NGENProcess b88 -Pipe ba4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281746Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3728C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent b7c -InterruptEvent 0 -NGENProcess bb8 -Pipe b88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281755Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3848C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x37e8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent bcc -InterruptEvent 0 -NGENProcess bd8 -Pipe b24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281768Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f08C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x28e8"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" install "System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" /NoDependencies /noroot /version:v4.0.30319 /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003281769Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2d84C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281770Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3554C:\Windows\System32\conhost.exe%%19360x2d84\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281774Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1168C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281775Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 264 -InterruptEvent 0 -NGENProcess 2a4 -Pipe 2b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281778Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x369cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2a4 -InterruptEvent 0 -NGENProcess 294 -Pipe 264 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281780Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 230 -Pipe 25c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281782Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 228 -Pipe 224 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281784Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x267cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2a0 -InterruptEvent 0 -NGENProcess 250 -Pipe 270 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281786Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x118C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 344 -InterruptEvent 0 -NGENProcess 27c -Pipe 334 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281788Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x27e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 244 -InterruptEvent 0 -NGENProcess 29c -Pipe 258 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281790Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3238C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 244 -Pipe 2a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281792Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 31c -Pipe 254 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281794Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x357cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 344 -Pipe 32c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281796Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 314 -InterruptEvent 0 -NGENProcess 278 -Pipe 348 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281798Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 354 -InterruptEvent 0 -NGENProcess 294 -Pipe 350 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281800Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2a8 -InterruptEvent 0 -NGENProcess 324 -Pipe 228 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281802Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 278 -InterruptEvent 0 -NGENProcess 328 -Pipe 358 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281815Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 314 -InterruptEvent 0 -NGENProcess 31c -Pipe 230 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281818Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 244 -InterruptEvent 0 -NGENProcess 200 -Pipe 29c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281820Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 354 -Pipe 360 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281822Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 36c -InterruptEvent 0 -NGENProcess 250 -Pipe 294 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281824Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 27c -Pipe 378 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281826Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3830C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 318 -Pipe 200 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281828Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 330 -Pipe 278 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281830Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 390 -InterruptEvent 0 -NGENProcess 384 -Pipe 38c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281832Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1680C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 31c -InterruptEvent 0 -NGENProcess 2a8 -Pipe 328 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281834Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16f0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2a8 -InterruptEvent 0 -NGENProcess 388 -Pipe 31c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281836Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x938C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281837Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ecC:\Windows\System32\conhost.exe%%19360x938\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281838Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 388 -InterruptEvent 0 -NGENProcess 330 -Pipe 2a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 318 -Pipe 388 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281842Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 344 -InterruptEvent 0 -NGENProcess 364 -Pipe 384 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281844Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b0 -InterruptEvent 0 -NGENProcess 3a0 -Pipe 3ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281849Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1284C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281850Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 374 -InterruptEvent 0 -NGENProcess 39c -Pipe 390 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281852Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 370 -InterruptEvent 0 -NGENProcess 250 -Pipe 244 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281854Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3460C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 2b8 -Pipe 370 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281858Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xec8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 2b8 -Pipe 324 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281860Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3774C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a8 -InterruptEvent 0 -NGENProcess 330 -Pipe 2b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281862Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 314 -Pipe 354 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281864Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 34c -Pipe 250 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281866Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 380 -InterruptEvent 0 -NGENProcess 344 -Pipe 374 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281868Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 364 -Pipe 380 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281870Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 39c -Pipe 37c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 34c -Pipe 330 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281874Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 364 -InterruptEvent 0 -NGENProcess 3a4 -Pipe 3a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281876Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 3a4 -Pipe 27c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281878Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2af8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 3a4 -Pipe 314 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281881Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x10d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281882Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38c4C:\Windows\System32\conhost.exe%%19360x10d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281883Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 318 -Pipe 394 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281885Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xff4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 35c -Pipe 3c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281890Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x348cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281893Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xaf8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 398 -InterruptEvent 0 -NGENProcess 368 -Pipe 35c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281895Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x151cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b0 -InterruptEvent 0 -NGENProcess 34c -Pipe 2a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281897Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 3b8 -Pipe 368 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281900Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e0 -InterruptEvent 0 -NGENProcess 3b8 -Pipe 3e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281901Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e0 -InterruptEvent 0 -NGENProcess 3c0 -Pipe 3c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281903Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c0 -InterruptEvent 0 -NGENProcess 3d0 -Pipe 364 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281905Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f0 -InterruptEvent 0 -NGENProcess 3fc -Pipe 3b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281907Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f8 -InterruptEvent 0 -NGENProcess 3fc -Pipe 3d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281909Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3fc -InterruptEvent 0 -NGENProcess 3dc -Pipe 3f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281912Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b58C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3dc -InterruptEvent 0 -NGENProcess 3d0 -Pipe 3f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281914Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ec4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d0 -InterruptEvent 0 -NGENProcess 318 -Pipe 3dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281916Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 404 -InterruptEvent 0 -NGENProcess 318 -Pipe 3f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281919Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x372cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c0 -InterruptEvent 0 -NGENProcess 3d0 -Pipe 3fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281922Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3960C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess 418 -Pipe 40c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281924Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3638C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess 3e0 -Pipe 410 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281926Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fe4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess 404 -Pipe 3e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281928Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dc8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281929Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35c8C:\Windows\System32\conhost.exe%%19360x3dc8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281931Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 45c -InterruptEvent 0 -NGENProcess 450 -Pipe 458 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281936Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3794C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281940Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c0 -InterruptEvent 0 -NGENProcess 3d0 -Pipe 438 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281942Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x10f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 434 -InterruptEvent 0 -NGENProcess 39c -Pipe 404 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281944Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 3d0 -Pipe 424 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281946Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 454 -InterruptEvent 0 -NGENProcess 41c -Pipe 43c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281952Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 45c -InterruptEvent 0 -NGENProcess 3bc -Pipe 420 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281954Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 440 -InterruptEvent 0 -NGENProcess 3cc -Pipe 39c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281957Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 44c -InterruptEvent 0 -NGENProcess 440 -Pipe 428 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281959Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3508C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 454 -Pipe 430 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281961Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbb0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003281962Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3accC:\Windows\System32\conhost.exe%%19360xbb0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003281963Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x398cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 418 -InterruptEvent 0 -NGENProcess 318 -Pipe 420 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281965Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 418 -InterruptEvent 0 -NGENProcess 3bc -Pipe 3d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281967Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 474 -InterruptEvent 0 -NGENProcess 464 -Pipe 44c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281969Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ef0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 47c -InterruptEvent 0 -NGENProcess 468 -Pipe 478 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281974Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1614C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003281975Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 468 -InterruptEvent 0 -NGENProcess 480 -Pipe 47c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281977Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 474 -Pipe 454 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281981Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3290C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 444 -InterruptEvent 0 -NGENProcess 434 -Pipe 420 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281983Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2918C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 3bc -Pipe 318 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281985Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 49c -InterruptEvent 0 -NGENProcess 418 -Pipe 498 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ad0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess 444 -Pipe 464 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281989Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a0 -InterruptEvent 0 -NGENProcess 444 -Pipe 4a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281991Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a0 -InterruptEvent 0 -NGENProcess 3bc -Pipe 468 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003281993Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 444 -InterruptEvent 0 -NGENProcess 4b4 -Pipe 418 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282006Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess 494 -Pipe 4a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282008Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 490 -InterruptEvent 0 -NGENProcess 3c0 -Pipe 48c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282010Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 484 -InterruptEvent 0 -NGENProcess 42c -Pipe 46c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282012Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c0 -InterruptEvent 0 -NGENProcess 444 -Pipe 4bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282015Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 444 -InterruptEvent 0 -NGENProcess 4b0 -Pipe 4c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282017Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x938C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282018Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x11b8C:\Windows\System32\conhost.exe%%19360x938\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282019Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3460C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 450 -InterruptEvent 0 -NGENProcess 41c -Pipe 474 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282024Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 494 -Pipe 41c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282025Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32a8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282027Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3efcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4dc -InterruptEvent 0 -NGENProcess 4d0 -Pipe 4d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282029Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dfcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 3cc -Pipe 49c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282031Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2420C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 470 -InterruptEvent 0 -NGENProcess 480 -Pipe 488 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282036Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 490 -InterruptEvent 0 -NGENProcess 4d4 -Pipe 4dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282038Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 470 -InterruptEvent 0 -NGENProcess 4d4 -Pipe 4c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282040Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4cc -InterruptEvent 0 -NGENProcess 3cc -Pipe 4f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282042Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 484 -InterruptEvent 0 -NGENProcess 414 -Pipe 4b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282044Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d4 -InterruptEvent 0 -NGENProcess 4a8 -Pipe 470 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282046Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a8 -InterruptEvent 0 -NGENProcess 4d0 -Pipe 4d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282048Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ef4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e8 -InterruptEvent 0 -NGENProcess 4f0 -Pipe 4e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282050Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a8 -InterruptEvent 0 -NGENProcess 4ac -Pipe 4d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282052Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c0 -InterruptEvent 0 -NGENProcess 480 -Pipe 4c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282054Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 45c -Pipe 3cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282056Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 4ac -Pipe 4e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282059Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f0 -InterruptEvent 0 -NGENProcess 408 -Pipe 450 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282061Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 510 -InterruptEvent 0 -NGENProcess 504 -Pipe 50c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282063Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 518 -InterruptEvent 0 -NGENProcess 504 -Pipe 514 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282065Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3db4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282066Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3630C:\Windows\System32\conhost.exe%%19360x3db4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282067Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 45c -InterruptEvent 0 -NGENProcess 4ac -Pipe 4a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282072Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282073Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x42cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f8 -InterruptEvent 0 -NGENProcess 4b8 -Pipe 4ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282077Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 4fc -Pipe 290 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282079Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2998C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 524 -Pipe 4ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282081Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4cc -InterruptEvent 0 -NGENProcess 500 -Pipe 4f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282083Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 408 -InterruptEvent 0 -NGENProcess 518 -Pipe 504 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282085Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe58C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b8 -InterruptEvent 0 -NGENProcess 460 -Pipe 444 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282087Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2854C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e8 -InterruptEvent 0 -NGENProcess 42c -Pipe 484 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282089Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 45c -InterruptEvent 0 -NGENProcess 460 -Pipe 500 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282091Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fbcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 54c -InterruptEvent 0 -NGENProcess 53c -Pipe 4cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282093Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 42c -Pipe 434 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282095Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 480 -InterruptEvent 0 -NGENProcess 4b4 -Pipe 45c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282097Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 494 -InterruptEvent 0 -NGENProcess 52c -Pipe 4e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282099Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x23d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 408 -InterruptEvent 0 -NGENProcess 4b4 -Pipe 4b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282101Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 480 -Pipe 460 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282103Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x738C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 4fc -Pipe 524 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282105Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 53c -InterruptEvent 0 -NGENProcess 540 -Pipe 42c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282107Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3990C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 3c0 -Pipe 53c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282109Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3514C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 518 -Pipe 4b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282111Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3abcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f0 -InterruptEvent 0 -NGENProcess 51c -Pipe 518 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282113Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2dacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 54c -InterruptEvent 0 -NGENProcess 55c -Pipe 3bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282115Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 52c -InterruptEvent 0 -NGENProcess 414 -Pipe 3c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282117Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 534 -Pipe 52c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282119Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 480 -InterruptEvent 0 -NGENProcess 550 -Pipe 490 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282122Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 510 -InterruptEvent 0 -NGENProcess 51c -Pipe 554 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282124Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 534 -InterruptEvent 0 -NGENProcess 568 -Pipe 408 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282126Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 520 -InterruptEvent 0 -NGENProcess 510 -Pipe 538 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282127Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3724C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282129Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2004C:\Windows\System32\conhost.exe%%19360x3724\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282133Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d40C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282136Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3290C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 4fc -Pipe 530 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282138Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 570 -Pipe 574 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282140Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 534 -Pipe 550 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282142Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 4fc -Pipe 534 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282144Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 55c -InterruptEvent 0 -NGENProcess 510 -Pipe 568 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282146Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4fc -InterruptEvent 0 -NGENProcess 528 -Pipe 540 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282149Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 55c -InterruptEvent 0 -NGENProcess 508 -Pipe 560 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282151Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 508 -InterruptEvent 0 -NGENProcess 56c -Pipe 55c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282153Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 510 -InterruptEvent 0 -NGENProcess 528 -Pipe 548 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282155Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbf8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282156Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cacC:\Windows\System32\conhost.exe%%19360xbf8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282157Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 558 -InterruptEvent 0 -NGENProcess 5a0 -Pipe 588 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282162Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2564C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282165Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 51c -InterruptEvent 0 -NGENProcess 59c -Pipe 5a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282167Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 564 -InterruptEvent 0 -NGENProcess 58c -Pipe 598 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282169Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 580 -InterruptEvent 0 -NGENProcess 5a4 -Pipe 5ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282171Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 51c -InterruptEvent 0 -NGENProcess 520 -Pipe 594 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282173Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3988C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 570 -Pipe 508 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282175Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 584 -InterruptEvent 0 -NGENProcess 528 -Pipe 5a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282189Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2420C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 590 -Pipe 414 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282191Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5c8 -InterruptEvent 0 -NGENProcess 558 -Pipe 5bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282194Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282195Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ec8C:\Windows\System32\conhost.exe%%19360x3a24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282196Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5b4 -InterruptEvent 0 -NGENProcess 590 -Pipe 5c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282198Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3784C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 5e4 -Pipe 5e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282200Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x854C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5fc -InterruptEvent 0 -NGENProcess 5f0 -Pipe 5f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282202Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2838C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5d4 -InterruptEvent 0 -NGENProcess 558 -Pipe 5dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282207Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35a0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282210Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ef4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 608 -InterruptEvent 0 -NGENProcess 5cc -Pipe 5f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282212Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2680C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5b0 -InterruptEvent 0 -NGENProcess 5b4 -Pipe 5c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282214Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x156cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 608 -InterruptEvent 0 -NGENProcess 558 -Pipe 5cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282216Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 5c0 -Pipe 4f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282218Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 5b4 -Pipe 60c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282220Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f94C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 54c -InterruptEvent 0 -NGENProcess 5c0 -Pipe 590 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282223Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 5e4 -Pipe 570 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282225Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 610 -InterruptEvent 0 -NGENProcess 5c0 -Pipe 58c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282227Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3340C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282228Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x24d8C:\Windows\System32\conhost.exe%%19360x3340\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282229Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cf0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 5f4 -Pipe 5d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282231Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3630C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a4 -InterruptEvent 0 -NGENProcess 520 -Pipe 5b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282236Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b58C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282239Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 608 -InterruptEvent 0 -NGENProcess 614 -Pipe 5b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282244Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34bcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 51c -InterruptEvent 0 -NGENProcess 494 -Pipe 5d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282248Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 520 -InterruptEvent 0 -NGENProcess 5f4 -Pipe 580 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282250Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3960C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 544 -InterruptEvent 0 -NGENProcess 614 -Pipe 5a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282252Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3638C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282253Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1670C:\Windows\System32\conhost.exe%%19360x3638\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282257Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b70C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282258Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3538C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 59c -InterruptEvent 0 -NGENProcess 5d4 -Pipe 614 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282260Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 544 -Pipe 5d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282264Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x23d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 610 -InterruptEvent 0 -NGENProcess 520 -Pipe 528 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282266Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 56c -Pipe 520 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282268Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 51c -InterruptEvent 0 -NGENProcess 604 -Pipe 510 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282270Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 56c -InterruptEvent 0 -NGENProcess 5fc -Pipe 5ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282272Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3facC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 558 -InterruptEvent 0 -NGENProcess 604 -Pipe 57c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282274Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 544 -InterruptEvent 0 -NGENProcess 564 -Pipe 5e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282276Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x152cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 54c -InterruptEvent 0 -NGENProcess 5f4 -Pipe 608 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282279Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3014C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 62c -InterruptEvent 0 -NGENProcess 5e4 -Pipe 4fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282281Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14b0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282282Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ab0C:\Windows\System32\conhost.exe%%19360x14b0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282283Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e4 -InterruptEvent 0 -NGENProcess 5f4 -Pipe 59c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282288Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3520C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282289Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 61c -InterruptEvent 0 -NGENProcess 5c0 -Pipe 628 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282293Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 480 -InterruptEvent 0 -NGENProcess 62c -Pipe 51c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282295Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3becC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f4 -InterruptEvent 0 -NGENProcess 63c -Pipe 624 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282300Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 564 -InterruptEvent 0 -NGENProcess 63c -Pipe 56c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282311Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5b0 -InterruptEvent 0 -NGENProcess 558 -Pipe 604 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282313Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x394cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282314Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39f8C:\Windows\System32\conhost.exe%%19360x394c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282315Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2918C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 600 -InterruptEvent 0 -NGENProcess 5fc -Pipe 544 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282320Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20a0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282321Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 638 -InterruptEvent 0 -NGENProcess 578 -Pipe 620 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282325Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 558 -InterruptEvent 0 -NGENProcess 5b0 -Pipe 634 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282327Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3710C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 648 -InterruptEvent 0 -NGENProcess 638 -Pipe 62c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282329Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 61c -InterruptEvent 0 -NGENProcess 5b0 -Pipe 640 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282331Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x290cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 558 -InterruptEvent 0 -NGENProcess 578 -Pipe 5b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282333Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5fc -InterruptEvent 0 -NGENProcess 480 -Pipe 650 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282335Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x363cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 674 -InterruptEvent 0 -NGENProcess 668 -Pipe 670 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282338Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 654 -Pipe 638 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282340Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 65c -InterruptEvent 0 -NGENProcess 660 -Pipe 644 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282342Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cacC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282343Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1d54C:\Windows\System32\conhost.exe%%19360x3cac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282344Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 660 -InterruptEvent 0 -NGENProcess 674 -Pipe 65c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282349Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282350Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5fc -InterruptEvent 0 -NGENProcess 54c -Pipe 480 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282352Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3610C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 684 -InterruptEvent 0 -NGENProcess 6a4 -Pipe 69c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282356Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x345cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 61c -InterruptEvent 0 -NGENProcess 64c -Pipe 600 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282358Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3364C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 690 -InterruptEvent 0 -NGENProcess 5e4 -Pipe 5f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282360Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 680 -InterruptEvent 0 -NGENProcess 6bc -Pipe 61c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282362Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 658 -InterruptEvent 0 -NGENProcess 690 -Pipe 648 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282365Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 698 -InterruptEvent 0 -NGENProcess 6c8 -Pipe 6a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282367Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c34C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282368Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x315cC:\Windows\System32\conhost.exe%%19360x3c34\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282372Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282375Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 584 -InterruptEvent 0 -NGENProcess 494 -Pipe 5e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282377Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 684 -InterruptEvent 0 -NGENProcess 6b8 -Pipe 61c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282379Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b68C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 678 -InterruptEvent 0 -NGENProcess 494 -Pipe 668 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282381Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 618 -InterruptEvent 0 -NGENProcess 684 -Pipe 6b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282384Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f2cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282385Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x468C:\Windows\System32\conhost.exe%%19360x3f2c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282389Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282392Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 660 -InterruptEvent 0 -NGENProcess 66c -Pipe 6b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282394Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3af0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 698 -InterruptEvent 0 -NGENProcess 6ac -Pipe 6c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282396Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ac -InterruptEvent 0 -NGENProcess 630 -Pipe 698 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282398Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6bc -InterruptEvent 0 -NGENProcess 6c0 -Pipe 684 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282411Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 678 -Pipe 674 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282413Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 658 -InterruptEvent 0 -NGENProcess 6b4 -Pipe 578 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282416Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ab4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282417Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fb8C:\Windows\System32\conhost.exe%%19360x3ab4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282418Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a8 -InterruptEvent 0 -NGENProcess 6a4 -Pipe 66c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x348cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 618 -InterruptEvent 0 -NGENProcess 68c -Pipe 54c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282425Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2714C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282426Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a4 -InterruptEvent 0 -NGENProcess 618 -Pipe 6a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282430Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6c4 -InterruptEvent 0 -NGENProcess 68c -Pipe 618 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282432Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 690 -InterruptEvent 0 -NGENProcess 630 -Pipe 6bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282434Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a4 -InterruptEvent 0 -NGENProcess 558 -Pipe 694 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282436Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5fc -InterruptEvent 0 -NGENProcess 6b4 -Pipe 64c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282438Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x397cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6b4 -InterruptEvent 0 -NGENProcess 630 -Pipe 5fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282440Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 690 -InterruptEvent 0 -NGENProcess 68c -Pipe 664 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282442Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x206cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 654 -InterruptEvent 0 -NGENProcess 6c0 -Pipe 5c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282445Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 584 -InterruptEvent 0 -NGENProcess 688 -Pipe 6b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282447Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a4 -InterruptEvent 0 -NGENProcess 6ac -Pipe 558 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282449Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26e0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282450Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbd8C:\Windows\System32\conhost.exe%%19360x26e0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282451Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6cc -InterruptEvent 0 -NGENProcess 680 -Pipe 678 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282456Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e5cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282457Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3abcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a4 -InterruptEvent 0 -NGENProcess 6d4 -Pipe 690 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282461Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6fc -InterruptEvent 0 -NGENProcess 6f0 -Pipe 6f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282463Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 710 -InterruptEvent 0 -NGENProcess 700 -Pipe 708 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282465Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 700 -InterruptEvent 0 -NGENProcess 6fc -Pipe 710 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282467Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3250C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6c0 -InterruptEvent 0 -NGENProcess 67c -Pipe 494 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282470Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x188C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282471Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e38C:\Windows\System32\conhost.exe%%19360x188\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282472Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6c4 -InterruptEvent 0 -NGENProcess 6dc -Pipe 630 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282474Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 700 -InterruptEvent 0 -NGENProcess 6ac -Pipe 6a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282476Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 654 -InterruptEvent 0 -NGENProcess 6d8 -Pipe 660 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282478Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6c0 -InterruptEvent 0 -NGENProcess 680 -Pipe 6c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282483Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3724C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282484Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 724 -InterruptEvent 0 -NGENProcess 6d0 -Pipe 70c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282488Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d94C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6cc -InterruptEvent 0 -NGENProcess 6dc -Pipe 6d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282490Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x395cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6e8 -InterruptEvent 0 -NGENProcess 720 -Pipe 6e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282492Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3788C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 728 -InterruptEvent 0 -NGENProcess 67c -Pipe 6d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282494Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6fc -InterruptEvent 0 -NGENProcess 654 -Pipe 71c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282496Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 680 -InterruptEvent 0 -NGENProcess 728 -Pipe 688 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282498Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6e8 -InterruptEvent 0 -NGENProcess 654 -Pipe 728 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282508Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xde0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 654 -InterruptEvent 0 -NGENProcess 6ac -Pipe 6e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282511Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a98C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282512Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d4cC:\Windows\System32\conhost.exe%%19360x3a98\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282516Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26a0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282519Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 584 -InterruptEvent 0 -NGENProcess 700 -Pipe 67c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282521Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ec -InterruptEvent 0 -NGENProcess 6dc -Pipe 6e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282537Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282538Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ca4C:\Windows\System32\conhost.exe%%19360x2b54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282542Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1928C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282543Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6d8 -InterruptEvent 0 -NGENProcess 720 -Pipe 738 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282547Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ac -InterruptEvent 0 -NGENProcess 6d8 -Pipe 704 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282561Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 724 -InterruptEvent 0 -NGENProcess 6cc -Pipe 73c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282563Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ec -InterruptEvent 0 -NGENProcess 6c0 -Pipe 718 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282566Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 720 -InterruptEvent 0 -NGENProcess 74c -Pipe 6ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282568Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 74c -InterruptEvent 0 -NGENProcess 6fc -Pipe 720 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282570Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f9cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282571Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2420C:\Windows\System32\conhost.exe%%19360x3f9c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282575Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2da0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282578Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3930C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ac -InterruptEvent 0 -NGENProcess 750 -Pipe 728 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282580Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6fc -InterruptEvent 0 -NGENProcess 6cc -Pipe 74c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282582Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 754 -InterruptEvent 0 -NGENProcess 6ac -Pipe 758 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282584Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6d8 -InterruptEvent 0 -NGENProcess 654 -Pipe 72c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282586Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3784C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 774 -InterruptEvent 0 -NGENProcess 76c -Pipe 770 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282588Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 730 -InterruptEvent 0 -NGENProcess 6d8 -Pipe 75c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282590Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11bcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 734 -InterruptEvent 0 -NGENProcess 584 -Pipe 680 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282593Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3910C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 584 -InterruptEvent 0 -NGENProcess 764 -Pipe 734 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282595Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282596Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x27b4C:\Windows\System32\conhost.exe%%19360x38f0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282600Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2418C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282603Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x177cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6fc -InterruptEvent 0 -NGENProcess 6dc -Pipe 654 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282605Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x151cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6dc -InterruptEvent 0 -NGENProcess 658 -Pipe 6fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282607Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 750 -InterruptEvent 0 -NGENProcess 754 -Pipe 718 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282609Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 76c -InterruptEvent 0 -NGENProcess 78c -Pipe 750 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282612Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fd4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282613Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x348cC:\Windows\System32\conhost.exe%%19360x1fd4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282614Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3964C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 740 -InterruptEvent 0 -NGENProcess 790 -Pipe 76c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282616Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 748 -InterruptEvent 0 -NGENProcess 6ac -Pipe 584 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282621Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x375cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282622Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3310C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 744 -InterruptEvent 0 -NGENProcess 714 -Pipe 658 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282626Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 780 -InterruptEvent 0 -NGENProcess 714 -Pipe 740 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282628Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 788 -InterruptEvent 0 -NGENProcess 6c0 -Pipe 6d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282630Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe58C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 714 -InterruptEvent 0 -NGENProcess 724 -Pipe 780 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282632Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 79c -InterruptEvent 0 -NGENProcess 794 -Pipe 700 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282634Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7d0 -InterruptEvent 0 -NGENProcess 7c4 -Pipe 7cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282636Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6cc -InterruptEvent 0 -NGENProcess 79c -Pipe 798 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282638Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x157cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f8 -InterruptEvent 0 -NGENProcess 7f0 -Pipe 7f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282640Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3748C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f0 -InterruptEvent 0 -NGENProcess 7c4 -Pipe 7f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282653Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3adcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c4 -InterruptEvent 0 -NGENProcess 78c -Pipe 7f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282656Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3924C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ac -InterruptEvent 0 -NGENProcess 7e8 -Pipe 784 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282658Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 724 -InterruptEvent 0 -NGENProcess 744 -Pipe 714 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282660Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3abcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282661Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x295cC:\Windows\System32\conhost.exe%%19360x3abc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282662Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 79c -InterruptEvent 0 -NGENProcess 78c -Pipe 764 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282664Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1168C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 78c -InterruptEvent 0 -NGENProcess 724 -Pipe 79c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282669Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x70cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282670Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 754 -InterruptEvent 0 -NGENProcess 760 -Pipe 7e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282674Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 788 -InterruptEvent 0 -NGENProcess 748 -Pipe 6dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282676Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16f0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 760 -InterruptEvent 0 -NGENProcess 6ac -Pipe 754 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282678Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ac -InterruptEvent 0 -NGENProcess 7c4 -Pipe 760 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282680Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3520C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 328 -InterruptEvent 0 -NGENProcess 744 -Pipe 7c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282682Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x364C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 328 -InterruptEvent 0 -NGENProcess 764 -Pipe 7e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282685Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x458C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 6ac -Pipe 7a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282687Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ab0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ac -InterruptEvent 0 -NGENProcess 7c0 -Pipe 7c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282689Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 744 -InterruptEvent 0 -NGENProcess 7bc -Pipe 7b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282691Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 77c -InterruptEvent 0 -NGENProcess 6f4 -Pipe 774 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282693Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3af8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282694Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x200cC:\Windows\System32\conhost.exe%%19360x3af8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282695Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6f4 -InterruptEvent 0 -NGENProcess 764 -Pipe 77c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282697Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7dc -InterruptEvent 0 -NGENProcess 3ac -Pipe 38c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282702Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282705Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7b8 -InterruptEvent 0 -NGENProcess 7c0 -Pipe 6f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282707Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7bc -InterruptEvent 0 -NGENProcess 29c -Pipe 744 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282709Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 294 -InterruptEvent 0 -NGENProcess 7b8 -Pipe 278 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282711Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3490C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 378 -InterruptEvent 0 -NGENProcess 7bc -Pipe 7c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282714Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 794 -Pipe 6ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282716Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 778 -InterruptEvent 0 -NGENProcess 29c -Pipe 7bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282720Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d68C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 31c -InterruptEvent 0 -NGENProcess 7ec -Pipe 230 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282722Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x297cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 778 -InterruptEvent 0 -NGENProcess 7dc -Pipe 328 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282724Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ea0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 348 -InterruptEvent 0 -NGENProcess 2a4 -Pipe 254 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282726Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 348 -InterruptEvent 0 -NGENProcess 388 -Pipe 2a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282728Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bc4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 378 -Pipe 794 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282730Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dfcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282731Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c2cC:\Windows\System32\conhost.exe%%19360x3dfc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282733Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 358 -Pipe 3ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282738Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x345cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282742Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x12fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 348 -Pipe 7b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282746Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 7dc -Pipe 258 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282748Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 7e0 -Pipe 6c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282750Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 228 -InterruptEvent 0 -NGENProcess 7dc -Pipe 378 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282752Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 7e0 -Pipe 270 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282756Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 388 -InterruptEvent 0 -NGENProcess 200 -Pipe 29c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282758Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 294 -Pipe 7dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282760Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 224 -InterruptEvent 0 -NGENProcess 7e0 -Pipe 388 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282762Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 228 -InterruptEvent 0 -NGENProcess 31c -Pipe 7fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282764Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 3a8 -Pipe 348 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282766Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x315cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 330 -Pipe 778 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282772Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x970C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 31c -InterruptEvent 0 -NGENProcess 7e0 -Pipe 334 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282774Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3554C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 360 -Pipe 374 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282777Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3824C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 3a8 -Pipe 354 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282779Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 350 -Pipe 360 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282781Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x27b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 78c -Pipe 330 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282783Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3910C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282784Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2568C:\Windows\System32\conhost.exe%%19360x3910\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282788Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x177cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282791Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 390 -InterruptEvent 0 -NGENProcess 7d0 -Pipe 200 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282793Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7d0 -InterruptEvent 0 -NGENProcess 370 -Pipe 390 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282795Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x620C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 31c -InterruptEvent 0 -NGENProcess 2b8 -Pipe 764 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282797Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7d8 -InterruptEvent 0 -NGENProcess 384 -Pipe 724 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282801Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3964C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 324 -InterruptEvent 0 -NGENProcess 7a4 -Pipe 788 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282803Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 244 -InterruptEvent 0 -NGENProcess 7ec -Pipe 370 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282816Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x279cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7ec -InterruptEvent 0 -NGENProcess 7d0 -Pipe 244 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282818Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 730 -InterruptEvent 0 -NGENProcess 358 -Pipe 7b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282821Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 250 -InterruptEvent 0 -NGENProcess 7a0 -Pipe 790 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282823Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3960C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7a4 -InterruptEvent 0 -NGENProcess 358 -Pipe 7e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282825Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3200C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 228 -Pipe 7ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282827Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 748 -InterruptEvent 0 -NGENProcess 7d8 -Pipe 7d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282829Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 324 -InterruptEvent 0 -NGENProcess 7ac -Pipe 31c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282831Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38c8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282832Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35c4C:\Windows\System32\conhost.exe%%19360x38c8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282833Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a8 -InterruptEvent 0 -NGENProcess 748 -Pipe 294 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282835Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 324 -Pipe 7ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a70C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282841Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 228 -InterruptEvent 0 -NGENProcess 2b8 -Pipe 748 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282843Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x347cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7a4 -InterruptEvent 0 -NGENProcess 7d0 -Pipe 2b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282845Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 324 -InterruptEvent 0 -NGENProcess 384 -Pipe 250 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282850Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1794C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7a0 -InterruptEvent 0 -NGENProcess 350 -Pipe 768 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282852Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 730 -InterruptEvent 0 -NGENProcess 3a8 -Pipe 384 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282854Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 7a0 -Pipe 228 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282856Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 78c -Pipe 380 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282858Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 7d8 -Pipe 324 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282860Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 730 -InterruptEvent 0 -NGENProcess 32c -Pipe 7d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282862Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7a4 -InterruptEvent 0 -NGENProcess 250 -Pipe 730 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282864Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 250 -InterruptEvent 0 -NGENProcess 7a0 -Pipe 7a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282869Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3954C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 78c -InterruptEvent 0 -NGENProcess 350 -Pipe 250 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282871Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 814 -InterruptEvent 0 -NGENProcess 81c -Pipe 80c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282873Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3788C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 818 -Pipe 824 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282875Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x395cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282876Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2c54C:\Windows\System32\conhost.exe%%19360x395c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282877Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 830 -InterruptEvent 0 -NGENProcess 814 -Pipe 828 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282879Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 840 -InterruptEvent 0 -NGENProcess 814 -Pipe 810 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282881Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x269cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 864 -InterruptEvent 0 -NGENProcess 850 -Pipe 860 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282883Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 84c -Pipe 804 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282888Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3874C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282889Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3af4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 854 -InterruptEvent 0 -NGENProcess 838 -Pipe 85c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282893Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 880 -InterruptEvent 0 -NGENProcess 888 -Pipe 870 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282895Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2004C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 88c -InterruptEvent 0 -NGENProcess 8a8 -Pipe 898 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282897Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b8 -InterruptEvent 0 -NGENProcess 890 -Pipe 8bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282899Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x378cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c4 -InterruptEvent 0 -NGENProcess 8ac -Pipe 8c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282901Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c8 -InterruptEvent 0 -NGENProcess 878 -Pipe 350 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282903Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e0 -InterruptEvent 0 -NGENProcess 8d8 -Pipe 8dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282905Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 890 -InterruptEvent 0 -NGENProcess 894 -Pipe 878 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282907Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 848 -InterruptEvent 0 -NGENProcess 8ac -Pipe 8a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282909Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32bcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8ac -InterruptEvent 0 -NGENProcess 82c -Pipe 848 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282911Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dfcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 814 -InterruptEvent 0 -NGENProcess 32c -Pipe 844 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282914Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 83c -InterruptEvent 0 -NGENProcess 8ac -Pipe 814 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282916Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 87c -InterruptEvent 0 -NGENProcess 830 -Pipe 8a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282918Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 868 -InterruptEvent 0 -NGENProcess 78c -Pipe 37c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282920Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 864 -InterruptEvent 0 -NGENProcess 834 -Pipe 81c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282922Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 834 -InterruptEvent 0 -NGENProcess 858 -Pipe 850 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282924Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ed8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282925Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a28C:\Windows\System32\conhost.exe%%19360x3ed8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282926Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2838C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c4 -InterruptEvent 0 -NGENProcess 820 -Pipe 874 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282931Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282934Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3584C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 78c -InterruptEvent 0 -NGENProcess 838 -Pipe 868 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282936Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8cc -InterruptEvent 0 -NGENProcess 86c -Pipe 8a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282938Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 818 -InterruptEvent 0 -NGENProcess 84c -Pipe 78c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282940Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 808 -InterruptEvent 0 -NGENProcess 32c -Pipe 8f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282942Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b4 -InterruptEvent 0 -NGENProcess 88c -Pipe 82c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282944Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a5cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 890 -InterruptEvent 0 -NGENProcess 8e0 -Pipe 8c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282946Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 280 -InterruptEvent 0 -NGENProcess 7a0 -Pipe 8b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282948Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3af0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 808 -InterruptEvent 0 -NGENProcess 7d8 -Pipe 8e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282950Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 808 -InterruptEvent 0 -NGENProcess 86c -Pipe 890 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282952Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 84c -InterruptEvent 0 -NGENProcess 8ec -Pipe 8d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282954Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 808 -InterruptEvent 0 -NGENProcess 83c -Pipe 858 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282957Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 820 -InterruptEvent 0 -NGENProcess 84c -Pipe 8cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282959Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 830 -InterruptEvent 0 -NGENProcess 86c -Pipe 87c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282961Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3658C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 264 -InterruptEvent 0 -NGENProcess 808 -Pipe 83c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282963Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dacC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003282964Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38b4C:\Windows\System32\conhost.exe%%19360x3dac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003282965Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3964C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 864 -InterruptEvent 0 -NGENProcess 834 -Pipe 88c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282967Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1040C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7a0 -InterruptEvent 0 -NGENProcess 84c -Pipe 8e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282969Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x279cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8ac -InterruptEvent 0 -NGENProcess 894 -Pipe 25c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282971Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8f8 -InterruptEvent 0 -NGENProcess 8e8 -Pipe 8d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282973Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 264 -Pipe 8ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282975Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3638C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8ec -InterruptEvent 0 -NGENProcess 908 -Pipe 358 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282980Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003282981Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 864 -Pipe 7d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282985Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3440C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 820 -InterruptEvent 0 -NGENProcess 818 -Pipe 3a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x206cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 91c -InterruptEvent 0 -NGENProcess 910 -Pipe 914 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282989Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fbcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 818 -InterruptEvent 0 -NGENProcess 934 -Pipe 928 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282991Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x399cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 854 -Pipe 900 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282993Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x357cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 940 -InterruptEvent 0 -NGENProcess 264 -Pipe 93c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282995Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a90C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 264 -InterruptEvent 0 -NGENProcess 904 -Pipe 940 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282997Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 92c -InterruptEvent 0 -NGENProcess 820 -Pipe 908 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003282999Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2094C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 924 -InterruptEvent 0 -NGENProcess 934 -Pipe 818 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283012Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8d8 -InterruptEvent 0 -NGENProcess 94c -Pipe 864 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283014Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e8 -InterruptEvent 0 -NGENProcess 8f8 -Pipe 8c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283016Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 910 -InterruptEvent 0 -NGENProcess 820 -Pipe 94c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283018Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e8 -InterruptEvent 0 -NGENProcess 918 -Pipe 834 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283021Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3580C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 838 -InterruptEvent 0 -NGENProcess 86c -Pipe 8d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283023Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 944 -Pipe 924 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283025Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1694C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 944 -InterruptEvent 0 -NGENProcess 830 -Pipe 32c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283027Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x27dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 8e8 -Pipe 930 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283038Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x7ccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283039Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1848C:\Windows\System32\conhost.exe%%19360x7cc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283040Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aa8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8f8 -InterruptEvent 0 -NGENProcess 950 -Pipe 2a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283042Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 954 -InterruptEvent 0 -NGENProcess 264 -Pipe 90c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283044Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 904 -InterruptEvent 0 -NGENProcess 944 -Pipe 830 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283049Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1984C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283050Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x814C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 948 -InterruptEvent 0 -NGENProcess 968 -Pipe 958 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283054Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e8 -InterruptEvent 0 -NGENProcess 8f8 -Pipe 8ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283056Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3724C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 808 -InterruptEvent 0 -NGENProcess 97c -Pipe 960 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283061Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 988 -InterruptEvent 0 -NGENProcess 99c -Pipe 98c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283063Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x395cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 944 -InterruptEvent 0 -NGENProcess 97c -Pipe 950 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283065Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9a4 -InterruptEvent 0 -NGENProcess 990 -Pipe 9a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283067Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 944 -InterruptEvent 0 -NGENProcess 970 -Pipe 918 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283069Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9b4 -InterruptEvent 0 -NGENProcess 9a8 -Pipe 9b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283071Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 838 -InterruptEvent 0 -NGENProcess 970 -Pipe 984 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283073Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c8 -InterruptEvent 0 -NGENProcess 9d0 -Pipe 9bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283075Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x297cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 264 -InterruptEvent 0 -NGENProcess 9ac -Pipe 954 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283077Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9d8 -InterruptEvent 0 -NGENProcess 9b8 -Pipe 9d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283079Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cf4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 95c -InterruptEvent 0 -NGENProcess 838 -Pipe 808 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283081Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess 944 -Pipe 9e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283083Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 97c -InterruptEvent 0 -NGENProcess 838 -Pipe 980 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283085Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c8 -InterruptEvent 0 -NGENProcess 9b8 -Pipe 9d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283088Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e8 -InterruptEvent 0 -NGENProcess 9c8 -Pipe 854 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283090Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9fc -InterruptEvent 0 -NGENProcess 944 -Pipe 9c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283092Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1accC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 944 -InterruptEvent 0 -NGENProcess 9ec -Pipe 9fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283094Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9f4 -InterruptEvent 0 -NGENProcess 9f8 -Pipe 9e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283096Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3744C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283097Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c64C:\Windows\System32\conhost.exe%%19360x3744\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283098Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c8 -InterruptEvent 0 -NGENProcess 9cc -Pipe 9a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283100Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c4 -InterruptEvent 0 -NGENProcess 9b8 -Pipe 9cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283105Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e88C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283106Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c8 -InterruptEvent 0 -NGENProcess 9ec -Pipe 9c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283108Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e8 -InterruptEvent 0 -NGENProcess 97c -Pipe 95c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283110Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x468C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 938 -InterruptEvent 0 -NGENProcess a08 -Pipe 968 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283114Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xff4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 97c -InterruptEvent 0 -NGENProcess a0c -Pipe 9e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283116Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9f4 -InterruptEvent 0 -NGENProcess 9f8 -Pipe a14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283118Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 938 -InterruptEvent 0 -NGENProcess 964 -Pipe 9b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283120Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a08 -InterruptEvent 0 -NGENProcess 920 -Pipe 91c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283122Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bdcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess 99c -Pipe 948 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283124Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 970 -InterruptEvent 0 -NGENProcess 9f0 -Pipe 838 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283126Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a24 -InterruptEvent 0 -NGENProcess 994 -Pipe 964 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283128Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a18 -InterruptEvent 0 -NGENProcess a28 -Pipe a20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283130Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 994 -InterruptEvent 0 -NGENProcess a00 -Pipe a04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283132Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9f4 -InterruptEvent 0 -NGENProcess 9ac -Pipe 934 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283134Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a00 -InterruptEvent 0 -NGENProcess 944 -Pipe 9a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283136Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a50 -InterruptEvent 0 -NGENProcess a3c -Pipe a4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283139Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xeb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a24 -InterruptEvent 0 -NGENProcess 9ac -Pipe a18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283141Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ddcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a5c -InterruptEvent 0 -NGENProcess 9f4 -Pipe a58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283143Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283144Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x31b0C:\Windows\System32\conhost.exe%%19360x14d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283148Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ce0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283151Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x82cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a28 -InterruptEvent 0 -NGENProcess 994 -Pipe 9c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283153Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x242cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess a50 -Pipe a3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283155Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a80 -InterruptEvent 0 -NGENProcess a78 -Pipe a7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283157Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3810C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a68 -InterruptEvent 0 -NGENProcess 264 -Pipe a74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283159Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a84 -InterruptEvent 0 -NGENProcess a8c -Pipe a70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283161Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 264 -InterruptEvent 0 -NGENProcess a78 -Pipe a6c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283163Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3990C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a28 -InterruptEvent 0 -NGENProcess a90 -Pipe a78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283165Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3670C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 974 -InterruptEvent 0 -NGENProcess a30 -Pipe a2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283168Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a1c -InterruptEvent 0 -NGENProcess a94 -Pipe 264 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283170Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x118C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a28 -InterruptEvent 0 -NGENProcess a64 -Pipe a90 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283172Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3730C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283173Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2630C:\Windows\System32\conhost.exe%%19360x3730\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283177Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283180Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9f0 -InterruptEvent 0 -NGENProcess a0c -Pipe 970 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283182Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a0c -InterruptEvent 0 -NGENProcess aa4 -Pipe 9f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283184Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3828C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a84 -InterruptEvent 0 -NGENProcess aa8 -Pipe aac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283186Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3accC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac0 -InterruptEvent 0 -NGENProcess a9c -Pipe abc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283200Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x70cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aa0 -InterruptEvent 0 -NGENProcess a84 -Pipe a88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283202Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a64 -InterruptEvent 0 -NGENProcess a98 -Pipe a28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283205Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x386cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a8c -InterruptEvent 0 -NGENProcess 9f4 -Pipe a54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283207Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9f4 -InterruptEvent 0 -NGENProcess acc -Pipe a8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283209Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ab8 -InterruptEvent 0 -NGENProcess a30 -Pipe a84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283211Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2940C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283212Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x474C:\Windows\System32\conhost.exe%%19360x2940\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283213Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3480C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a50 -InterruptEvent 0 -NGENProcess a5c -Pipe 9ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283215Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1370C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a48 -InterruptEvent 0 -NGENProcess a5c -Pipe 904 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283220Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34acC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283221Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x814C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 974 -InterruptEvent 0 -NGENProcess a5c -Pipe a78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283225Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a98 -InterruptEvent 0 -NGENProcess acc -Pipe a1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283227Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x395cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent acc -InterruptEvent 0 -NGENProcess a48 -Pipe a98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283229Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8fc -InterruptEvent 0 -NGENProcess ad4 -Pipe a60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283231Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent adc -InterruptEvent 0 -NGENProcess ac8 -Pipe a30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283233Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent af4 -InterruptEvent 0 -NGENProcess aec -Pipe af0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283235Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ad0 -InterruptEvent 0 -NGENProcess ad8 -Pipe aa8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283237Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8fc -InterruptEvent 0 -NGENProcess ae0 -Pipe ae8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283239Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x297cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a5c -InterruptEvent 0 -NGENProcess a9c -Pipe 9d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283241Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a80 -InterruptEvent 0 -NGENProcess ad4 -Pipe a40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283243Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cf4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ac -InterruptEvent 0 -NGENProcess a80 -Pipe ae8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283245Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 944 -InterruptEvent 0 -NGENProcess a34 -Pipe a00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283247Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b00 -InterruptEvent 0 -NGENProcess ad4 -Pipe afc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283250Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3918C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 990 -InterruptEvent 0 -NGENProcess 8fc -Pipe af4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283252Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2d60C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283253Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x68cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent adc -InterruptEvent 0 -NGENProcess ac8 -Pipe a5c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283254Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39d0C:\Windows\System32\conhost.exe%%19360x2d60\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283256Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ad8 -InterruptEvent 0 -NGENProcess a48 -Pipe ad0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283258Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8fc -InterruptEvent 0 -NGENProcess 990 -Pipe 9f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283260Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1330C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent acc -InterruptEvent 0 -NGENProcess ac0 -Pipe a0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283262Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x348cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ae0 -InterruptEvent 0 -NGENProcess ac4 -Pipe a64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283264Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a24 -InterruptEvent 0 -NGENProcess 974 -Pipe ab4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283266Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2838C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a34 -InterruptEvent 0 -NGENProcess ac0 -Pipe ac8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283268Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x450C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b04 -InterruptEvent 0 -NGENProcess aa4 -Pipe 9ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283273Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1f98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b0c -InterruptEvent 0 -NGENProcess a44 -Pipe b08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283274Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d60C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283276Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a44 -InterruptEvent 0 -NGENProcess 998 -Pipe b0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283278Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess 944 -Pipe a44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283280Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3774C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent adc -InterruptEvent 0 -NGENProcess b20 -Pipe af8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283282Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3404C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess 998 -Pipe b14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283284Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b18 -InterruptEvent 0 -NGENProcess b34 -Pipe b1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283286Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3da4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b2c -InterruptEvent 0 -NGENProcess b48 -Pipe b38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283290Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent acc -InterruptEvent 0 -NGENProcess b30 -Pipe 974 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283292Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 568 -Pipe 4dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283294Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x27b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 424 -InterruptEvent 0 -NGENProcess b34 -Pipe b30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283296Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b68C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 550 -InterruptEvent 0 -NGENProcess 554 -Pipe 574 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283298Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 438 -InterruptEvent 0 -NGENProcess 40c -Pipe acc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283300Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 404 -InterruptEvent 0 -NGENProcess b48 -Pipe b44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283302Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f0 -InterruptEvent 0 -NGENProcess 424 -Pipe 3fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283304Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f0 -InterruptEvent 0 -NGENProcess 438 -Pipe 3dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283306Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ca8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b34 -InterruptEvent 0 -NGENProcess 424 -Pipe 458 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283308Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3760C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b2c -InterruptEvent 0 -NGENProcess 404 -Pipe b48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283310Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a4 -InterruptEvent 0 -NGENProcess 3d4 -Pipe 364 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283312Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3974C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 40c -InterruptEvent 0 -NGENProcess b58 -Pipe b40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283314Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c4 -InterruptEvent 0 -NGENProcess 4d8 -Pipe 2a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283316Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3658C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b50 -InterruptEvent 0 -NGENProcess 3e4 -Pipe b54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283318Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess b6c -Pipe b3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283320Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b78 -InterruptEvent 0 -NGENProcess b64 -Pipe b74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283322Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x630C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 41c -InterruptEvent 0 -NGENProcess 4c0 -Pipe 46c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283324Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2714C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b88 -InterruptEvent 0 -NGENProcess b90 -Pipe 3b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283326Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 468 -InterruptEvent 0 -NGENProcess 3f4 -Pipe 35c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283328Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b94 -InterruptEvent 0 -NGENProcess b9c -Pipe ba8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283330Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess 4a0 -Pipe b50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283332Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1854C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b9c -InterruptEvent 0 -NGENProcess b88 -Pipe b94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283334Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ce0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 474 -InterruptEvent 0 -NGENProcess 4a0 -Pipe 468 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283336Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3670C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ba0 -InterruptEvent 0 -NGENProcess b70 -Pipe b98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283338Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3abcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 478 -InterruptEvent 0 -NGENProcess 318 -Pipe 454 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283340Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bb0 -InterruptEvent 0 -NGENProcess bb4 -Pipe bc0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283342Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 47c -Pipe 478 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283344Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bd8 -InterruptEvent 0 -NGENProcess bec -Pipe bdc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283346Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be0 -InterruptEvent 0 -NGENProcess bfc -Pipe be4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283348Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2050C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bd8 -InterruptEvent 0 -NGENProcess bb0 -Pipe bec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283350Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3828C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess bfc -Pipe bd0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283352Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess be8 -Pipe 440 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283354Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bb0 -InterruptEvent 0 -NGENProcess bf8 -Pipe bd8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283356Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 47c -InterruptEvent 0 -NGENProcess be0 -Pipe bcc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283358Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ba4 -InterruptEvent 0 -NGENProcess bbc -Pipe 428 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283360Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x386cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bb0 -InterruptEvent 0 -NGENProcess 484 -Pipe be0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283362Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bc4 -InterruptEvent 0 -NGENProcess 3e4 -Pipe 44c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283364Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess bc8 -Pipe 47c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283366Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3498C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e4 -InterruptEvent 0 -NGENProcess bf4 -Pipe bc4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283368Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bac -InterruptEvent 0 -NGENProcess ba0 -Pipe bb4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283370Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1848C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bf4 -InterruptEvent 0 -NGENProcess 3d0 -Pipe 3e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283372Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bd4 -InterruptEvent 0 -NGENProcess bc8 -Pipe bb8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283374Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 474 -InterruptEvent 0 -NGENProcess bfc -Pipe 498 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283377Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b9c -InterruptEvent 0 -NGENProcess 368 -Pipe 3c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283379Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d8 -InterruptEvent 0 -NGENProcess bf4 -Pipe bfc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283381Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d0 -InterruptEvent 0 -NGENProcess 418 -Pipe b78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283383Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x794C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ba4 -InterruptEvent 0 -NGENProcess b5c -Pipe 4d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283385Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b6c -InterruptEvent 0 -NGENProcess b68 -Pipe b64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283387Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bbc -InterruptEvent 0 -NGENProcess b5c -Pipe 418 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283389Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xaecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b68 -InterruptEvent 0 -NGENProcess 3d0 -Pipe b6c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283391Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d4 -InterruptEvent 0 -NGENProcess 3a4 -Pipe b70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283393Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 474 -InterruptEvent 0 -NGENProcess 3d0 -Pipe b9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283395Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1cb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 3f8 -Pipe 45c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283397Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3468C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 434 -InterruptEvent 0 -NGENProcess aa4 -Pipe b60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283399Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be8 -InterruptEvent 0 -NGENProcess 3f8 -Pipe 4e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283401Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3364C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess 410 -Pipe 3a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283403Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 430 -InterruptEvent 0 -NGENProcess 3f8 -Pipe ba4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283405Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac0 -InterruptEvent 0 -NGENProcess ac4 -Pipe ae0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283407Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x42cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283408Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e34C:\Windows\System32\conhost.exe%%19360x42c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283409Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 504 -InterruptEvent 0 -NGENProcess bbc -Pipe a38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283411Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x348cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 434 -InterruptEvent 0 -NGENProcess ac0 -Pipe ac4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283413Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bbc -InterruptEvent 0 -NGENProcess 49c -Pipe 444 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283415Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2838C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d4 -InterruptEvent 0 -NGENProcess be8 -Pipe 4b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283417Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x450C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f8 -InterruptEvent 0 -NGENProcess a50 -Pipe 4ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283419Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 430 -InterruptEvent 0 -NGENProcess a34 -Pipe 434 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283424Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283425Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa00C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d0 -InterruptEvent 0 -NGENProcess 3cc -Pipe 4c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283427Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3774C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 938 -InterruptEvent 0 -NGENProcess 4c8 -Pipe b5c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283429Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3404C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aec -InterruptEvent 0 -NGENProcess a48 -Pipe b28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283431Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b34 -InterruptEvent 0 -NGENProcess 4e0 -Pipe 39c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283433Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b0 -InterruptEvent 0 -NGENProcess aa0 -Pipe 4f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283437Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3da4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a48 -InterruptEvent 0 -NGENProcess 4e0 -Pipe 4a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283439Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ae4 -InterruptEvent 0 -NGENProcess b20 -Pipe aa4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283441Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 504 -InterruptEvent 0 -NGENProcess 938 -Pipe 4c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283443Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x151cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aa0 -InterruptEvent 0 -NGENProcess 430 -Pipe ad4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283445Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess b20 -Pipe 4ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283447Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess a48 -Pipe 4b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283449Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ed8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess ae4 -Pipe aa0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283451Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess a9c -Pipe bf4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283453Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess ac0 -Pipe 4e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283455Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b18 -InterruptEvent 0 -NGENProcess 450 -Pipe b04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283457Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 994 -InterruptEvent 0 -NGENProcess 938 -Pipe a94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283459Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b18 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 4d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283461Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess 450 -Pipe 4e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283463Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ddcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f8 -InterruptEvent 0 -NGENProcess 514 -Pipe ae4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283465Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x82cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f8 -InterruptEvent 0 -NGENProcess b24 -Pipe 4bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283467Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1cdcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a50 -InterruptEvent 0 -NGENProcess a48 -Pipe a9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283469Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a50 -InterruptEvent 0 -NGENProcess b24 -Pipe 4d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283471Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x385cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess 990 -Pipe 410 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283473Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f8 -InterruptEvent 0 -NGENProcess 3d4 -Pipe 8fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283475Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 504 -InterruptEvent 0 -NGENProcess ac0 -Pipe 3d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283477Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3990C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d4 -InterruptEvent 0 -NGENProcess a48 -Pipe 4f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283479Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x357cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess ac0 -Pipe 990 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283481Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be8 -InterruptEvent 0 -NGENProcess a48 -Pipe 3f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283483Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b34 -InterruptEvent 0 -NGENProcess b20 -Pipe 470 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283486Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1794C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac0 -InterruptEvent 0 -NGENProcess a34 -Pipe 3d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283488Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent adc -InterruptEvent 0 -NGENProcess be8 -Pipe a48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283490Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3530C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b24 -InterruptEvent 0 -NGENProcess 938 -Pipe b18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283492Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3430C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess 430 -Pipe be8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283494Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3becC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess b34 -Pipe 424 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283496Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess 998 -Pipe 504 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283498Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3accC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aec -InterruptEvent 0 -NGENProcess 994 -Pipe 4c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283500Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x70cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess bbc -Pipe 50c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283502Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2f08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b68 -InterruptEvent 0 -NGENProcess a50 -Pipe 994 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283504Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 938 -InterruptEvent 0 -NGENProcess 97c -Pipe a34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283506Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2918C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b80 -InterruptEvent 0 -NGENProcess adc -Pipe b8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283508Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess 97c -Pipe a80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283510Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2454C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess 4a0 -Pipe 41c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283512Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3650C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess 514 -Pipe 48c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283514Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xc6cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283515Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1a48C:\Windows\System32\conhost.exe%%19360xc6c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283516Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3278C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b7c -InterruptEvent 0 -NGENProcess 430 -Pipe b20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283518Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b00 -InterruptEvent 0 -NGENProcess 4a4 -Pipe b24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283520Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 97c -InterruptEvent 0 -NGENProcess ac0 -Pipe 464 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283522Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b7c -InterruptEvent 0 -NGENProcess 938 -Pipe 394 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283524Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 450 -InterruptEvent 0 -NGENProcess b84 -Pipe 420 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283526Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bac -InterruptEvent 0 -NGENProcess 938 -Pipe bf0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283531Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bacC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283534Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bd4 -InterruptEvent 0 -NGENProcess ba0 -Pipe 97c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283536Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bf8 -InterruptEvent 0 -NGENProcess 484 -Pipe 4a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283538Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3610C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess b7c -Pipe b84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283540Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3344C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a50 -InterruptEvent 0 -NGENProcess ba0 -Pipe b80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283542Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 52c -InterruptEvent 0 -NGENProcess b4c -Pipe 3c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283544Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess a50 -Pipe 4c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283546Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b7c -InterruptEvent 0 -NGENProcess b00 -Pipe bc8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283548Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bd4 -InterruptEvent 0 -NGENProcess b58 -Pipe 938 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283550Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b58 -InterruptEvent 0 -NGENProcess b10 -Pipe bd4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283552Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x255cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b90 -InterruptEvent 0 -NGENProcess b10 -Pipe 3cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283554Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 448 -Pipe ba0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283556Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess ac0 -Pipe 450 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283569Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x348cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b00 -InterruptEvent 0 -NGENProcess b58 -Pipe adc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283571Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aec -InterruptEvent 0 -NGENProcess 998 -Pipe 430 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283578Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x156cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b90 -InterruptEvent 0 -NGENProcess 4a4 -Pipe bb0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283579Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a50 -InterruptEvent 0 -NGENProcess ac0 -Pipe 52c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283581Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 500 -InterruptEvent 0 -NGENProcess 514 -Pipe ac0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283590Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 474 -Pipe 438 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283593Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 448 -InterruptEvent 0 -NGENProcess 484 -Pipe b00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283595Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1408C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e0 -InterruptEvent 0 -NGENProcess bf8 -Pipe 484 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283597Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b90 -InterruptEvent 0 -NGENProcess 368 -Pipe b7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283599Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x42cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e0 -InterruptEvent 0 -NGENProcess 538 -Pipe 448 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283601Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b90 -InterruptEvent 0 -NGENProcess a50 -Pipe 318 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283603Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bf8 -InterruptEvent 0 -NGENProcess 3f4 -Pipe b88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283605Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 500 -InterruptEvent 0 -NGENProcess aec -Pipe 514 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283607Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess 404 -Pipe 3f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283609Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 538 -InterruptEvent 0 -NGENProcess 500 -Pipe aec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283611Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 490 -InterruptEvent 0 -NGENProcess b4c -Pipe 554 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283613Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b68 -InterruptEvent 0 -NGENProcess b90 -Pipe 500 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283615Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b10 -InterruptEvent 0 -NGENProcess b58 -Pipe bf8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283623Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b58 -InterruptEvent 0 -NGENProcess 488 -Pipe b10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283625Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37a4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283626Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1278C:\Windows\System32\conhost.exe%%19360x37a4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283627Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ae8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b90 -InterruptEvent 0 -NGENProcess b2c -Pipe 534 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283629Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2854C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 518 -Pipe 53c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283631Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 460 -Pipe 3e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283633Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5b8 -InterruptEvent 0 -NGENProcess 42c -Pipe 368 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283635Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 518 -Pipe 5d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283637Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x242cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess b2c -Pipe 5b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283642Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f70C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283643Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e8 -InterruptEvent 0 -NGENProcess 508 -Pipe 5c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283645Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ac -InterruptEvent 0 -NGENProcess 568 -Pipe 5f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283647Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x27d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e8 -InterruptEvent 0 -NGENProcess 588 -Pipe 598 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283649Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ac -InterruptEvent 0 -NGENProcess 5f0 -Pipe 4b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283651Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x380cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ac -InterruptEvent 0 -NGENProcess 4a4 -Pipe 5bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283653Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b2c -InterruptEvent 0 -NGENProcess 568 -Pipe 4f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283655Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2870C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 524 -InterruptEvent 0 -NGENProcess 58c -Pipe bbc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283659Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x9ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 570 -Pipe b2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283661Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32f0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e8 -InterruptEvent 0 -NGENProcess 460 -Pipe 590 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283663Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x324cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 518 -Pipe b68 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283665Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 588 -InterruptEvent 0 -NGENProcess 488 -Pipe 998 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283667Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f4 -InterruptEvent 0 -NGENProcess 560 -Pipe 460 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283669Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess b90 -Pipe 404 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283671Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b90 -InterruptEvent 0 -NGENProcess 524 -Pipe 414 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283673Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3500C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e8 -InterruptEvent 0 -NGENProcess 488 -Pipe a50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283675Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2afcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 518 -InterruptEvent 0 -NGENProcess 490 -Pipe 560 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283677Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aa8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bac -InterruptEvent 0 -NGENProcess 5e8 -Pipe 530 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283679Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fa8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 408 -InterruptEvent 0 -NGENProcess 594 -Pipe b34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283681Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x628C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b58 -InterruptEvent 0 -NGENProcess 42c -Pipe b90 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283683Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a00C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 594 -InterruptEvent 0 -NGENProcess 490 -Pipe 408 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283685Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3498C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 568 -InterruptEvent 0 -NGENProcess 40c -Pipe 5cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283687Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3650C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 490 -Pipe 3f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283689Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b4c -InterruptEvent 0 -NGENProcess 474 -Pipe 5ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283691Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a0 -InterruptEvent 0 -NGENProcess 518 -Pipe 5dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283693Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x395cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 518 -InterruptEvent 0 -NGENProcess 40c -Pipe 5a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283695Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x378C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 490 -InterruptEvent 0 -NGENProcess 570 -Pipe 550 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283697Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b58 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 508 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283699Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 518 -InterruptEvent 0 -NGENProcess 474 -Pipe 40c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283701Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 474 -InterruptEvent 0 -NGENProcess 488 -Pipe 518 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283703Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess bac -Pipe 474 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283705Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1174C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 490 -InterruptEvent 0 -NGENProcess 524 -Pipe 594 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283707Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3834C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 548 -InterruptEvent 0 -NGENProcess 4a4 -Pipe 588 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283709Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3facC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b58 -InterruptEvent 0 -NGENProcess 540 -Pipe 42c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283711Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e8 -InterruptEvent 0 -NGENProcess 540 -Pipe bac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283713Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5c4 -InterruptEvent 0 -NGENProcess 538 -Pipe b58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283715Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 538 -InterruptEvent 0 -NGENProcess 490 -Pipe 5c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283717Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x382cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 490 -InterruptEvent 0 -NGENProcess 524 -Pipe 538 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283719Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2df4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 634 -Pipe b4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283721Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x68cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 620 -InterruptEvent 0 -NGENProcess 628 -Pipe 488 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283723Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 634 -InterruptEvent 0 -NGENProcess 570 -Pipe 3bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283725Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 56c -Pipe 640 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283727Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 544 -InterruptEvent 0 -NGENProcess 624 -Pipe 568 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283729Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 51c -InterruptEvent 0 -NGENProcess 570 -Pipe 634 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283731Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3814C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess 5a8 -Pipe 58c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283733Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e0 -InterruptEvent 0 -NGENProcess 59c -Pipe 608 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283735Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 524 -InterruptEvent 0 -NGENProcess 62c -Pipe 624 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283737Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f0 -InterruptEvent 0 -NGENProcess 62c -Pipe 4a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283739Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bf8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 548 -InterruptEvent 0 -NGENProcess 604 -Pipe 5a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283741Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 4fc -Pipe 5e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283743Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a4 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 614 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283745Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3298C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5d4 -InterruptEvent 0 -NGENProcess 524 -Pipe 5a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283748Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4fc -InterruptEvent 0 -NGENProcess 540 -Pipe 570 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283750Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x393cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 57c -InterruptEvent 0 -NGENProcess 490 -Pipe 5e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283752Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 490 -InterruptEvent 0 -NGENProcess 540 -Pipe 57c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283754Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 4fc -Pipe 51c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283756Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xac8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 620 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 544 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283758Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 5ec -Pipe 490 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283760Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3da0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 4fc -Pipe 56c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283762Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 60c -Pipe 5d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283764Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3848C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 524 -Pipe 528 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283766Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2574C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283767Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3818C:\Windows\System32\conhost.exe%%19360x2574\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283768Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 620 -InterruptEvent 0 -NGENProcess 510 -Pipe 4fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283770Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3974C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 580 -InterruptEvent 0 -NGENProcess 604 -Pipe 510 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283772Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 670 -InterruptEvent 0 -NGENProcess 580 -Pipe 62c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283774Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3658C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 480 -InterruptEvent 0 -NGENProcess 650 -Pipe 644 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283776Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 638 -Pipe 604 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283778Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x330cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 5ec -Pipe 65c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283780Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 628 -InterruptEvent 0 -NGENProcess 524 -Pipe 670 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283782Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x398cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4cc -InterruptEvent 0 -NGENProcess 548 -Pipe 5b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283787Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x159cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283788Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9dc -InterruptEvent 0 -NGENProcess 548 -Pipe a10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283790Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3990C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 99c -InterruptEvent 0 -NGENProcess 96c -Pipe a08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283792Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x357cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 638 -InterruptEvent 0 -NGENProcess 944 -Pipe 5b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283794Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ad8 -InterruptEvent 0 -NGENProcess 524 -Pipe 9f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283798Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 524 -InterruptEvent 0 -NGENProcess 620 -Pipe ad8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283800Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3730C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe%%19360x948"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource schedulerS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003283802Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dbcC:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:Global.Accounts.AppXqe94epy97qwa6w3j6w132e8zvcs117nd.mcaS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003283830Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ab0 -InterruptEvent 0 -NGENProcess 920 -Pipe 524 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283832Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ee8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283833Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b78C:\Windows\System32\conhost.exe%%19360x3ee8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283834Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 620 -InterruptEvent 0 -NGENProcess 99c -Pipe 978 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283836Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 988 -Pipe 99c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283838Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9dc -InterruptEvent 0 -NGENProcess ab0 -Pipe 96c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 86c -InterruptEvent 0 -NGENProcess 880 -Pipe 8b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283842Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8f8 -InterruptEvent 0 -NGENProcess 910 -Pipe 88c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283844Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3db4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ab0 -InterruptEvent 0 -NGENProcess 84c -Pipe 910 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283846Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x200cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 280 -InterruptEvent 0 -NGENProcess 840 -Pipe 944 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283851Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd54C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283852Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xde0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4cc -InterruptEvent 0 -NGENProcess 988 -Pipe 9dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283854Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 820 -InterruptEvent 0 -NGENProcess 880 -Pipe 8b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283856Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 548 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 638 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283858Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 5ec -Pipe 884 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283860Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 650 -InterruptEvent 0 -NGENProcess 520 -Pipe 628 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283862Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 650 -InterruptEvent 0 -NGENProcess 5d0 -Pipe 480 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283866Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 520 -InterruptEvent 0 -NGENProcess 548 -Pipe 988 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283868Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x610C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 55c -InterruptEvent 0 -NGENProcess 580 -Pipe 4cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283870Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 888 -InterruptEvent 0 -NGENProcess 650 -Pipe 528 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 880 -InterruptEvent 0 -NGENProcess 5d0 -Pipe 650 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283874Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bc4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 280 -InterruptEvent 0 -NGENProcess 894 -Pipe ab0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283876Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3344C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 280 -Pipe 520 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283878Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 84c -InterruptEvent 0 -NGENProcess 920 -Pipe 840 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283880Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x186cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 920 -InterruptEvent 0 -NGENProcess 894 -Pipe 84c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283882Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32bcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 55c -InterruptEvent 0 -NGENProcess 92c -Pipe 89c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283884Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3468C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 86c -Pipe 620 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283886Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 280 -InterruptEvent 0 -NGENProcess 548 -Pipe 580 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283888Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 540 -Pipe 820 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283890Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cdcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 92c -InterruptEvent 0 -NGENProcess 5f0 -Pipe 548 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283892Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 8e8 -Pipe 880 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283894Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 920 -Pipe 280 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283896Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 86c -Pipe 8e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283898Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3944C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 5d0 -Pipe 888 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283900Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a24 -InterruptEvent 0 -NGENProcess 60c -Pipe 540 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283902Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 92c -InterruptEvent 0 -NGENProcess 7a0 -Pipe 894 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283904Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 55c -InterruptEvent 0 -NGENProcess 9b8 -Pipe a24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283906Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3580C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f0 -InterruptEvent 0 -NGENProcess 60c -Pipe 920 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283908Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dfcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f0 -InterruptEvent 0 -NGENProcess 9b8 -Pipe 5d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283910Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c04 -InterruptEvent 0 -NGENProcess 92c -Pipe 8f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283912Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 5f0 -Pipe 55c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283914Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c08 -InterruptEvent 0 -NGENProcess 5ec -Pipe 92c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283916Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3750C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 5f0 -Pipe c08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283918Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c10 -InterruptEvent 0 -NGENProcess c34 -Pipe c3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283920Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c0c -InterruptEvent 0 -NGENProcess c14 -Pipe c18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283922Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9b8 -InterruptEvent 0 -NGENProcess 5ec -Pipe c40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283924Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x151cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c54 -InterruptEvent 0 -NGENProcess 86c -Pipe c58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283927Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9b8 -InterruptEvent 0 -NGENProcess c14 -Pipe 5f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283929Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c44 -InterruptEvent 0 -NGENProcess c50 -Pipe c48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283931Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2f50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c60 -InterruptEvent 0 -NGENProcess 60c -Pipe c5c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283933Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ca8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283934Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x280cC:\Windows\System32\conhost.exe%%19360x3ca8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283935Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c30 -InterruptEvent 0 -NGENProcess c50 -Pipe c10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283940Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283941Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess c14 -Pipe c60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283945Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3638C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 86c -Pipe c14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283947Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 43c -InterruptEvent 0 -NGENProcess c50 -Pipe c4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283949Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c20 -InterruptEvent 0 -NGENProcess 86c -Pipe c70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283951Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c84 -InterruptEvent 0 -NGENProcess 43c -Pipe c44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283953Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x398cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 43c -InterruptEvent 0 -NGENProcess c04 -Pipe c84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283955Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c80 -InterruptEvent 0 -NGENProcess c38 -Pipe c74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283957Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x157cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 290 -InterruptEvent 0 -NGENProcess 314 -Pipe 5ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283959Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c04 -InterruptEvent 0 -NGENProcess c38 -Pipe 43c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283972Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x381cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c88 -InterruptEvent 0 -NGENProcess c34 -Pipe c7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283975Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ffcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cac -InterruptEvent 0 -NGENProcess c24 -Pipe ca8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283978Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2930C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003283979Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bdcC:\Windows\System32\conhost.exe%%19360x2930\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003283980Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2870C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 314 -InterruptEvent 0 -NGENProcess c0c -Pipe 290 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283982Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cc8 -InterruptEvent 0 -NGENProcess c98 -Pipe cc4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003283988Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cd4 -InterruptEvent 0 -NGENProcess c90 -Pipe ccc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283990Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c90 -InterruptEvent 0 -NGENProcess cb4 -Pipe cd4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283994Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ca4 -InterruptEvent 0 -NGENProcess ce0 -Pipe cdc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283996Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1838C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cc8 -InterruptEvent 0 -NGENProcess cac -Pipe c0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003283998Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c24 -InterruptEvent 0 -NGENProcess ce4 -Pipe c8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284006Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x197cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c54 -InterruptEvent 0 -NGENProcess c30 -Pipe cc8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284011Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3650C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess cd0 -Pipe c24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284013Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x383cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cf0 -InterruptEvent 0 -NGENProcess d08 -Pipe ce8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284015Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cf4 -InterruptEvent 0 -NGENProcess c1c -Pipe ce4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284017Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26a0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284018Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x19acC:\Windows\System32\conhost.exe%%19360x26a0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284019Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3078C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cf4 -InterruptEvent 0 -NGENProcess c2c -Pipe d14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284024Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284028Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fd4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284029Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xf10C:\Windows\System32\conhost.exe%%19360x3fd4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284033Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20e0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284036Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess c90 -Pipe cf4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284038Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x458C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d10 -InterruptEvent 0 -NGENProcess cfc -Pipe d0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284040Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d00 -InterruptEvent 0 -NGENProcess cb0 -Pipe d10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284042Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x333cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c1c -InterruptEvent 0 -NGENProcess c94 -Pipe cb0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284044Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x938C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c34 -InterruptEvent 0 -NGENProcess cac -Pipe cb4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284046Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2810C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cac -InterruptEvent 0 -NGENProcess c50 -Pipe c34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284048Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c88 -InterruptEvent 0 -NGENProcess c98 -Pipe c04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284051Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cd8 -InterruptEvent 0 -NGENProcess d2c -Pipe d00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284053Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2998C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d28 -InterruptEvent 0 -NGENProcess c50 -Pipe d1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284055Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d20 -InterruptEvent 0 -NGENProcess c38 -Pipe d30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284057Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2838C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284058Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3588C:\Windows\System32\conhost.exe%%19360x2838\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284062Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36f8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284077Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x345cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284078Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x970C:\Windows\System32\conhost.exe%%19360x345c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284082Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284086Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3774C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284087Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bf0C:\Windows\System32\conhost.exe%%19360x3774\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284088Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3630C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c98 -InterruptEvent 0 -NGENProcess c50 -Pipe ca0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284090Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3748C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d34 -InterruptEvent 0 -NGENProcess c88 -Pipe c80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284095Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x42cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284098Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bdcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d58 -InterruptEvent 0 -NGENProcess d48 -Pipe d50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284100Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d68 -InterruptEvent 0 -NGENProcess d5c -Pipe d64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284102Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d24 -InterruptEvent 0 -NGENProcess d3c -Pipe d38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284104Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d70 -InterruptEvent 0 -NGENProcess 60c -Pipe d60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284108Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d98 -InterruptEvent 0 -NGENProcess d5c -Pipe d94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284110Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1a50C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284111Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2030C:\Windows\System32\conhost.exe%%19360x1a50\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284112Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b90C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d20 -InterruptEvent 0 -NGENProcess c88 -Pipe d7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284118Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3878C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284122Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cd8 -InterruptEvent 0 -NGENProcess c9c -Pipe d2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284124Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d40 -InterruptEvent 0 -NGENProcess d5c -Pipe d18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284126Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 618 -InterruptEvent 0 -NGENProcess 64c -Pipe 6bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284128Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1410C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 64c -InterruptEvent 0 -NGENProcess 54c -Pipe 618 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284130Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x351cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c88 -InterruptEvent 0 -NGENProcess 578 -Pipe 684 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284132Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3638C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dc4 -InterruptEvent 0 -NGENProcess dc8 -Pipe da8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284134Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a8 -InterruptEvent 0 -NGENProcess d48 -Pipe d98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284137Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dcc -InterruptEvent 0 -NGENProcess dd4 -Pipe dac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284143Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284144Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e58C:\Windows\System32\conhost.exe%%19360x38f8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284145Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3670C:\Windows\System32\LogonUI.exe%%19360x304"LogonUI.exe" /flags:0x0 /state0:0xa2d2c055 /state1:0x41c64e6dS-1-0-0--0x0C:\Windows\System32\winlogon.exeS-1-16-16384 +4688201331200x80200000000000003284146Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x157cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent de8 -InterruptEvent 0 -NGENProcess df0 -Pipe de0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284148Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dfc -InterruptEvent 0 -NGENProcess df4 -Pipe df8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284150Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 694 -InterruptEvent 0 -NGENProcess dc0 -Pipe dbc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284155Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x279cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284158Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3730C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284159Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x267cC:\Windows\System32\conhost.exe%%19360x3730\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284163Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c74C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe KEYROAMINGS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003284167Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k CameraMonitorS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284175Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284198Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x450C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dd4 -InterruptEvent 0 -NGENProcess db8 -Pipe dec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284206Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e10 -InterruptEvent 0 -NGENProcess e14 -Pipe 6a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284208Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e0c -InterruptEvent 0 -NGENProcess e04 -Pipe e08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284212Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3824C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ddc -InterruptEvent 0 -NGENProcess 54c -Pipe df0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284216Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dc8 -InterruptEvent 0 -NGENProcess e04 -Pipe dcc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003284235Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x25d8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k Camera -s FrameServerS-1-5-19LOCAL SERVICENT AUTHORITY0x3e5C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284251Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k CameraMonitorS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284340Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x280cC:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe networkS-1-0-0SOC101WIN11$WORKGROUP0x3e4C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003284360Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d0C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exe%%19360x3e4"C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exe" -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003284368Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b08C:\Windows\System32\cmd.exe%%19360x1130C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\resume-vm-default.bat""S-1-0-0--0x0C:\Program Files\VMware\VMware Tools\vmtoolsd.exeS-1-16-16384 +4688201331200x80200000000000003284382Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3638C:\Windows\System32\conhost.exe%%19360x1b08\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\cmd.exeS-1-16-16384 +4688201331200x80200000000000003284404Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e8C:\Windows\System32\ipconfig.exe%%19360x1b08C:\WINDOWS\system32\ipconfig /renewS-1-0-0--0x0C:\Windows\System32\cmd.exeS-1-16-16384 +4688201331200x80200000000000003284416Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab8C:\Windows\System32\wermgr.exe%%19360x948"C:\WINDOWS\system32\wermgr.exe" -uploadS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003284465Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2028C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhostsS-1-5-19LOCAL SERVICENT AUTHORITY0x3e5C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284473Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ffcC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exe%%19360x3e4"C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exe" -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003284497Securitysoc101win11S-1-5-20SOC101WIN11$WORKGROUP0x3e40x3284C:\Windows\System32\slui.exe%%19360x3de8"C:\WINDOWS\System32\SLUI.exe" RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=89e87510-ba92-45f6-8329-3afa905e3e83;NotificationInterval=1440;Trigger=NetworkAvailableS-1-0-0--0x0C:\Windows\System32\SppExtComObj.ExeS-1-16-16384 +4688201331200x80200000000000003284507Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa00C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k wsappx -p -s ClipSVCS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284511Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b44C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284512Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39d0C:\Windows\System32\conhost.exe%%19360x3b44\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284537Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3720C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284539Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284541Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26ecC:\Windows\System32\conhost.exe%%19360x3d1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284546Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xde0C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe networkS-1-0-0SOC101WIN11$WORKGROUP0x3e4C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003284552Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f34C:\Windows\System32\ctfmon.exe%%19360xb34/QuitInfo:00000000000002C0;00000000000002C8; S-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003284553Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x393cC:\Windows\System32\slui.exe%%19360x3e4C:\WINDOWS\System32\slui.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003284564Securitysoc101win11S-1-5-20SOC101WIN11$WORKGROUP0x3e40x624C:\Windows\System32\slui.exe%%19360x3de8"C:\WINDOWS\System32\SLUI.exe" RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=89e87510-ba92-45f6-8329-3afa905e3e83;NotificationInterval=1440;Trigger=NetworkAvailableS-1-0-0--0x0C:\Windows\System32\SppExtComObj.ExeS-1-16-16384 +4688201331200x80200000000000003284696Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d50C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284697Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e78C:\Windows\System32\conhost.exe%%19360x3d50\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284710Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f90C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284793Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3488C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exeS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003284804Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k CameraMonitorS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284813Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a90C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe KEYROAMINGS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003284850Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xf34C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284851Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b98C:\Windows\System32\conhost.exe%%19360xf34\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284855Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1dd4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284887Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3678C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284888Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x381cC:\Windows\System32\conhost.exe%%19360x3678\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284892Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3968C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284926Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26ecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284927Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x195cC:\Windows\System32\conhost.exe%%19360x26ec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284931Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3db0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284939Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39a8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284940Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dbcC:\Windows\System32\conhost.exe%%19360x39a8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284944Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1dc0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284955Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c94C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284956Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b08C:\Windows\System32\conhost.exe%%19360x1c94\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284960Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1838C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284971Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003284972Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x385cC:\Windows\System32\conhost.exe%%19360x3c80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003284976Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ca4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003284995Securitysoc101win11S-1-5-19LOCAL SERVICENT AUTHORITY0x3e50x152cC:\Windows\System32\audiodg.exe%%19360xad8C:\WINDOWS\system32\AUDIODG.EXE 0x0000000000000484 0x0000000000000470S-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003285000Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7c8C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe -flow showtoast -checkup recoverabilityS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003285010Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x24d8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285011Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13d8C:\Windows\System32\conhost.exe%%19360x24d8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285016Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b74C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285028Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1dd4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285029Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xba8C:\Windows\System32\conhost.exe%%19360x1dd4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285033Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3974C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285040Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xea8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285041Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bf0C:\Windows\System32\conhost.exe%%19360xea8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285045Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3924C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285049Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3870C:\Windows\System32\SearchProtocolHost.exe%%19360x26c4"C:\WINDOWS\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe21_ Global\UsGthrCtrlFltPipeMssGthrPipe21 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" S-1-0-0--0x0C:\Windows\System32\SearchIndexer.exeS-1-16-16384 +4688201331200x80200000000000003285050Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e58C:\Windows\System32\SearchFilterHost.exe%%19360x26c4"C:\WINDOWS\System32\SearchFilterHost.exe" 896 3600 3584 880 {7E9D8D44-6926-426F-AA2B-217A819A5CCE}S-1-0-0--0x0C:\Windows\System32\SearchIndexer.exeS-1-16-8192 +4688201331200x80200000000000003285052Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f08C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285053Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b80C:\Windows\System32\conhost.exe%%19360x3f08\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285057Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1afcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285088Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3378C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285089Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3410C:\Windows\System32\conhost.exe%%19360x3378\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285093Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c80C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285096Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ec0C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe%%19360xe5c"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --no-pre-read-main-dll --ram-no-pressure-read-main-dll --metrics-shmem-handle=308,i,9222595663688768981,7885029953436477577,524288 --field-trial-handle=2352,i,15205593387111654540,16252463628370879391,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:14S-1-0-0--0x0C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeS-1-16-12288 +4688201331200x80200000000000003285129Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bfcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285130Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xf34C:\Windows\System32\conhost.exe%%19360x3bfc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285140Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x610C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285164Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1a84C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285165Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x620C:\Windows\System32\conhost.exe%%19360x1a84\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285169Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x366cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285173Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x27f8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285174Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34a0C:\Windows\System32\conhost.exe%%19360x27f8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285178Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x390cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285193Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x381cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285194Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x16b8C:\Windows\System32\conhost.exe%%19360x381c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285198Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3284C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285213Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1530C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285214Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32a8C:\Windows\System32\conhost.exe%%19360x1530\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285218Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x379cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285230Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c94C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285231Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3750C:\Windows\System32\conhost.exe%%19360x1c94\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285235Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3844C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285243Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a68C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285244Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3728C:\Windows\System32\conhost.exe%%19360x3a68\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285248Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x257cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285280Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285281Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e5cC:\Windows\System32\conhost.exe%%19360x3c80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285285Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37ccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285295Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1408C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285296Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3474C:\Windows\System32\conhost.exe%%19360x1408\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285300Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285309Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c70C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285310Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32bcC:\Windows\System32\conhost.exe%%19360x3c70\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285314Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bf4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285320Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2cfcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285321Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x44C:\Windows\System32\conhost.exe%%19360x2cfc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285325Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1538C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285346Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285347Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x628C:\Windows\System32\conhost.exe%%19360x3e04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285351Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a00C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285358Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2094C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285359Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34e0C:\Windows\System32\conhost.exe%%19360x2094\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285363Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x290cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285372Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3504C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285373Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fa8C:\Windows\System32\conhost.exe%%19360x3504\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285377Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x450C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285391Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d00C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285392Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x814C:\Windows\System32\conhost.exe%%19360x3d00\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285396Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f90C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285415Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2038C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285416Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b1cC:\Windows\System32\conhost.exe%%19360x2038\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e80C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285423Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3410C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exeS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003285429Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3728C:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003285432Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x279cC:\Windows\System32\RuntimeBroker.exe%%19360x3e4C:\Windows\System32\RuntimeBroker.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003285439Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b0cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285440Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b3cC:\Windows\System32\conhost.exe%%19360x3b0c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285444Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285449Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fe8C:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003285452Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e18C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285453Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x4d8C:\Windows\System32\conhost.exe%%19360x3e18\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285457Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x12fcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285472Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29a8C:\Windows\System32\sdbinst.exe%%19360x1db8C:\WINDOWS\System32\sdbinst.exe -m -bgS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003285473Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3648C:\Windows\System32\conhost.exe%%19360x29a8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\sdbinst.exeS-1-16-16384 +4688201331200x80200000000000003285478Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x396cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285479Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x33c0C:\Windows\System32\conhost.exe%%19360x396c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285483Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d40C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285498Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb4cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285499Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bc8C:\Windows\System32\conhost.exe%%19360xb4c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285503Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc7cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285511Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2cd8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285512Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x370cC:\Windows\System32\conhost.exe%%19360x2cd8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285516Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d28C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285521Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e94C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285522Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2954C:\Windows\System32\conhost.exe%%19360x3e94\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285526Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x820C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285541Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18c4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauservS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285649Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3268C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285650Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x18f0C:\Windows\System32\conhost.exe%%19360x3268\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285654Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6e4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285701Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e70C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285702Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26a4C:\Windows\System32\conhost.exe%%19360x3e70\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285706Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3644C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285712Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ee0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285713Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2ee0C:\Windows\System32\conhost.exe%%19360x3ee0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285717Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c8cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285731Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3504C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285732Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x42cC:\Windows\System32\conhost.exe%%19360x3504\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285736Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3848C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285746Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285747Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a04C:\Windows\System32\conhost.exe%%19360x3f24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285751Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f58C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285782Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36b8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285783Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2358C:\Windows\System32\conhost.exe%%19360x36b8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285787Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1100C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285795Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b58C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285796Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3844C:\Windows\System32\conhost.exe%%19360x2b58\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285800Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34acC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285806Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3534C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285807Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x373cC:\Windows\System32\conhost.exe%%19360x3534\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285811Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285817Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8d8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285818Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2564C:\Windows\System32\conhost.exe%%19360x8d8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285822Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285840Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x382cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285841Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cd4C:\Windows\System32\conhost.exe%%19360x382c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285845Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bb4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285849Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3468C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285850Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x380cC:\Windows\System32\conhost.exe%%19360x3468\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285854Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d5cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285858Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x17a4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285859Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39e4C:\Windows\System32\conhost.exe%%19360x17a4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285863Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3418C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285867Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1284C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285868Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ca4C:\Windows\System32\conhost.exe%%19360x1284\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3384C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285887Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b28C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285888Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f0C:\Windows\System32\conhost.exe%%19360x3b28\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285893Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285901Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1d30C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285902Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c78C:\Windows\System32\conhost.exe%%19360x1d30\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285906Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3accC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285910Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285911Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a54C:\Windows\System32\conhost.exe%%19360x8d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285915Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285939Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3994C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285940Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3230C:\Windows\System32\conhost.exe%%19360x3994\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285944Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ae8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003285978Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fb4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003285979Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dd0C:\Windows\System32\conhost.exe%%19360x3fb4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003285983Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a10C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286001Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3438C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286002Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1268C:\Windows\System32\conhost.exe%%19360x3438\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286006Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fa8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286010Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286011Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2780C:\Windows\System32\conhost.exe%%19360x3b04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286015Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286022Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fb0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286023Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x118C:\Windows\System32\conhost.exe%%19360x3fb0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286027Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26e8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286042Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286043Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d00C:\Windows\System32\conhost.exe%%19360x3c54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286047Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286052Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d14C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286053Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1768C:\Windows\System32\conhost.exe%%19360x3d14\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286057Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f04C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286065Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286066Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb1cC:\Windows\System32\conhost.exe%%19360x6c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286070Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3248C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286074Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cc4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286075Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a2cC:\Windows\System32\conhost.exe%%19360x3cc4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286079Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1f8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286094Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2bccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286095Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13fcC:\Windows\System32\conhost.exe%%19360x2bcc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286099Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286102Securitysoc101win11S-1-5-20SOC101WIN11$WORKGROUP0x3e40x19a0C:\Windows\System32\slui.exe%%19360x3de8"C:\WINDOWS\System32\SLUI.exe" RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=89e87510-ba92-45f6-8329-3afa905e3e83;NotificationInterval=1440;Trigger=NetworkQuarantineRetryS-1-0-0--0x0C:\Windows\System32\SppExtComObj.ExeS-1-16-16384 +4688201331200x80200000000000003286107Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bb4C:\Windows\System32\slui.exe%%19360x3e4C:\WINDOWS\System32\slui.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003286132Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286133Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d5cC:\Windows\System32\conhost.exe%%19360x2b20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286141Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x375cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286145Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286146Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ad0C:\Windows\System32\conhost.exe%%19360x3a8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286150Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3540C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286164Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x352cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286165Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3424C:\Windows\System32\conhost.exe%%19360x352c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286169Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x438C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286184Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286185Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b60C:\Windows\System32\conhost.exe%%19360x3a1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286189Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286193Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1730C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286194Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x21c4C:\Windows\System32\conhost.exe%%19360x1730\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286198Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286210Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x508C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe%%19360x32c4powershellS-1-0-0--0x0C:\Windows\System32\cmd.exeS-1-16-12288 +4688201331200x80200000000000003286231Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b08C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286232Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bc0C:\Windows\System32\conhost.exe%%19360x3b08\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286236Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2fa8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286242Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286243Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x362cC:\Windows\System32\conhost.exe%%19360x3a54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286247Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2414C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286265Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cf0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286266Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ae8C:\Windows\System32\conhost.exe%%19360x3cf0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286270Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26a0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286282Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ee0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286283Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1bdcC:\Windows\System32\conhost.exe%%19360x3ee0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286287Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e80C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286291Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286292Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3340C:\Windows\System32\conhost.exe%%19360x3c8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286296Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286300Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xcd0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286301Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xa24C:\Windows\System32\conhost.exe%%19360xcd0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286305Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286321Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2d04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286322Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x343cC:\Windows\System32\conhost.exe%%19360x2d04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286326Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x305cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286351Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f0cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286352Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb60C:\Windows\System32\conhost.exe%%19360x3f0c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286356Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x367cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286368Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286369Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3efcC:\Windows\System32\conhost.exe%%19360x3f04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286373Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cecC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286377Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b9cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286378Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2054C:\Windows\System32\conhost.exe%%19360x3b9c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286382Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e5cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286397Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fbcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286398Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3db0C:\Windows\System32\conhost.exe%%19360x3fbc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286402Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3860C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286406Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35a4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286407Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fa4C:\Windows\System32\conhost.exe%%19360x35a4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286411Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286415Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3648C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286416Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x28e8C:\Windows\System32\conhost.exe%%19360x3648\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286424Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286425Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3818C:\Windows\System32\conhost.exe%%19360xb8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286429Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b9cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286444Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f5cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286445Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c64C:\Windows\System32\conhost.exe%%19360x3f5c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286449Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x365cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286453Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36a0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286454Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13ccC:\Windows\System32\conhost.exe%%19360x36a0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286458Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a8cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286462Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x144cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286463Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x834C:\Windows\System32\conhost.exe%%19360x144c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286467Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34a0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286471Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b50C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286472Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2838C:\Windows\System32\conhost.exe%%19360x1b50\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286476Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a54C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286501Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fb8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286502Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x42cC:\Windows\System32\conhost.exe%%19360x1fb8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286506Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bfcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286512Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3874C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286513Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ad4C:\Windows\System32\conhost.exe%%19360x3874\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286517Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x820C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286535Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2710C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286536Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3950C:\Windows\System32\conhost.exe%%19360x2710\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286540Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bc0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286544Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3928C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286545Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3924C:\Windows\System32\conhost.exe%%19360x3928\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286549Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3644C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286566Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36a4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286567Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1bdcC:\Windows\System32\conhost.exe%%19360x36a4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286571Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2464C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286577Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x9ecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286578Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e10C:\Windows\System32\conhost.exe%%19360x9ec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286582Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e68C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286586Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3834C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286587Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34b0C:\Windows\System32\conhost.exe%%19360x3834\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286591Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x289cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286597Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1564C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286598Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32b8C:\Windows\System32\conhost.exe%%19360x1564\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286602Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286622Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286623Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f64C:\Windows\System32\conhost.exe%%19360x3d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286627Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c7cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286632Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3518C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286633Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2454C:\Windows\System32\conhost.exe%%19360x3518\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286637Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x114cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286641Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3efcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286642Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3954C:\Windows\System32\conhost.exe%%19360x3efc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286646Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3844C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286650Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x381cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286651Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3828C:\Windows\System32\conhost.exe%%19360x381c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286655Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7ccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286670Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3700C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286671Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x397cC:\Windows\System32\conhost.exe%%19360x3700\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286675Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286683Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c60C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286684Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3910C:\Windows\System32\conhost.exe%%19360x3c60\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286688Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x28b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286711Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3474C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286712Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b9cC:\Windows\System32\conhost.exe%%19360x3474\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286716Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24a0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286720Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286721Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x372cC:\Windows\System32\conhost.exe%%19360x3dcc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286725Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fa0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286748Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x248cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286749Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fe4C:\Windows\System32\conhost.exe%%19360x248c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286753Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e3cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286757Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286758Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2c98C:\Windows\System32\conhost.exe%%19360x39ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286762Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3730C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286766Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5e4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286767Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1d60C:\Windows\System32\conhost.exe%%19360x5e4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286771Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x280cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286775Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2600C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286776Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3820C:\Windows\System32\conhost.exe%%19360x2600\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286780Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286795Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bf0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286796Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a98C:\Windows\System32\conhost.exe%%19360x3bf0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286800Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x820C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286804Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dc8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286805Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3414C:\Windows\System32\conhost.exe%%19360x3dc8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286809Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x362cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286823Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x7acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286824Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b90C:\Windows\System32\conhost.exe%%19360x7ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286828Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286834Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3924C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286835Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5c4C:\Windows\System32\conhost.exe%%19360x3924\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286839Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286856Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x310C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286857Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x624C:\Windows\System32\conhost.exe%%19360x310\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286861Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3574C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286870Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35c8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286871Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ee0C:\Windows\System32\conhost.exe%%19360x35c8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286875Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a24C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286887Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1838C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286888Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x333cC:\Windows\System32\conhost.exe%%19360x1838\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286892Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286896Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286897Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d78C:\Windows\System32\conhost.exe%%19360x38ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286901Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34c0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286918Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34e0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286919Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x367cC:\Windows\System32\conhost.exe%%19360x34e0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286923Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286929Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3378C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286930Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c14C:\Windows\System32\conhost.exe%%19360x3378\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286934Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286938Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2918C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286939Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3678C:\Windows\System32\conhost.exe%%19360x2918\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286943Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3204C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286952Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2900C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286953Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b00C:\Windows\System32\conhost.exe%%19360x2900\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286957Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286973Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x391cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286974Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bc0C:\Windows\System32\conhost.exe%%19360x391c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286978Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286982Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbacC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286983Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c0cC:\Windows\System32\conhost.exe%%19360xbac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3818C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003286991Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x11d8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003286992Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x27dcC:\Windows\System32\conhost.exe%%19360x11d8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003286996Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b7cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287000Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3984C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287001Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3da4C:\Windows\System32\conhost.exe%%19360x3984\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287005Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x354cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287019Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2340C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe%%19360x3e4\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003287021Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b8C:\Windows\System32\smartscreen.exe%%19360x3e4C:\Windows\System32\smartscreen.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003287022Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31b0C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe%%19360x3e4\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003287039Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26a4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287040Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3da8C:\Windows\System32\conhost.exe%%19360x26a4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287044Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3854C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287066Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ebcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287067Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbf8C:\Windows\System32\conhost.exe%%19360x3ebc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287074Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287103Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bd0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287104Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1670C:\Windows\System32\conhost.exe%%19360x3bd0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287108Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a98C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287123Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2598C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287124Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f28C:\Windows\System32\conhost.exe%%19360x2598\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287128Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3988C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287143Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x7acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287144Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x364C:\Windows\System32\conhost.exe%%19360x7ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287148Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287152Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x4c0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287153Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3674C:\Windows\System32\conhost.exe%%19360x4c0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287157Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2cc0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287161Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3324C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287162Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x7ecC:\Windows\System32\conhost.exe%%19360x3324\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287166Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f60C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287170Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1794C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287171Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c94C:\Windows\System32\conhost.exe%%19360x1794\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287175Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287190Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3558C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287191Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3db0C:\Windows\System32\conhost.exe%%19360x3558\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287195Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2940C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287203Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x4d8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287204Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x17a4C:\Windows\System32\conhost.exe%%19360x4d8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287208Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f44C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287222Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fd4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287223Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bacC:\Windows\System32\conhost.exe%%19360x1fd4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287227Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x276cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287234Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3df8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287235Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3724C:\Windows\System32\conhost.exe%%19360x3df8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287239Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287254Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287255Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3790C:\Windows\System32\conhost.exe%%19360xb1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287259Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3638C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287263Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b68C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287264Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3eb8C:\Windows\System32\conhost.exe%%19360x3b68\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287269Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287276Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2900C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287277Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fd8C:\Windows\System32\conhost.exe%%19360x2900\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287281Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ec8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287287Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c0cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287288Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2954C:\Windows\System32\conhost.exe%%19360x1c0c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287292Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3648C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287307Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287308Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x610C:\Windows\System32\conhost.exe%%19360x3f8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287312Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287316Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bb8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287317Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a2cC:\Windows\System32\conhost.exe%%19360x3bb8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287321Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x396cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287325Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287326Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3da4C:\Windows\System32\conhost.exe%%19360x3b80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287330Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d5cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287337Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287338Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2ec4C:\Windows\System32\conhost.exe%%19360x38c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287342Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x295cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287361Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287362Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fccC:\Windows\System32\conhost.exe%%19360x3e54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287366Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x638C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287370Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3808C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287371Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cb0C:\Windows\System32\conhost.exe%%19360x3808\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287375Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3de4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287383Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e44C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287384Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x42cC:\Windows\System32\conhost.exe%%19360x3e44\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287388Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1150C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287395Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x361cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287396Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x24bcC:\Windows\System32\conhost.exe%%19360x361c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287400Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287415Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a64C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287416Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fc8C:\Windows\System32\conhost.exe%%19360x3a64\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287427Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x370cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287428Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e68C:\Windows\System32\conhost.exe%%19360x370c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287432Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e40C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287436Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ac0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287437Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c18C:\Windows\System32\conhost.exe%%19360x3ac0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287441Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287460Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x538C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe%%19360xe5c"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --no-pre-read-main-dll --ram-no-pressure-read-main-dll --metrics-shmem-handle=9568,i,13961995384651957354,9377762817636912596,524288 --field-trial-handle=2352,i,15205593387111654540,16252463628370879391,262144 --variations-seed-version --mojo-platform-channel-handle=8824 /prefetch:14S-1-0-0--0x0C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeS-1-16-12288 +4688201331200x80200000000000003287472Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x380cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287486Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3590C:\Windows\System32\conhost.exe%%19360x380c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287490Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2940C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287520Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f64C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287521Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d78C:\Windows\System32\conhost.exe%%19360x3f64\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287525Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3abcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287539Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287541Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x718C:\Windows\System32\conhost.exe%%19360x3f24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287551Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e4cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287560Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287561Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3238C:\Windows\System32\conhost.exe%%19360x37ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287565Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1680C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287571Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3200C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287572Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3eb8C:\Windows\System32\conhost.exe%%19360x3200\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287576Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a60C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287591Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2900C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287592Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1168C:\Windows\System32\conhost.exe%%19360x2900\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287596Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3670C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287603Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2bccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287604Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3914C:\Windows\System32\conhost.exe%%19360x2bcc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287608Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e48C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287620Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3290C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287621Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x31d0C:\Windows\System32\conhost.exe%%19360x3290\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287625Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2004C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287631Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x272cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287632Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a2cC:\Windows\System32\conhost.exe%%19360x272c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287636Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287659Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3facC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287660Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3538C:\Windows\System32\conhost.exe%%19360x3fac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287665Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe0cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287669Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3504C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287670Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x398cC:\Windows\System32\conhost.exe%%19360x3504\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287675Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287682Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3808C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287683Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3294C:\Windows\System32\conhost.exe%%19360x3808\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287687Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2780C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287691Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287692Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x18e4C:\Windows\System32\conhost.exe%%19360x3d20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287696Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3410C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287711Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a64C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287712Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3534C:\Windows\System32\conhost.exe%%19360x2a64\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287716Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d54C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287720Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36f8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287721Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1670C:\Windows\System32\conhost.exe%%19360x36f8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287725Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29c4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287729Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3728C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287730Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3278C:\Windows\System32\conhost.exe%%19360x3728\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287734Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbd8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287742Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1288C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287743Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c58C:\Windows\System32\conhost.exe%%19360x1288\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287747Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d04C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287763Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2da0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287764Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3850C:\Windows\System32\conhost.exe%%19360x2da0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287768Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbbcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287780Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1774C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287781Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2810C:\Windows\System32\conhost.exe%%19360x1774\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287785Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287789Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26d4C:\Windows\System32\UsoClient.exe%%19360x948"C:\WINDOWS\system32\usoclient.exe" StartWorkS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003287794Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1068C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe%%19360x2eb4"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003287806Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3becC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wusvcs -p -s WaaSMedicSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287814Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13c8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003287815Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1534C:\Windows\System32\conhost.exe%%19360x13c8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003287819Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f18C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287821Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34acC:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003287824Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c7cC:\Windows\System32\RuntimeBroker.exe%%19360x3e4C:\Windows\System32\RuntimeBroker.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003287850Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3858C:\Windows\servicing\TrustedInstaller.exe%%19360x34cC:\WINDOWS\servicing\TrustedInstaller.exeS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003287853Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ec0C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exe%%19360x3e4C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exe -EmbeddingS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003288745Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x399cC:\Windows\System32\UIEOrchestrator.exe%%19360x3e4C:\WINDOWS\System32\UIEOrchestrator.exe /StartServer -EmbeddingS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003288778Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6b8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288779Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3404C:\Windows\System32\conhost.exe%%19360x6b8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288785Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3774C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288788Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c28C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe%%19360x1068C:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /NotificationType Reboot_Engaged /FormFactor Passive /CV 3vj6pPMS5kuk1Mnk.1.0.0S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeS-1-16-12288 +4688201331200x80200000000000003288820Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a90C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288821Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3950C:\Windows\System32\conhost.exe%%19360x3a90\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288825Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1794C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288835Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f90C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288836Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e48C:\Windows\System32\conhost.exe%%19360x3f90\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32f0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288846Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2004C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288847Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14d0C:\Windows\System32\conhost.exe%%19360x2004\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288851Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288855Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e14C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288856Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c84C:\Windows\System32\conhost.exe%%19360x3e14\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288860Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x327cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288875Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2d74C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288876Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a3cC:\Windows\System32\conhost.exe%%19360x2d74\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288880Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f48C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288884Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xea8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288885Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1854C:\Windows\System32\conhost.exe%%19360xea8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288889Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8f4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288893Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288894Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x438C:\Windows\System32\conhost.exe%%19360x3b1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288898Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b48C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288903Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x7c8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288904Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x368cC:\Windows\System32\conhost.exe%%19360x7c8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288908Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3294C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288923Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2670C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288924Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1db4C:\Windows\System32\conhost.exe%%19360x2670\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288928Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15f8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288932Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288933Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1768C:\Windows\System32\conhost.exe%%19360x3c1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288937Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a58C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288949Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x16acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288950Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2168C:\Windows\System32\conhost.exe%%19360x16ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288954Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2030C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003288964Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x305cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003288965Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a0cC:\Windows\System32\conhost.exe%%19360x305c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003288969Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2fa8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289011Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3418C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k GPSvcGroupS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289012Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2da0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289013Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3298C:\Windows\System32\conhost.exe%%19360x2da0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289017Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f60C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289032Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x310C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289033Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dcC:\Windows\System32\conhost.exe%%19360x310\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289037Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3364C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289051Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x276cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289052Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c20C:\Windows\System32\conhost.exe%%19360x276c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289056Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289060Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x68cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289061Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6b8C:\Windows\System32\conhost.exe%%19360x68c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289065Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b14C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289080Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37a4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289081Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36c4C:\Windows\System32\conhost.exe%%19360x37a4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289085Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2cfcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289089Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xe58C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289090Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2870C:\Windows\System32\conhost.exe%%19360xe58\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289094Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f4cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289098Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f78C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289099Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3670C:\Windows\System32\conhost.exe%%19360x3f78\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289103Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b54C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289109Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x188C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289110Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e04C:\Windows\System32\conhost.exe%%19360x188\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289114Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x610C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289130Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2004C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289131Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f2cC:\Windows\System32\conhost.exe%%19360x2004\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289135Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x22c0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289139Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x29a8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289140Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x900C:\Windows\System32\conhost.exe%%19360x29a8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289144Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3824C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289148Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14b4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289149Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d74C:\Windows\System32\conhost.exe%%19360x14b4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289153Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fecC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289167Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b7cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289168Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2474C:\Windows\System32\conhost.exe%%19360x3b7c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289172Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3234C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289187Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x156cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289188Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x363cC:\Windows\System32\conhost.exe%%19360x156c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289192Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb4cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289202Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35b8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289203Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x28e4C:\Windows\System32\conhost.exe%%19360x35b8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289207Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289211Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1694C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289212Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x389cC:\Windows\System32\conhost.exe%%19360x1694\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289216Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13bcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289220Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xba8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289221Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x42cC:\Windows\System32\conhost.exe%%19360xba8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289225Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x255cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289240Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289241Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1278C:\Windows\System32\conhost.exe%%19360x5d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289245Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289249Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39f8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289250Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a5cC:\Windows\System32\conhost.exe%%19360x39f8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289254Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd98C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289266Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289267Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3be8C:\Windows\System32\conhost.exe%%19360x1ec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289271Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bdcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289275Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6e4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289276Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3edcC:\Windows\System32\conhost.exe%%19360x6e4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289280Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3978C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289408Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36c0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289409Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f8C:\Windows\System32\conhost.exe%%19360x36c0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289416Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x378cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289420Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bacC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289421Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d00C:\Windows\System32\conhost.exe%%19360x3bac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289425Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c80C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289433Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x111cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289434Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ff8C:\Windows\System32\conhost.exe%%19360x111c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289438Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e00C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289442Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3728C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289443Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x348cC:\Windows\System32\conhost.exe%%19360x3728\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289447Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e4cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289452Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3804C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289473Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e7cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289474Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x820C:\Windows\System32\conhost.exe%%19360x3e7c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289478Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2630C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289485Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289486Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f8C:\Windows\System32\conhost.exe%%19360x3f8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289490Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289497Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c40C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289498Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a40C:\Windows\System32\conhost.exe%%19360x3c40\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289502Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289506Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x850C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289507Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2004C:\Windows\System32\conhost.exe%%19360x850\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289511Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x272cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289526Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3654C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289527Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x327cC:\Windows\System32\conhost.exe%%19360x3654\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289531Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3710C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289535Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x19acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289536Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b38C:\Windows\System32\conhost.exe%%19360x19ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289540Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a18C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289544Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x354cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289545Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3efcC:\Windows\System32\conhost.exe%%19360x354c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289549Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1cdcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289557Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289558Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2054C:\Windows\System32\conhost.exe%%19360x2e04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289562Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x638C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289578Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ca4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289579Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39a8C:\Windows\System32\conhost.exe%%19360x3ca4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289583Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe14C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289587Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35b8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289588Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2df4C:\Windows\System32\conhost.exe%%19360x35b8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289592Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20a0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289596Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xd5cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289597Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x16ccC:\Windows\System32\conhost.exe%%19360xd5c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289601Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2068C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289613Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39e4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289614Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3610C:\Windows\System32\conhost.exe%%19360x39e4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289618Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d40C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289633Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3becC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289634Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ed0C:\Windows\System32\conhost.exe%%19360x3bec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289638Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3998C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289646Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289647Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dd4C:\Windows\System32\conhost.exe%%19360x34c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289651Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a30C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289655Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1068C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289656Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x162cC:\Windows\System32\conhost.exe%%19360x1068\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289660Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289664Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2af8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289665Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a34C:\Windows\System32\conhost.exe%%19360x2af8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289669Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289684Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3644C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289685Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f8C:\Windows\System32\conhost.exe%%19360x3644\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289689Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289693Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3530C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289694Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3760C:\Windows\System32\conhost.exe%%19360x3530\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289698Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289701Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfccC:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe%%19360x2eb4"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003289713Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wusvcs -p -s WaaSMedicSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289722Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x200cC:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003289723Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3af0C:\Windows\System32\RuntimeBroker.exe%%19360x3e4C:\Windows\System32\RuntimeBroker.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003289742Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2cfcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289743Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3814C:\Windows\System32\conhost.exe%%19360x2cfc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289747Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fe8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289751Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289752Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xe58C:\Windows\System32\conhost.exe%%19360x38c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289756Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1f98C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289771Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2660C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289772Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c54C:\Windows\System32\conhost.exe%%19360x2660\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289777Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3910C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289781Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c40C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289782Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3290C:\Windows\System32\conhost.exe%%19360x3c40\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289786Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289794Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ea4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289795Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1744C:\Windows\System32\conhost.exe%%19360x3ea4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289799Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26e8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289803Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b74C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289804Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e7cC:\Windows\System32\conhost.exe%%19360x3b74\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289808Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289826Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289827Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b84C:\Windows\System32\conhost.exe%%19360x3f24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289831Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2eb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289835Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b44C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289836Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f50C:\Windows\System32\conhost.exe%%19360x3b44\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289851Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3facC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289852Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xa18C:\Windows\System32\conhost.exe%%19360x3fac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289856Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3750C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289860Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13fcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289861Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39a8C:\Windows\System32\conhost.exe%%19360x13fc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289865Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1100C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289880Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289881Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bf8C:\Windows\System32\conhost.exe%%19360x2a38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289885Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ef4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289889Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289890Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e5cC:\Windows\System32\conhost.exe%%19360x3d20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289894Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a58C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289919Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x144cC:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exeS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003289920Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x538C:\Windows\System32\cmd.exe%%19360x948"C:\WINDOWS\system32\cmd.exe" /d /c C:\WINDOWS\system32\hpatchmonTask.cmdS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003289921Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x375cC:\Windows\System32\conhost.exe%%19360x538\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\cmd.exeS-1-16-16384 +4688201331200x80200000000000003289922Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6f4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe%%19360x144c"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:1072S-1-0-0--0x0C:\Windows\System32\taskhostw.exeS-1-16-16384 +4688201331200x80200000000000003289923Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2168C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exe%%19360x144c"C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:1080S-1-0-0--0x0C:\Windows\System32\taskhostw.exeS-1-16-16384 +4688201331200x80200000000000003289924Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b64C:\Windows\System32\conhost.exe%%19360x6f4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289925Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x305cC:\Windows\System32\conhost.exe%%19360x2168\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289927Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2420C:\Windows\System32\tasklist.exe%%19360x538tasklist /FI "IMAGENAME eq Secure System" /v /FO list S-1-0-0--0x0C:\Windows\System32\cmd.exeS-1-16-16384 +4688201331200x80200000000000003289928Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fa4C:\Windows\System32\findstr.exe%%19360x538findstr /i "Image Name: Secure System" S-1-0-0--0x0C:\Windows\System32\cmd.exeS-1-16-16384 +4688201331200x80200000000000003289929Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x6f4"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" RemoveTaskDelayStartTrigger /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289932Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c88C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe%%19360x2168"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" RemoveTaskDelayStartTrigger /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289938Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x6f4"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" ExecuteQueuedItems /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289947Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe%%19360x2168"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" ExecuteQueuedItems /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289958Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x6f4"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" install "System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" /NoDependencies /noroot /version:v4.0.30319 /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289959Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39f0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x3fc0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 1f4 -InterruptEvent 0 -NGENProcess 178 -Pipe 1f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003289964Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3edcC:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe%%19360x6f4"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /StopEvent:1380S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-12288 +4688201331200x80200000000000003289965Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36a4C:\Windows\System32\conhost.exe%%19360x3edc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-12288 +4688201331200x80200000000000003289974Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b7cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe%%19360x144c"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:1208S-1-0-0--0x0C:\Windows\System32\taskhostw.exeS-1-16-16384 +4688201331200x80200000000000003289975Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3558C:\Windows\System32\conhost.exe%%19360x2b7c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289976Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c34C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x2b7c"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" RemoveTaskDelayStartTrigger /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289977Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2bc -InterruptEvent 0 -NGENProcess 244 -Pipe 2c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003289981Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33a8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x2b7c"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" ExecuteQueuedItems /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003289982Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1268C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289983Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c08C:\Windows\System32\conhost.exe%%19360x1268\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aacC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003289990Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e00C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003289991Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x594C:\Windows\System32\conhost.exe%%19360x3e00\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003289995Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 328 -InterruptEvent 0 -NGENProcess 28c -Pipe 244 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003289997Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3234C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 360 -Pipe 354 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290000Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2094C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290001Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3814C:\Windows\System32\conhost.exe%%19360x2094\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290007Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290010Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 348 -InterruptEvent 0 -NGENProcess 28c -Pipe 34c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290012Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3974C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 384 -InterruptEvent 0 -NGENProcess 37c -Pipe 380 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290014Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2bc -InterruptEvent 0 -NGENProcess 37c -Pipe 32c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290016Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1f98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 388 -InterruptEvent 0 -NGENProcess 398 -Pipe 328 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290029Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3afcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 348 -InterruptEvent 0 -NGENProcess 3a8 -Pipe 338 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290031Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 384 -InterruptEvent 0 -NGENProcess 350 -Pipe 2bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290033Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2048C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 348 -Pipe 384 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290035Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 388 -InterruptEvent 0 -NGENProcess 390 -Pipe 358 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290037Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 348 -InterruptEvent 0 -NGENProcess 39c -Pipe 350 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290039Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3730C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 394 -Pipe 364 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290042Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xfe8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290043Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e0cC:\Windows\System32\conhost.exe%%19360xfe8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290044Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 368 -Pipe 36c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290049Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f00C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290050Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3adcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 39c -Pipe 3c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290054Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 344 -Pipe 37c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290056Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 3dc -Pipe 3a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290058Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 378 -Pipe 344 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290060Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2030C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3dc -InterruptEvent 0 -NGENProcess 388 -Pipe 3b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290063Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2650C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 390 -Pipe 3b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290065Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2560C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290066Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f08C:\Windows\System32\conhost.exe%%19360x2560\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290067Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 378 -InterruptEvent 0 -NGENProcess 3a0 -Pipe 334 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290069Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x348cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 3b4 -Pipe 390 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290074Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290077Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b4 -InterruptEvent 0 -NGENProcess 3f4 -Pipe 360 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290080Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x814C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f4 -InterruptEvent 0 -NGENProcess 3c0 -Pipe 3b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290082Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess 3bc -Pipe 394 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290084Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e94C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290085Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e04C:\Windows\System32\conhost.exe%%19360x2e94\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290089Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bc4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290101Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x197cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290102Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ef0C:\Windows\System32\conhost.exe%%19360x197c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290106Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x10f0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290143Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290144Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b04C:\Windows\System32\conhost.exe%%19360x5c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290148Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3468C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290177Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3600C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290178Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2420C:\Windows\System32\conhost.exe%%19360x3600\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290182Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290185Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x195cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 370 -InterruptEvent 0 -NGENProcess 3f4 -Pipe 38c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290187Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 370 -InterruptEvent 0 -NGENProcess 3f8 -Pipe 3d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290200Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3878C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290201Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2680C:\Windows\System32\conhost.exe%%19360x3878\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290205Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35dcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290217Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3268C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290218Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c24C:\Windows\System32\conhost.exe%%19360x3268\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290222Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b9cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290225Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x242cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 310 -InterruptEvent 0 -NGENProcess 3f4 -Pipe 31c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290227Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 310 -InterruptEvent 0 -NGENProcess 3e8 -Pipe 2c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290240Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3350C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f8 -InterruptEvent 0 -NGENProcess 3e8 -Pipe 3c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290242Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2a0 -InterruptEvent 0 -NGENProcess 3fc -Pipe 28c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290245Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xfb8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290246Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3aacC:\Windows\System32\conhost.exe%%19360xfb8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290250Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x276cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290254Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ee4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290255Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14ccC:\Windows\System32\conhost.exe%%19360x3ee4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290259Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1120C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290263Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 370 -InterruptEvent 0 -NGENProcess 26c -Pipe 3bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290265Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3674C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290266Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3de4C:\Windows\System32\conhost.exe%%19360x3674\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290267Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3dc -InterruptEvent 0 -NGENProcess 3c8 -Pipe 348 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290272Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x610C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290275Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d4 -InterruptEvent 0 -NGENProcess 3fc -Pipe 39c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290277Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3fc -InterruptEvent 0 -NGENProcess 218 -Pipe 3d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290279Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3944C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 250 -Pipe 3e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290281Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a0 -InterruptEvent 0 -NGENProcess 370 -Pipe 3dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290284Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 388 -InterruptEvent 0 -NGENProcess 3e4 -Pipe 3e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290286Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e4 -InterruptEvent 0 -NGENProcess 26c -Pipe 388 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290288Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3654C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess 3f0 -Pipe 3a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290290Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 370 -InterruptEvent 0 -NGENProcess 2a0 -Pipe 3a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290292Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e78C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290293Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32b8C:\Windows\System32\conhost.exe%%19360x2e78\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290297Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c70C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290300Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 374 -InterruptEvent 0 -NGENProcess 250 -Pipe 3fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290302Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 310 -Pipe 378 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290307Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 3f0 -Pipe 3f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290317Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x22e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e4 -InterruptEvent 0 -NGENProcess 3ec -Pipe 3cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290319Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 310 -Pipe 250 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290321Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 26c -InterruptEvent 0 -NGENProcess 370 -Pipe 398 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290323Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 3c8 -Pipe 3d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290325Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 310 -InterruptEvent 0 -NGENProcess 374 -Pipe 35c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290328Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x202cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 26c -InterruptEvent 0 -NGENProcess 2a0 -Pipe 374 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290330Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3918C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 3f0 -Pipe 3e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290332Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290333Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x70cC:\Windows\System32\conhost.exe%%19360x34ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290337Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x397cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290340Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2a0 -InterruptEvent 0 -NGENProcess 3ec -Pipe 3c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290343Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3638C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 3ec -Pipe 404 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290345Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290346Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3794C:\Windows\System32\conhost.exe%%19360x3c80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290350Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a3cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290357Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 3f0 -Pipe 424 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290359Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 41c -InterruptEvent 0 -NGENProcess 40c -Pipe 330 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290362Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x367cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290363Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3798C:\Windows\System32\conhost.exe%%19360x367c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290367Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3610C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290368Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ec0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 430 -Pipe 3f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290372Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 434 -InterruptEvent 0 -NGENProcess 438 -Pipe 42c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290374Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 41c -InterruptEvent 0 -NGENProcess 414 -Pipe 40c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290376Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 438 -InterruptEvent 0 -NGENProcess 444 -Pipe 218 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290379Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3828C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 420 -Pipe 2a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290381Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 310 -InterruptEvent 0 -NGENProcess 3ac -Pipe 440 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290383Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 448 -InterruptEvent 0 -NGENProcess 428 -Pipe 450 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290385Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 43c -InterruptEvent 0 -NGENProcess 370 -Pipe 408 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290387Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3984C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290388Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3310C:\Windows\System32\conhost.exe%%19360x3984\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290392Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290395Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 26c -Pipe 448 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290397Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 418 -InterruptEvent 0 -NGENProcess 41c -Pipe 310 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290399Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x392cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 468 -InterruptEvent 0 -NGENProcess 41c -Pipe 43c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290401Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess 460 -Pipe 454 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290406Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 45c -InterruptEvent 0 -NGENProcess 418 -Pipe 444 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290416Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 458 -InterruptEvent 0 -NGENProcess 46c -Pipe 414 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290418Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 430 -InterruptEvent 0 -NGENProcess 474 -Pipe 460 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x276cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 434 -InterruptEvent 0 -NGENProcess 410 -Pipe 438 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290422Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 478 -Pipe 464 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290428Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 484 -InterruptEvent 0 -NGENProcess 478 -Pipe 480 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290434Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1e1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290435Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e64C:\Windows\System32\conhost.exe%%19360x1e1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290436Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3530C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 468 -Pipe 484 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290438Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 478 -InterruptEvent 0 -NGENProcess 44c -Pipe 410 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290440Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 45c -Pipe 420 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290445Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3afcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290446Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3de4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4ac -InterruptEvent 0 -NGENProcess 4a4 -Pipe 4a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290448Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3290C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 494 -InterruptEvent 0 -NGENProcess 4a0 -Pipe 4a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290450Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x394cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 47c -Pipe 430 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290452Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess 4ac -Pipe 494 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290456Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4ac -InterruptEvent 0 -NGENProcess 4b8 -Pipe 488 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290458Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x396cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b0 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 434 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290460Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess 45c -Pipe 4b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290462Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xeb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c8 -InterruptEvent 0 -NGENProcess 4d4 -Pipe 498 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290464Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3724C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4cc -InterruptEvent 0 -NGENProcess 4d8 -Pipe 3ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290469Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290470Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3458C:\Windows\System32\conhost.exe%%19360x39c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290474Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3474C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290481Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8b0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290482Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1670C:\Windows\System32\conhost.exe%%19360x8b0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290486Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e70C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290490Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36fcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290491Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2c60C:\Windows\System32\conhost.exe%%19360x36fc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290495Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290510Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xa18C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290511Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e68C:\Windows\System32\conhost.exe%%19360xa18\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290515Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290519Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3960C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290520Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39e0C:\Windows\System32\conhost.exe%%19360x3960\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290524Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a48C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290529Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13fcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290530Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a8C:\Windows\System32\conhost.exe%%19360x13fc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290531Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x397cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d0 -InterruptEvent 0 -NGENProcess 4ec -Pipe 4dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290533Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess 474 -Pipe 47c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290538Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3624C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290539Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess 504 -Pipe 508 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290543Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e0 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 4f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290548Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290549Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x364cC:\Windows\System32\conhost.exe%%19360x3f20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290554Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29a8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290569Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3200C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290570Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3798C:\Windows\System32\conhost.exe%%19360x3200\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290574Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5c0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290578Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290579Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c18C:\Windows\System32\conhost.exe%%19360x36ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290583Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3468C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290587Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d5cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290588Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xcd0C:\Windows\System32\conhost.exe%%19360x3d5c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290592Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x9fcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290600Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2af8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290601Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a2cC:\Windows\System32\conhost.exe%%19360x2af8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290606Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290632Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26e0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290633Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b9cC:\Windows\System32\conhost.exe%%19360x26e0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290637Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290644Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290645Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x196cC:\Windows\System32\conhost.exe%%19360x3c1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290649Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290669Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a58C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 500 -InterruptEvent 0 -NGENProcess 4f4 -Pipe 4f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290671Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x343cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess 34c -Pipe 33c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290673Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 46c -InterruptEvent 0 -NGENProcess 41c -Pipe 510 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290675Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 46c -InterruptEvent 0 -NGENProcess 4a0 -Pipe 478 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290677Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d0 -InterruptEvent 0 -NGENProcess 4e0 -Pipe 490 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290680Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c0 -InterruptEvent 0 -NGENProcess 4e4 -Pipe 354 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290682Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f4 -InterruptEvent 0 -NGENProcess 4a0 -Pipe 468 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290684Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess 50c -Pipe 4c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290686Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xaecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290687Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x25d8C:\Windows\System32\conhost.exe%%19360xaec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290688Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d0 -InterruptEvent 0 -NGENProcess 438 -Pipe 504 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290690Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d8 -InterruptEvent 0 -NGENProcess 4ec -Pipe 474 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290692Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 48c -InterruptEvent 0 -NGENProcess 4b4 -Pipe 4b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290697Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2340C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290698Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d4 -InterruptEvent 0 -NGENProcess 4cc -Pipe 4fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290700Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3674C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 51c -InterruptEvent 0 -NGENProcess 514 -Pipe 518 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290702Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3db8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4ac -InterruptEvent 0 -NGENProcess 44c -Pipe 4cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290706Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 4c8 -Pipe 4bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290708Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3adcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 48c -InterruptEvent 0 -NGENProcess 520 -Pipe 524 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290710Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 53c -InterruptEvent 0 -NGENProcess 52c -Pipe 530 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290712Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2838C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 52c -InterruptEvent 0 -NGENProcess 41c -Pipe 53c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290715Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 548 -InterruptEvent 0 -NGENProcess 49c -Pipe 370 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290717Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x364C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 544 -InterruptEvent 0 -NGENProcess 54c -Pipe 558 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290719Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fe4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290720Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x346cC:\Windows\System32\conhost.exe%%19360x1fe4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290721Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess 548 -Pipe 49c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290726Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1cdcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290727Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 544 -Pipe 428 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290731Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2df4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 34c -InterruptEvent 0 -NGENProcess 26c -Pipe 41c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290733Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x17e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4ec -InterruptEvent 0 -NGENProcess 4e8 -Pipe 46c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290735Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e94C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 568 -InterruptEvent 0 -NGENProcess 34c -Pipe 26c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290737Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4ec -InterruptEvent 0 -NGENProcess 550 -Pipe 54c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290739Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 554 -InterruptEvent 0 -NGENProcess 3ec -Pipe 534 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290741Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 550 -InterruptEvent 0 -NGENProcess 564 -Pipe 3ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290743Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 544 -InterruptEvent 0 -NGENProcess 4b4 -Pipe 52c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290756Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 458 -Pipe 4ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290759Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c94C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290760Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x33d0C:\Windows\System32\conhost.exe%%19360x1c94\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290761Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d8 -InterruptEvent 0 -NGENProcess 4d4 -Pipe 4b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290763Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c4 -InterruptEvent 0 -NGENProcess 544 -Pipe 34c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290765Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 48c -InterruptEvent 0 -NGENProcess 538 -Pipe 57c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290767Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d4 -InterruptEvent 0 -NGENProcess 570 -Pipe 55c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290769Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3998C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 528 -Pipe 56c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290774Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1174C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290775Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1768C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c8 -InterruptEvent 0 -NGENProcess 548 -Pipe 574 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290777Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3838C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d8 -InterruptEvent 0 -NGENProcess 44c -Pipe 568 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290779Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3788C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d0 -InterruptEvent 0 -NGENProcess 51c -Pipe 458 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290783Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d8 -InterruptEvent 0 -NGENProcess 564 -Pipe 588 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290785Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x10d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4ac -InterruptEvent 0 -NGENProcess 550 -Pipe 554 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290787Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2038C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 45c -InterruptEvent 0 -NGENProcess 438 -Pipe 4e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290789Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess 548 -Pipe 500 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290791Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 544 -InterruptEvent 0 -NGENProcess 520 -Pipe 4e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290793Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f4 -InterruptEvent 0 -NGENProcess 418 -Pipe 548 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290796Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1730C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess 438 -Pipe 520 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290798Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e8 -InterruptEvent 0 -NGENProcess 570 -Pipe 544 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290800Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3804C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a8 -InterruptEvent 0 -NGENProcess 59c -Pipe 5a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290802Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 4ac -Pipe 514 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290804Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2b8 -InterruptEvent 0 -NGENProcess 560 -Pipe 4c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290806Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1d54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290807Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1614C:\Windows\System32\conhost.exe%%19360x1d54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290811Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290815Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14dcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290816Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3774C:\Windows\System32\conhost.exe%%19360x14dc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290820Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39f8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290824Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x111cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290825Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5d4C:\Windows\System32\conhost.exe%%19360x111c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290829Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x159cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290844Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a64C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290845Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bfcC:\Windows\System32\conhost.exe%%19360x2a64\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290849Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x398cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290854Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3290C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290855Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3810C:\Windows\System32\conhost.exe%%19360x3290\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290859Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ce4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290867Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x394cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290868Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x277cC:\Windows\System32\conhost.exe%%19360x394c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290875Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 31c -Pipe 32c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290877Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 550 -InterruptEvent 0 -NGENProcess 390 -Pipe 3d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290879Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a8 -InterruptEvent 0 -NGENProcess 344 -Pipe 4d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290881Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b4 -InterruptEvent 0 -NGENProcess 344 -Pipe 4ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290884Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x327cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290885Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e44C:\Windows\System32\conhost.exe%%19360x327c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290889Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1744C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290905Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fe8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290906Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2340C:\Windows\System32\conhost.exe%%19360x3fe8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290910Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290915Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3844C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 344 -InterruptEvent 0 -NGENProcess 564 -Pipe 3b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290917Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x22e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 360 -InterruptEvent 0 -NGENProcess 3b8 -Pipe 31c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290920Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 3c0 -Pipe 384 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290922Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3750C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 3d8 -Pipe 2bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290928Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2670C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290929Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x395cC:\Windows\System32\conhost.exe%%19360x2670\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290933Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x368cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290937Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b6cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290938Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e10C:\Windows\System32\conhost.exe%%19360x2b6c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290939Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a0 -InterruptEvent 0 -NGENProcess 438 -Pipe 3f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290941Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c0 -InterruptEvent 0 -NGENProcess 360 -Pipe 37c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003290946Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3814C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290950Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x4dcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290951Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13fcC:\Windows\System32\conhost.exe%%19360x4dc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290955Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2928C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290970Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290971Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3444C:\Windows\System32\conhost.exe%%19360x3c80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290975Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290979Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fa0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290980Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1848C:\Windows\System32\conhost.exe%%19360x3fa0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290984Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x289cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003290988Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3798C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003290989Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x399cC:\Windows\System32\conhost.exe%%19360x3798\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003290993Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3850C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291007Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291008Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f60C:\Windows\System32\conhost.exe%%19360x3d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291013Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291028Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x474C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291029Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1928C:\Windows\System32\conhost.exe%%19360x474\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291033Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xf34C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291037Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291038Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ecC:\Windows\System32\conhost.exe%%19360x2a38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291042Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c0cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291045Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x162cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 358 -InterruptEvent 0 -NGENProcess 550 -Pipe 360 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291047Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 550 -InterruptEvent 0 -NGENProcess 35c -Pipe 358 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291050Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fbcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291051Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ecC:\Windows\System32\conhost.exe%%19360x3fbc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291055Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15ecC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291059Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x258cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291060Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cd0C:\Windows\System32\conhost.exe%%19360x258c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291061Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3774C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 43c -Pipe 480 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291066Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3504C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291067Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3250C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 398 -InterruptEvent 0 -NGENProcess 414 -Pipe 328 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291071Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x111cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 448 -InterruptEvent 0 -NGENProcess 470 -Pipe 310 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291073Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 550 -InterruptEvent 0 -NGENProcess 3fc -Pipe 390 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291095Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 35c -Pipe 50c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291097Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3da8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 338 -Pipe 454 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291099Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 330 -Pipe 2a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291101Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x18cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291102Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b68C:\Windows\System32\conhost.exe%%19360x18c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291103Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3424C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 508 -InterruptEvent 0 -NGENProcess 4b0 -Pipe 47c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291108Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c04C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291109Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x21c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 364 -Pipe 40c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291111Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x12e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 470 -InterruptEvent 0 -NGENProcess 444 -Pipe 420 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291115Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c4 -InterruptEvent 0 -NGENProcess 4b0 -Pipe 550 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291117Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 440 -InterruptEvent 0 -NGENProcess 414 -Pipe 364 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291119Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 434 -InterruptEvent 0 -NGENProcess 488 -Pipe 380 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291121Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess 3f0 -Pipe 434 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291123Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a8 -InterruptEvent 0 -NGENProcess 3cc -Pipe 424 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291125Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3738C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c4 -InterruptEvent 0 -NGENProcess 42c -Pipe 378 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291128Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3614C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 448 -InterruptEvent 0 -NGENProcess 3bc -Pipe 3c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291130Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a0 -InterruptEvent 0 -NGENProcess 448 -Pipe 488 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291133Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3404C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291134Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3df4C:\Windows\System32\conhost.exe%%19360x3404\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291138Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291141Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 218 -InterruptEvent 0 -NGENProcess 388 -Pipe 4a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291143Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x395cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 498 -Pipe 4a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291145Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ee0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess 218 -Pipe 3dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291147Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 218 -InterruptEvent 0 -NGENProcess 440 -Pipe 3cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291153Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a3cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291154Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x357cC:\Windows\System32\conhost.exe%%19360x3a3c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291158Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1610C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291162Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cc0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291163Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x18e4C:\Windows\System32\conhost.exe%%19360x3cc0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291167Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291183Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bd4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291184Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3624C:\Windows\System32\conhost.exe%%19360x3bd4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291188Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3438C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291192Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x20d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291193Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xaf8C:\Windows\System32\conhost.exe%%19360x20d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291197Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37c0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291201Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291202Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2768C:\Windows\System32\conhost.exe%%19360x3b38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291206Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291210Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2710C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291211Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c18C:\Windows\System32\conhost.exe%%19360x2710\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291215Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34a8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291230Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x240C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291231Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1e8C:\Windows\System32\conhost.exe%%19360x240\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291235Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x255cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291238Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x324cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 38c -InterruptEvent 0 -NGENProcess 3d4 -Pipe 218 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291240Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 430 -InterruptEvent 0 -NGENProcess 3e4 -Pipe 404 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291242Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3878C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 3a0 -Pipe 330 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291244Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 410 -InterruptEvent 0 -NGENProcess 494 -Pipe 388 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291247Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f2cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291248Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a40C:\Windows\System32\conhost.exe%%19360x3f2c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291252Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e34C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291260Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1898C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291261Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e88C:\Windows\System32\conhost.exe%%19360x1898\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291265Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291268Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1408C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 558 -InterruptEvent 0 -NGENProcess 41c -Pipe 49c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291270Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x25dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 41c -InterruptEvent 0 -NGENProcess 338 -Pipe 558 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291273Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f44C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291274Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f80C:\Windows\System32\conhost.exe%%19360x3f44\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291275Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2cc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e8 -InterruptEvent 0 -NGENProcess 498 -Pipe 3f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291280Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291281Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 53c -InterruptEvent 0 -NGENProcess 3fc -Pipe 498 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291285Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 504 -InterruptEvent 0 -NGENProcess 4fc -Pipe 474 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291287Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x242cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4fc -InterruptEvent 0 -NGENProcess 440 -Pipe 504 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291300Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 36c -Pipe 3a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291302Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3590C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4cc -InterruptEvent 0 -NGENProcess 470 -Pipe 524 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291307Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fc8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291308Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x22c0C:\Windows\System32\conhost.exe%%19360x3fc8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291312Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3de0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291334Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3954C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291335Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37b8C:\Windows\System32\conhost.exe%%19360x3954\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291339Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291346Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xe88C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291347Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3538C:\Windows\System32\conhost.exe%%19360xe88\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291351Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c78C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291364Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 54c -InterruptEvent 0 -NGENProcess 354 -Pipe 478 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291366Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 438 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 4dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291369Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 36c -InterruptEvent 0 -NGENProcess 514 -Pipe 428 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291371Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 438 -InterruptEvent 0 -NGENProcess 470 -Pipe 54c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291373Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291374Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8e8C:\Windows\System32\conhost.exe%%19360x3a04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291378Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291393Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x17e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f0 -InterruptEvent 0 -NGENProcess 520 -Pipe 33c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291395Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a4 -InterruptEvent 0 -NGENProcess 36c -Pipe 4f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291397Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2d74C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291398Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x368cC:\Windows\System32\conhost.exe%%19360x2d74\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291402Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x188C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291405Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2664C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c0 -InterruptEvent 0 -NGENProcess 4d0 -Pipe 520 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291407Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3de4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4bc -InterruptEvent 0 -NGENProcess 4b0 -Pipe 3bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291409Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 530 -InterruptEvent 0 -NGENProcess 43c -Pipe 4b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291411Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 444 -InterruptEvent 0 -NGENProcess 3c0 -Pipe 3a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003291414Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3970C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291415Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x390cC:\Windows\System32\conhost.exe%%19360x3970\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291419Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291426Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3444C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k Camera -s FrameServerS-1-5-19LOCAL SERVICENT AUTHORITY0x3e5C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291427Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k CameraMonitorS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291440Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x10f0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291441Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x352cC:\Windows\System32\conhost.exe%%19360x10f0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291445Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1278C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291448Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ba0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291449Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e30C:\Windows\System32\conhost.exe%%19360x3ba0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291455Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3238C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291456Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fa4C:\Windows\System32\conhost.exe%%19360x3238\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291460Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x363cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291478Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fa4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291479Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xac8C:\Windows\System32\conhost.exe%%19360x1fa4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291483Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb24C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291487Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291488Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x900C:\Windows\System32\conhost.exe%%19360xb1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291492Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35dcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291496Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34d8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291497Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3464C:\Windows\System32\conhost.exe%%19360x34d8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291501Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e28C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291505Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2650C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291506Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3204C:\Windows\System32\conhost.exe%%19360x2650\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291510Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291541Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bf4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291542Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3950C:\Windows\System32\conhost.exe%%19360x3bf4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291546Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc14C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291554Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3504C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291555Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35c0C:\Windows\System32\conhost.exe%%19360x3504\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291559Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291571Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x394cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291572Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3944C:\Windows\System32\conhost.exe%%19360x394c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291576Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3858C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291580Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37f0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291581Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xeb8C:\Windows\System32\conhost.exe%%19360x37f0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291585Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ef0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291600Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3730C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291601Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2038C:\Windows\System32\conhost.exe%%19360x3730\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291605Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291609Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x814C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291610Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xa34C:\Windows\System32\conhost.exe%%19360x814\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291614Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291657Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cb4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291658Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38b4C:\Windows\System32\conhost.exe%%19360x3cb4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291676Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x594C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291683Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x29c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291684Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x244cC:\Windows\System32\conhost.exe%%19360x29c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291688Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3378C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291703Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b78C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291704Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1db4C:\Windows\System32\conhost.exe%%19360x3b78\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291708Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291712Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3960C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291713Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x395cC:\Windows\System32\conhost.exe%%19360x3960\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291717Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3efcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291723Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fb8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291724Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35b0C:\Windows\System32\conhost.exe%%19360x1fb8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291728Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c98C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291732Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291733Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38ecC:\Windows\System32\conhost.exe%%19360x3c38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291737Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ee0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291742Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2bd0C:\Windows\System32\wevtutil.exe%%19360x508"C:\WINDOWS\system32\wevtutil.exe" epl Microsoft-Windows-Sysmon/Operational C:\sysmon_export24.xml "/q:*[System[TimeCreated[timediff(@SystemTime) <= 86400000]]]"S-1-0-0--0x0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeS-1-16-12288 +4688201331200x80200000000000003291767Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cf8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291768Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2ec0C:\Windows\System32\conhost.exe%%19360x3cf8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291772Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a0cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291780Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x196cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291781Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36a0C:\Windows\System32\conhost.exe%%19360x196c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291785Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3498C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291789Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2afcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291790Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x399cC:\Windows\System32\conhost.exe%%19360x2afc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291794Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cbcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291806Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x10b0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291807Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3798C:\Windows\System32\conhost.exe%%19360x10b0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291811Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2768C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291826Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b3cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291827Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fa4C:\Windows\System32\conhost.exe%%19360x3b3c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291831Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x363cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291835Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291836Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1100C:\Windows\System32\conhost.exe%%19360x8d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4c0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291844Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35dcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291845Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d54C:\Windows\System32\conhost.exe%%19360x35dc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291849Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1268C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291856Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x15d8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291857Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32ecC:\Windows\System32\conhost.exe%%19360x15d8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291861Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b78C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291885Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3424C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291886Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b70C:\Windows\System32\conhost.exe%%19360x3424\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291890Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f34C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291896Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cd0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291897Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x327cC:\Windows\System32\conhost.exe%%19360x3cd0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291901Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d04C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291905Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d10C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291906Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb4cC:\Windows\System32\conhost.exe%%19360x3d10\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291910Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x307cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291914Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bb0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291915Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b20C:\Windows\System32\conhost.exe%%19360x3bb0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291919Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291950Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x31d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291951Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x349cC:\Windows\System32\conhost.exe%%19360x31d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291955Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ef0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291961Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x12e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291962Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bd0C:\Windows\System32\conhost.exe%%19360x12e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291966Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37b8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291978Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36fcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291979Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a24C:\Windows\System32\conhost.exe%%19360x36fc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291983Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3930C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003291987Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b9cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003291988Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cb4C:\Windows\System32\conhost.exe%%19360x2b9c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003291992Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292013Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3564C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292014Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3738C:\Windows\System32\conhost.exe%%19360x3564\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292020Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3820C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292024Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1db4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292025Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3384C:\Windows\System32\conhost.exe%%19360x1db4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292026Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3518C:\Windows\System32\wevtutil.exe%%19360x508"C:\WINDOWS\system32\wevtutil.exe" epl Microsoft-Windows-Sysmon/Operational C:\sysmon_export.xml "/q:*[System[TimeCreated[timediff(@SystemTime) <= 86400000]]]" /ow:trueS-1-0-0--0x0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeS-1-16-12288 +4688201331200x80200000000000003292030Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x359cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292039Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2810C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292040Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39f0C:\Windows\System32\conhost.exe%%19360x2810\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292044Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x372cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292048Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39bcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292049Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1610C:\Windows\System32\conhost.exe%%19360x39bc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292053Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x82cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292068Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x15e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292069Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bf0C:\Windows\System32\conhost.exe%%19360x15e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292073Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292077Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f7cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292078Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f80C:\Windows\System32\conhost.exe%%19360x3f7c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292082Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d94C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292086Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ef8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292087Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x31f4C:\Windows\System32\conhost.exe%%19360x3ef8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292091Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x391cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292099Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292100Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2168C:\Windows\System32\conhost.exe%%19360x38f8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292104Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x352cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292120Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb84C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292121Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x118C:\Windows\System32\conhost.exe%%19360xb84\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292125Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x620C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292132Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3530C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292133Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x7ecC:\Windows\System32\conhost.exe%%19360x3530\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292137Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292141Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x290cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292142Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x125cC:\Windows\System32\conhost.exe%%19360x290c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292146Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3824C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292150Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a48C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292151Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1388C:\Windows\System32\conhost.exe%%19360x3a48\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292155Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37ecC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292170Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292171Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c8cC:\Windows\System32\conhost.exe%%19360x38f0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292175Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bacC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292182Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xcd0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292183Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32ecC:\Windows\System32\conhost.exe%%19360xcd0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292187Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8f8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292191Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ad8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292192Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xc9cC:\Windows\System32\conhost.exe%%19360x3ad8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292196Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3728C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292203Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c0cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292204Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1564C:\Windows\System32\conhost.exe%%19360x3c0c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292208Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1794C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292224Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35bcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292225Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34d0C:\Windows\System32\conhost.exe%%19360x35bc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292229Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292233Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2094C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292234Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d50C:\Windows\System32\conhost.exe%%19360x2094\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292238Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e04C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292242Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1410C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292243Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b68C:\Windows\System32\conhost.exe%%19360x1410\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292247Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3540C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292251Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x305cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292252Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35d4C:\Windows\System32\conhost.exe%%19360x305c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292256Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b74C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292310Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2420C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k GPSvcGroupS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292311Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ad0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292312Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xe0cC:\Windows\System32\conhost.exe%%19360x3ad0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292316Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e90C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292329Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x355cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292330Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3614C:\Windows\System32\conhost.exe%%19360x355c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292334Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb1cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292338Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2564C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292339Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e70C:\Windows\System32\conhost.exe%%19360x2564\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292343Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c18C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292357Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x19d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292358Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f8cC:\Windows\System32\conhost.exe%%19360x19d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292362Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3874C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292385Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2630C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292386Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39bcC:\Windows\System32\conhost.exe%%19360x2630\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292390Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292394Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3638C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292395Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5d0C:\Windows\System32\conhost.exe%%19360x3638\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292399Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x25dcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292403Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2cc0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292404Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2de0C:\Windows\System32\conhost.exe%%19360x2cc0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292408Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d74C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292412Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3234C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292413Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26e8C:\Windows\System32\conhost.exe%%19360x3234\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292417Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292432Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1cb4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292433Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3404C:\Windows\System32\conhost.exe%%19360x1cb4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292437Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc20C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292441Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ba0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292442Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6e4C:\Windows\System32\conhost.exe%%19360x3ba0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292446Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e14C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292450Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1d54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292451Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34a0C:\Windows\System32\conhost.exe%%19360x1d54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292455Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa34C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292463Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x20e0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292464Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3530C:\Windows\System32\conhost.exe%%19360x20e0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292468Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x162cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292483Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x378cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292484Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e08C:\Windows\System32\conhost.exe%%19360x378c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292488Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38acC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292497Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1268C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292498Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37f4C:\Windows\System32\conhost.exe%%19360x1268\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292502Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d60C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292513Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x382cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292514Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1694C:\Windows\System32\conhost.exe%%19360x382c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292518Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bfcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292521Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36f8C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe%%19360xe5c"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --no-pre-read-main-dll --ram-no-pressure-read-main-dll --metrics-shmem-handle=4828,i,1423057150191052961,11297732712611864988,524288 --field-trial-handle=2352,i,15205593387111654540,16252463628370879391,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:14S-1-0-0--0x0C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeS-1-16-12288 +4688201331200x80200000000000003292550Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b28C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292551Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38c4C:\Windows\System32\conhost.exe%%19360x1b28\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292555Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292570Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xa6cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292571Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xf34C:\Windows\System32\conhost.exe%%19360xa6c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292575Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18e4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292579Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292580Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3700C:\Windows\System32\conhost.exe%%19360x2e04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292584Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3418C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292602Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292603Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x15a0C:\Windows\System32\conhost.exe%%19360x26d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292607Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11d8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292616Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3788C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292617Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a64C:\Windows\System32\conhost.exe%%19360x3788\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292621Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3438C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292641Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3878C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292642Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3980C:\Windows\System32\conhost.exe%%19360x3878\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292646Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3da8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292658Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d48C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292659Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a68C:\Windows\System32\conhost.exe%%19360x3d48\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292663Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3694C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292667Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292668Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x468C:\Windows\System32\conhost.exe%%19360x35d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292672Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292684Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292685Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x32b8C:\Windows\System32\conhost.exe%%19360x3d80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292689Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b60C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292721Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x288cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292722Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x206cC:\Windows\System32\conhost.exe%%19360x288c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292726Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x111cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292749Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b7cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292750Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6f4C:\Windows\System32\conhost.exe%%19360x2b7c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292754Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ca4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292764Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x352cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292765Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e40C:\Windows\System32\conhost.exe%%19360x352c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292769Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc20C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292773Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3aacC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292774Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b3cC:\Windows\System32\conhost.exe%%19360x3aac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292778Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3858C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292797Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292798Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x370cC:\Windows\System32\conhost.exe%%19360x3b24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292802Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292806Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xac8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292807Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fc8C:\Windows\System32\conhost.exe%%19360xac8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292811Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292816Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3820C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292817Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a38C:\Windows\System32\conhost.exe%%19360x3820\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292821Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x280cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292830Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x10d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292831Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a54C:\Windows\System32\conhost.exe%%19360x10d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292835Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292852Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c0cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292853Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e9cC:\Windows\System32\conhost.exe%%19360x3c0c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292857Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b28C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292861Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc0C:\Windows\System32\appidcertstorecheck.exe%%19360x948"C:\WINDOWS\system32\appidcertstorecheck.exe"S-1-5-19LOCAL SERVICENT AUTHORITY0x3e5C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003292862Securitysoc101win11S-1-5-19LOCAL SERVICENT AUTHORITY0x3e50x1370C:\Windows\System32\conhost.exe%%19360x3bc0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\appidcertstorecheck.exeS-1-16-16384 +4688201331200x80200000000000003292867Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b08C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292868Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3eacC:\Windows\System32\conhost.exe%%19360x2b08\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292877Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3870C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292878Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34f4C:\Windows\System32\conhost.exe%%19360x3870\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292882Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a30C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292894Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x343cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292895Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2574C:\Windows\System32\conhost.exe%%19360x343c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292899Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3488C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292918Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39c0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292919Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e78C:\Windows\System32\conhost.exe%%19360x39c0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292923Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31f4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292928Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xe0cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292929Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ad0C:\Windows\System32\conhost.exe%%19360xe0c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292933Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b80C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292937Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292938Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x297cC:\Windows\System32\conhost.exe%%19360xb80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292942Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x81cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292946Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292947Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b28C:\Windows\System32\conhost.exe%%19360x2e38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292951Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18f0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292966Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a78C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292967Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb24C:\Windows\System32\conhost.exe%%19360x3a78\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292971Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292975Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292976Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2bccC:\Windows\System32\conhost.exe%%19360x3d80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292980Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292984Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2660C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003292985Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a48C:\Windows\System32\conhost.exe%%19360x2660\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003292989Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3afcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003292993Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a60C:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003292999Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cb8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293000Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6f4C:\Windows\System32\conhost.exe%%19360x3cb8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293004Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3838C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293008Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2870C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exeS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003293014Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x352cC:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003293015Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3918C:\Windows\System32\RuntimeBroker.exe%%19360x3e4C:\Windows\System32\RuntimeBroker.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003293033Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1d54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293034Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bccC:\Windows\System32\conhost.exe%%19360x1d54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293038Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293042Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xd5cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293043Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37dcC:\Windows\System32\conhost.exe%%19360xd5c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293047Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1408C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293051Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38f4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293052Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2c98C:\Windows\System32\conhost.exe%%19360x38f4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293056Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293068Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293069Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34c0C:\Windows\System32\conhost.exe%%19360x3b8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293073Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3480C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293089Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3298C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293090Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d58C:\Windows\System32\conhost.exe%%19360x3298\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293094Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14ccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293100Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e9cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293101Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x10b0C:\Windows\System32\conhost.exe%%19360x2e9c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293105Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1370C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293109Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2024C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293110Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1538C:\Windows\System32\conhost.exe%%19360x2024\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293114Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293118Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f48C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293119Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3544C:\Windows\System32\conhost.exe%%19360x3f48\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293123Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293141Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2574C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293142Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbf8C:\Windows\System32\conhost.exe%%19360x2574\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293146Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11bcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293158Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x458C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293159Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x375cC:\Windows\System32\conhost.exe%%19360x458\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293163Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3010C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293171Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e94C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293172Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3904C:\Windows\System32\conhost.exe%%19360x3e94\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293176Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3658C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293182Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39f8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293183Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x368cC:\Windows\System32\conhost.exe%%19360x39f8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293187Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3960C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293202Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2050C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293203Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3278C:\Windows\System32\conhost.exe%%19360x2050\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293207Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293211Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293212Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c98C:\Windows\System32\conhost.exe%%19360x2e38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293216Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2680C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293220Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2874C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293221Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d9cC:\Windows\System32\conhost.exe%%19360x2874\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293225Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x202cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293233Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x24c8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293234Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1744C:\Windows\System32\conhost.exe%%19360x24c8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293238Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fc0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293263Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293264Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c0cC:\Windows\System32\conhost.exe%%19360x3f04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293268Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293277Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293278Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1bf4C:\Windows\System32\conhost.exe%%19360x3e8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293282Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293286Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293287Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x352cC:\Windows\System32\conhost.exe%%19360xb8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293291Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293305Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2928C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293306Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14b4C:\Windows\System32\conhost.exe%%19360x2928\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293310Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293325Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x4dcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293326Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3530C:\Windows\System32\conhost.exe%%19360x4dc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293330Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293334Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37f0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293335Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xe00C:\Windows\System32\conhost.exe%%19360x37f0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293339Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29c4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293343Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293344Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x6d8C:\Windows\System32\conhost.exe%%19360x2b20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293348Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x383cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293351Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfe8C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe%%19360x2eb4"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003293363Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3464C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wusvcs -p -s WaaSMedicSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293389Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35bcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293390Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c10C:\Windows\System32\conhost.exe%%19360x35bc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293394Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293410Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xd88C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293411Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a18C:\Windows\System32\conhost.exe%%19360xd88\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293415Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293419Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d84C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293420Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x28b0C:\Windows\System32\conhost.exe%%19360x3d84\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293424Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c94C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293429Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x364cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293430Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3eacC:\Windows\System32\conhost.exe%%19360x364c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293434Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ec0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293454Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293455Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a34C:\Windows\System32\conhost.exe%%19360x3f24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293459Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d24C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293476Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3adcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293477Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2574C:\Windows\System32\conhost.exe%%19360x3adc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293481Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293507Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293508Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3214C:\Windows\System32\conhost.exe%%19360x26d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293513Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293517Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38bcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293518Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b54C:\Windows\System32\conhost.exe%%19360x38bc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293522Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3de4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293526Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293527Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xba8C:\Windows\System32\conhost.exe%%19360x3c54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293531Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f18C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293549Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1614C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293550Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2030C:\Windows\System32\conhost.exe%%19360x1614\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293554Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a78C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293558Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d9cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293559Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2048C:\Windows\System32\conhost.exe%%19360x3d9c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293563Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293579Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x378cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293580Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fc0C:\Windows\System32\conhost.exe%%19360x378c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293584Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3830C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293587Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13a0C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe /RuntimeWideS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003293588Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c38C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe%%19360x13a0"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:1012S-1-0-0--0x0C:\Windows\System32\taskhostw.exeS-1-16-16384 +4688201331200x80200000000000003293589Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3924C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exe%%19360x13a0"C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:540S-1-0-0--0x0C:\Windows\System32\taskhostw.exeS-1-16-16384 +4688201331200x80200000000000003293590Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1794C:\Windows\System32\conhost.exe%%19360x3c38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003293591Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3738C:\Windows\System32\conhost.exe%%19360x3924\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003293592Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe%%19360x3924"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" RemoveTaskDelayStartTrigger /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003293593Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb8C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x3c38"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" RemoveTaskDelayStartTrigger /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003293597Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe%%19360x3924"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" ExecuteQueuedItems /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003293601Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x3c38"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" ExecuteQueuedItems /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003293612Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x352cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe%%19360x3c38"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" install "System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" /NoDependencies /noroot /version:v4.0.30319 /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003293615Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 258 -InterruptEvent 0 -NGENProcess 278 -Pipe 228 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293618Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3518C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293619Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1dc0C:\Windows\System32\conhost.exe%%19360x3518\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293623Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293626Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1774C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293627Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14b4C:\Windows\System32\conhost.exe%%19360x1774\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293641Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x7ecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293642Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x366cC:\Windows\System32\conhost.exe%%19360x7ec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293647Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3530C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293651Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d34C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293652Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x244cC:\Windows\System32\conhost.exe%%19360x3d34\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293656Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293660Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3248C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293661Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3238C:\Windows\System32\conhost.exe%%19360x3248\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293665Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293673Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1120C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293674Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1174C:\Windows\System32\conhost.exe%%19360x1120\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293678Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ad0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293701Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38fcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293702Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c10C:\Windows\System32\conhost.exe%%19360x38fc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293706Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293718Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fd0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293719Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39fcC:\Windows\System32\conhost.exe%%19360x3fd0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293723Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x28b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293741Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c70C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293742Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x159cC:\Windows\System32\conhost.exe%%19360x3c70\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293746Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3648C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293750Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 320 -InterruptEvent 0 -NGENProcess 290 -Pipe 324 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293752Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 31c -Pipe 304 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293754Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xc20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293755Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x118C:\Windows\System32\conhost.exe%%19360xc20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293759Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cf0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293760Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 334 -InterruptEvent 0 -NGENProcess 200 -Pipe 258 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293764Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe58C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 348 -InterruptEvent 0 -NGENProcess 360 -Pipe 34c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293766Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x375cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 330 -Pipe 318 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293768Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3978C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 320 -InterruptEvent 0 -NGENProcess 334 -Pipe 338 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293782Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d60C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293783Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e40C:\Windows\System32\conhost.exe%%19360x3d60\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293784Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ec8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 290 -Pipe 348 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293789Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xde0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293790Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2df4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess 35c -Pipe 364 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293795Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293796Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b38C:\Windows\System32\conhost.exe%%19360x34e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293800Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a4cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293804Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1984C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293805Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2030C:\Windows\System32\conhost.exe%%19360x1984\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293809Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x389cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293817Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a3cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293818Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a74C:\Windows\System32\conhost.exe%%19360x2a3c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293823Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293824Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x157cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 350 -InterruptEvent 0 -NGENProcess 2a8 -Pipe 290 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293828Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 314 -Pipe 200 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293842Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ed8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293843Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8c0C:\Windows\System32\conhost.exe%%19360x3ed8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293844Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 334 -InterruptEvent 0 -NGENProcess 360 -Pipe 37c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293846Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3af0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 390 -Pipe 398 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293851Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x257cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293854Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3930C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 3a0 -Pipe 390 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293856Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a8 -InterruptEvent 0 -NGENProcess 394 -Pipe 3a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293858Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ca4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b0 -InterruptEvent 0 -NGENProcess 3c4 -Pipe 358 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293861Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 314 -InterruptEvent 0 -NGENProcess 3b4 -Pipe 334 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293864Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ba4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293865Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3958C:\Windows\System32\conhost.exe%%19360x3ba4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x80cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293873Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 39c -Pipe 380 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293877Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e0 -InterruptEvent 0 -NGENProcess 3d8 -Pipe 3dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293882Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x349cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess 3f4 -Pipe 3e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293883Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a98C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293885Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d34C:\Windows\System32\conhost.exe%%19360x3a98\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293886Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f4 -InterruptEvent 0 -NGENProcess 3d4 -Pipe 3cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293891Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3384C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293892Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3764C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 370 -InterruptEvent 0 -NGENProcess 39c -Pipe 388 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293896Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 3d4 -Pipe 38c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293898Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 3d0 -Pipe 360 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293900Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 374 -InterruptEvent 0 -NGENProcess 3c8 -Pipe 3b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293902Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ad0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 370 -Pipe 3d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293905Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x474C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a4 -InterruptEvent 0 -NGENProcess 3bc -Pipe 3a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293915Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2820C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293916Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xd88C:\Windows\System32\conhost.exe%%19360x2820\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293917Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 3b8 -Pipe 27c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293922Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e8cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293925Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ca4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b4 -InterruptEvent 0 -NGENProcess 300 -Pipe 320 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293944Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b78C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293945Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3638C:\Windows\System32\conhost.exe%%19360x2b78\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293949Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293952Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 33c -InterruptEvent 0 -NGENProcess 35c -Pipe 350 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293954Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3fc -InterruptEvent 0 -NGENProcess 3e0 -Pipe 394 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293957Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e94C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 33c -InterruptEvent 0 -NGENProcess 35c -Pipe 3d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293959Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3874C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b4 -InterruptEvent 0 -NGENProcess 3c4 -Pipe 3e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293961Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 300 -Pipe 3bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293963Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3818C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 344 -InterruptEvent 0 -NGENProcess 3f4 -Pipe 370 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293967Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34acC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293968Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2574C:\Windows\System32\conhost.exe%%19360x34ac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293969Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ed4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f0 -InterruptEvent 0 -NGENProcess 300 -Pipe 3c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293974Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x375cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293977Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f4 -InterruptEvent 0 -NGENProcess 3a4 -Pipe 344 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293979Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1590C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3a4 -InterruptEvent 0 -NGENProcess 3ac -Pipe 3f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293981Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x330cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 3ac -Pipe 3ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293983Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e8 -InterruptEvent 0 -NGENProcess 35c -Pipe 33c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293985Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 3fc -Pipe 330 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3630C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 3c0 -Pipe 378 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293989Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3fc -InterruptEvent 0 -NGENProcess 368 -Pipe 39c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003293992Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39a8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003293993Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3290C:\Windows\System32\conhost.exe%%19360x39a8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003293997Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003293998Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b90C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e8 -InterruptEvent 0 -NGENProcess 32c -Pipe 314 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294002Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3514C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b4 -InterruptEvent 0 -NGENProcess 32c -Pipe 3a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294004Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 3b8 -Pipe 3b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294006Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bf4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 368 -Pipe 3f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294008Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 3fc -Pipe 3ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294011Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2918C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294012Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1fa4C:\Windows\System32\conhost.exe%%19360x2918\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294016Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2358C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294017Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess 35c -Pipe 3fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294021Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x324cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 3d8 -Pipe 32c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294023Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x186cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 300 -Pipe 3c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294041Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c58C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e8 -InterruptEvent 0 -NGENProcess 374 -Pipe 368 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294043Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x299cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294044Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b9cC:\Windows\System32\conhost.exe%%19360x299c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294048Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fd8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294051Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b68C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 300 -InterruptEvent 0 -NGENProcess 410 -Pipe 2a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294053Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e8 -InterruptEvent 0 -NGENProcess 3d8 -Pipe 404 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294055Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 424 -InterruptEvent 0 -NGENProcess 408 -Pipe 3e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294058Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3858C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 43c -InterruptEvent 0 -NGENProcess 408 -Pipe 418 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294060Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2630C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294061Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3810C:\Windows\System32\conhost.exe%%19360x2630\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294065Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3958C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294066Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 424 -InterruptEvent 0 -NGENProcess 3b8 -Pipe 43c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294068Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 438 -InterruptEvent 0 -NGENProcess 35c -Pipe 430 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294072Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 444 -InterruptEvent 0 -NGENProcess 414 -Pipe 428 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294074Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 440 -InterruptEvent 0 -NGENProcess 3f8 -Pipe 434 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294076Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 454 -InterruptEvent 0 -NGENProcess 414 -Pipe 450 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294078Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 3f8 -Pipe 438 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294080Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 420 -Pipe 458 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294082Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1120C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 480 -InterruptEvent 0 -NGENProcess 478 -Pipe 47c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294085Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1284C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 374 -InterruptEvent 0 -NGENProcess 41c -Pipe 44c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294087Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38e0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294088Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ab4C:\Windows\System32\conhost.exe%%19360x38e0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294092Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ed0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294095Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2870C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 408 -InterruptEvent 0 -NGENProcess 40c -Pipe 3c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294097Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 40c -InterruptEvent 0 -NGENProcess 4a0 -Pipe 408 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294099Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 470 -InterruptEvent 0 -NGENProcess 464 -Pipe 48c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294101Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess 420 -Pipe 42c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294104Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f6cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294105Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b08C:\Windows\System32\conhost.exe%%19360x3f6c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294109Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39fcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294112Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3444C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b8 -InterruptEvent 0 -NGENProcess 49c -Pipe 4b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294114Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 470 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294116Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x42cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b0 -InterruptEvent 0 -NGENProcess 424 -Pipe 4b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294118Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 424 -Pipe 49c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294131Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xf10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a8 -InterruptEvent 0 -NGENProcess 424 -Pipe 3d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294134Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 40c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294136Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 4c8 -Pipe 498 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294138Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ac0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294139Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d74C:\Windows\System32\conhost.exe%%19360x3ac0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294143Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3818C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294146Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess 4ac -Pipe 424 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294148Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b0 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 464 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294151Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2930C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4ac -InterruptEvent 0 -NGENProcess 374 -Pipe 484 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294153Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1da4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294154Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c94C:\Windows\System32\conhost.exe%%19360x1da4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294155Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess 300 -Pipe 4a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294160Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3878C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294163Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3de4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 300 -InterruptEvent 0 -NGENProcess 3b8 -Pipe 4a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294165Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b8 -InterruptEvent 0 -NGENProcess 494 -Pipe 300 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294167Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x243cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e8 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 4ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294169Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x380cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4dc -InterruptEvent 0 -NGENProcess 4bc -Pipe 4b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294172Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c98C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294173Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a30C:\Windows\System32\conhost.exe%%19360x3c98\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294177Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x17c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294181Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 494 -InterruptEvent 0 -NGENProcess 4d8 -Pipe 4e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294182Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2070C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d4 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 4e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294184Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3da8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 494 -InterruptEvent 0 -NGENProcess 4a0 -Pipe 490 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294186Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4cc -InterruptEvent 0 -NGENProcess 4ec -Pipe 478 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294188Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2eb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 480 -InterruptEvent 0 -NGENProcess 4ec -Pipe 414 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294190Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f0 -InterruptEvent 0 -NGENProcess 504 -Pipe 4fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294197Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1a50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d8 -InterruptEvent 0 -NGENProcess 494 -Pipe 460 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294199Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2918C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 41c -InterruptEvent 0 -NGENProcess 488 -Pipe 4a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294201Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2dacC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294202Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d1cC:\Windows\System32\conhost.exe%%19360x2dac\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294203Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3204C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess 4f8 -Pipe 4d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294208Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x594C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294211Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 518 -InterruptEvent 0 -NGENProcess 4e8 -Pipe 50c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294213Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess 504 -Pipe 4d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294226Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x388cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e8 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 518 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294228Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 508 -InterruptEvent 0 -NGENProcess 52c -Pipe 3b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294230Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ae0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 534 -InterruptEvent 0 -NGENProcess 514 -Pipe 51c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294232Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess 4f8 -Pipe 534 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294234Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 41c -InterruptEvent 0 -NGENProcess 4d8 -Pipe 520 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294237Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess 508 -Pipe 528 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294240Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aa4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f8 -InterruptEvent 0 -NGENProcess 4ec -Pipe 480 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294241Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2354C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 538 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 540 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294243Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f0 -InterruptEvent 0 -NGENProcess 4ec -Pipe 4cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294245Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c0 -InterruptEvent 0 -NGENProcess 514 -Pipe 538 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294247Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d68C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4c8 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 46c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294249Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294250Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f30C:\Windows\System32\conhost.exe%%19360x38e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294254Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x297cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294256Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4dc -InterruptEvent 0 -NGENProcess 510 -Pipe 524 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294259Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 554 -Pipe 56c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294261Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 544 -Pipe 558 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294272Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3218C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 580 -InterruptEvent 0 -NGENProcess 574 -Pipe 57c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294273Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3814C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 59c -InterruptEvent 0 -NGENProcess 4f0 -Pipe 55c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294275Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f0 -InterruptEvent 0 -NGENProcess 544 -Pipe 59c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294277Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a8 -InterruptEvent 0 -NGENProcess 598 -Pipe 4c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294279Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x12e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 5bc -Pipe 584 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294281Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a4 -InterruptEvent 0 -NGENProcess 5b8 -Pipe 5c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294283Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ac -InterruptEvent 0 -NGENProcess 5b8 -Pipe 53c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294285Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5c4 -InterruptEvent 0 -NGENProcess 5e8 -Pipe 5a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294287Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3974C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5dc -InterruptEvent 0 -NGENProcess 5ac -Pipe 5d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294289Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e0 -InterruptEvent 0 -NGENProcess 5b8 -Pipe 5c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294291Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5c0 -InterruptEvent 0 -NGENProcess 5b8 -Pipe 608 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294293Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 5dc -Pipe 5fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294295Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 600 -InterruptEvent 0 -NGENProcess 5f4 -Pipe 5e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294297Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 610 -InterruptEvent 0 -NGENProcess 530 -Pipe 614 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294299Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f4 -InterruptEvent 0 -NGENProcess 600 -Pipe 5f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294301Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 604 -InterruptEvent 0 -NGENProcess 638 -Pipe 620 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294303Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 630 -InterruptEvent 0 -NGENProcess 604 -Pipe 5e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294306Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 604 -InterruptEvent 0 -NGENProcess 5f4 -Pipe 630 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294308Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xf10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 644 -InterruptEvent 0 -NGENProcess 530 -Pipe 634 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294312Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38a4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294313Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1cdcC:\Windows\System32\conhost.exe%%19360x38a4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294317Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d74C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294318Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 628 -InterruptEvent 0 -NGENProcess 624 -Pipe 648 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294320Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ac -InterruptEvent 0 -NGENProcess 5b8 -Pipe 5c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294324Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ed4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 58c -InterruptEvent 0 -NGENProcess 5dc -Pipe 590 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294326Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a0 -InterruptEvent 0 -NGENProcess 644 -Pipe 628 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294328Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 544 -InterruptEvent 0 -NGENProcess 598 -Pipe 594 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294330Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5dc -InterruptEvent 0 -NGENProcess 650 -Pipe 5b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294332Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 530 -InterruptEvent 0 -NGENProcess 658 -Pipe 5a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294334Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5b0 -InterruptEvent 0 -NGENProcess 5f4 -Pipe 588 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294337Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3450C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f0 -InterruptEvent 0 -NGENProcess 658 -Pipe 65c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294339Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3964C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 668 -InterruptEvent 0 -NGENProcess 660 -Pipe 664 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294341Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 670 -InterruptEvent 0 -NGENProcess 678 -Pipe 62c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294343Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2838C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294344Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39a8C:\Windows\System32\conhost.exe%%19360x2838\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294345Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 654 -InterruptEvent 0 -NGENProcess 544 -Pipe 660 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294350Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2680C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294353Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3514C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 674 -InterruptEvent 0 -NGENProcess 64c -Pipe 66c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294355Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x125cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5dc -InterruptEvent 0 -NGENProcess 578 -Pipe 668 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294357Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x347cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a8 -InterruptEvent 0 -NGENProcess 5f4 -Pipe 658 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294359Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bdcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 530 -InterruptEvent 0 -NGENProcess 624 -Pipe 650 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294362Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ec4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5dc -InterruptEvent 0 -NGENProcess 5d4 -Pipe 580 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294364Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 678 -InterruptEvent 0 -NGENProcess 690 -Pipe 688 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294366Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2de0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294367Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xd5cC:\Windows\System32\conhost.exe%%19360x2de0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294371Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3750C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294374Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 690 -InterruptEvent 0 -NGENProcess 530 -Pipe 678 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294376Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d00C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a8 -InterruptEvent 0 -NGENProcess 698 -Pipe 67c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294378Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 694 -Pipe 684 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294380Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a8 -InterruptEvent 0 -NGENProcess 68c -Pipe 690 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294382Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 64c -Pipe 6a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294384Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 694 -InterruptEvent 0 -NGENProcess 698 -Pipe 530 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294397Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x9ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a4 -InterruptEvent 0 -NGENProcess 6c0 -Pipe 6b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294399Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 58c -InterruptEvent 0 -NGENProcess 578 -Pipe 4f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294401Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a0 -InterruptEvent 0 -NGENProcess 698 -Pipe 64c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294403Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3858C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 68c -InterruptEvent 0 -NGENProcess 5dc -Pipe 6ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294405Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6cc -InterruptEvent 0 -NGENProcess 6b8 -Pipe 6c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294407Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 674 -InterruptEvent 0 -NGENProcess 6d4 -Pipe 6c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294410Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x295cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6d4 -InterruptEvent 0 -NGENProcess 6b8 -Pipe 674 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294412Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x267cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 61c -InterruptEvent 0 -NGENProcess 6cc -Pipe 6a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294414Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37b0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294415Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3598C:\Windows\System32\conhost.exe%%19360x37b0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294419Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3984C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 618 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 63c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294424Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 5a8 -Pipe 694 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294426Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3958C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5d4 -InterruptEvent 0 -NGENProcess 6bc -Pipe 600 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294428Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 554 -Pipe 564 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294430Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6d0 -InterruptEvent 0 -NGENProcess 6f0 -Pipe 624 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294433Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6f8 -InterruptEvent 0 -NGENProcess 574 -Pipe 700 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294435Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ad0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294436Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3218C:\Windows\System32\conhost.exe%%19360x3ad0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294440Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294441Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6f0 -InterruptEvent 0 -NGENProcess 598 -Pipe 6d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294443Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 500 -InterruptEvent 0 -NGENProcess 54c -Pipe 554 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294447Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x12e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a0 -InterruptEvent 0 -NGENProcess 6fc -Pipe 6e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294449Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 54c -InterruptEvent 0 -NGENProcess 4c0 -Pipe 500 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294451Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5d4 -InterruptEvent 0 -NGENProcess 698 -Pipe 618 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294453Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3934C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6f4 -InterruptEvent 0 -NGENProcess 6ec -Pipe 6f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294455Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 574 -InterruptEvent 0 -NGENProcess 720 -Pipe 704 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294457Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 74c -InterruptEvent 0 -NGENProcess 70c -Pipe 748 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294459Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x197cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 724 -InterruptEvent 0 -NGENProcess 740 -Pipe 714 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294462Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x354cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 730 -Pipe 574 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294464Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 73c -InterruptEvent 0 -NGENProcess 720 -Pipe 734 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294466Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 724 -InterruptEvent 0 -NGENProcess 744 -Pipe 6e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294468Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 744 -Pipe 710 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294470Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1730C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294471Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x372cC:\Windows\System32\conhost.exe%%19360x1730\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294475Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2900C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294476Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xaf8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f8 -InterruptEvent 0 -NGENProcess 730 -Pipe 508 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294480Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xf10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 730 -InterruptEvent 0 -NGENProcess 74c -Pipe 4f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294483Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2854C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 744 -InterruptEvent 0 -NGENProcess 504 -Pipe 72c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294486Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 720 -InterruptEvent 0 -NGENProcess 6f4 -Pipe 71c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294489Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3470C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 74c -Pipe 744 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294491Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 708 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 73c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294493Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 760 -InterruptEvent 0 -NGENProcess 514 -Pipe 75c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294495Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x22e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294496Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e28C:\Windows\System32\conhost.exe%%19360x22e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294501Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x624C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294502Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3294C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 758 -InterruptEvent 0 -NGENProcess 70c -Pipe 74c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294518Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36b8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294519Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbf0C:\Windows\System32\conhost.exe%%19360x36b8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294523Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x44C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294527Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xfb8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294528Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36ccC:\Windows\System32\conhost.exe%%19360xfb8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294532Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3290C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294536Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36a0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294537Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e04C:\Windows\System32\conhost.exe%%19360x36a0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294541Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1984C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294542Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1dd4C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe%%19360x2eb4"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003294554Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xcb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wusvcs -p -s WaaSMedicSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294565Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5d4C:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003294566Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa00C:\Windows\System32\RuntimeBroker.exe%%19360x3e4C:\Windows\System32\RuntimeBroker.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003294583Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e4cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294584Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d44C:\Windows\System32\conhost.exe%%19360x2e4c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294588Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294626Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x8e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294627Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d8cC:\Windows\System32\conhost.exe%%19360x8e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294631Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294635Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 758 -InterruptEvent 0 -NGENProcess 76c -Pipe 70c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294637Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ee0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 778 -InterruptEvent 0 -NGENProcess 78c -Pipe 77c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294640Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d78C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294641Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b60C:\Windows\System32\conhost.exe%%19360x3d78\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294643Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3530C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 76c -InterruptEvent 0 -NGENProcess 514 -Pipe 758 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294648Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2da0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294649Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 78c -Pipe 348 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294653Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 398 -InterruptEvent 0 -NGENProcess 34c -Pipe 338 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294655Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 764 -InterruptEvent 0 -NGENProcess 754 -Pipe 5d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294657Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e90C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 318 -Pipe 364 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294660Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cd4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294661Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3de0C:\Windows\System32\conhost.exe%%19360x3cd4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294665Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b18C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294666Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 708 -InterruptEvent 0 -NGENProcess 780 -Pipe 504 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294670Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 568 -InterruptEvent 0 -NGENProcess 548 -Pipe 740 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294672Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2870C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 778 -InterruptEvent 0 -NGENProcess 200 -Pipe 318 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294674Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 398 -InterruptEvent 0 -NGENProcess 54c -Pipe 724 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294676Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e8 -InterruptEvent 0 -NGENProcess 770 -Pipe 34c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294678Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 790 -InterruptEvent 0 -NGENProcess 738 -Pipe 768 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294680Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3534C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 304 -Pipe 76c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294682Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x474C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 278 -InterruptEvent 0 -NGENProcess 730 -Pipe 390 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294684Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 278 -InterruptEvent 0 -NGENProcess 488 -Pipe 790 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294686Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 780 -InterruptEvent 0 -NGENProcess 4d8 -Pipe 6d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294688Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 488 -InterruptEvent 0 -NGENProcess 560 -Pipe 278 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294690Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ce4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 548 -InterruptEvent 0 -NGENProcess 54c -Pipe 778 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294692Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1284C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 798 -InterruptEvent 0 -NGENProcess 774 -Pipe 794 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294700Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7a0 -InterruptEvent 0 -NGENProcess 4d8 -Pipe 784 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294707Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 788 -InterruptEvent 0 -NGENProcess 708 -Pipe 2d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294709Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x18c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294710Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e14C:\Windows\System32\conhost.exe%%19360x18c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294711Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 79c -Pipe 37c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294713Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ca8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7bc -InterruptEvent 0 -NGENProcess 7c4 -Pipe 7a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294715Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 7b0 -Pipe 7c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294720Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b78C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294721Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2418C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 708 -InterruptEvent 0 -NGENProcess 774 -Pipe 7b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294723Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x368cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 798 -InterruptEvent 0 -NGENProcess 7bc -Pipe 7b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294725Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2574C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 754 -InterruptEvent 0 -NGENProcess 788 -Pipe 7cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294727Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 788 -InterruptEvent 0 -NGENProcess 7e8 -Pipe 7d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294731Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ef8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7ec -InterruptEvent 0 -NGENProcess 7d8 -Pipe 7dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294733Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1898C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f4 -InterruptEvent 0 -NGENProcess 4d8 -Pipe 7b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294735Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess 398 -Pipe 7a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294737Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 79c -InterruptEvent 0 -NGENProcess 548 -Pipe 52c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294761Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 41c -InterruptEvent 0 -NGENProcess 4f4 -Pipe 7e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294763Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 4f4 -Pipe 730 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294765Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 568 -InterruptEvent 0 -NGENProcess 4f4 -Pipe 4d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294767Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x243cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294768Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26e8C:\Windows\System32\conhost.exe%%19360x243c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294769Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 764 -InterruptEvent 0 -NGENProcess 79c -Pipe 7f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294771Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 79c -InterruptEvent 0 -NGENProcess 7d8 -Pipe 764 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294776Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294777Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7ec -InterruptEvent 0 -NGENProcess 41c -Pipe 7f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294781Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 548 -InterruptEvent 0 -NGENProcess 54c -Pipe 41c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294783Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2874C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 7ec -Pipe 54c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294785Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3670C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 514 -Pipe 200 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294788Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294789Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2eb0C:\Windows\System32\conhost.exe%%19360x35d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294793Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2780C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294797Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 738 -Pipe 788 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294799Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 568 -InterruptEvent 0 -NGENProcess 754 -Pipe 7f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294801Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 548 -InterruptEvent 0 -NGENProcess 7fc -Pipe 7d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294803Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a70C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294804Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e20C:\Windows\System32\conhost.exe%%19360x3a70\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294805Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3914C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 290 -InterruptEvent 0 -NGENProcess 514 -Pipe 398 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294807Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 514 -InterruptEvent 0 -NGENProcess 4f4 -Pipe 290 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294812Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a08C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294813Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 79c -Pipe 7bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294815Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 754 -InterruptEvent 0 -NGENProcess 7a8 -Pipe 79c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294820Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3810C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 770 -InterruptEvent 0 -NGENProcess 7ac -Pipe 774 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294822Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ee0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 7ec -Pipe 708 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294824Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 770 -InterruptEvent 0 -NGENProcess 780 -Pipe 304 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294826Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 798 -InterruptEvent 0 -NGENProcess 7ac -Pipe 7a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294828Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 548 -InterruptEvent 0 -NGENProcess 7c8 -Pipe 4f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294830Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3658C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 780 -InterruptEvent 0 -NGENProcess 718 -Pipe 760 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294832Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 550 -InterruptEvent 0 -NGENProcess 6f0 -Pipe 4c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294834Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 6bc -Pipe 5a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294837Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d98C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294838Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xc9cC:\Windows\System32\conhost.exe%%19360x3d98\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294839Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 720 -InterruptEvent 0 -NGENProcess 258 -Pipe 7ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294844Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13c8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294845Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f4 -InterruptEvent 0 -NGENProcess 7ec -Pipe 69c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294849Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2870C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 6cc -Pipe 6b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294851Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x367cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 644 -InterruptEvent 0 -NGENProcess 6ac -Pipe 5dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294853Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ac -InterruptEvent 0 -NGENProcess 654 -Pipe 644 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294855Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6bc -InterruptEvent 0 -NGENProcess 698 -Pipe 728 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294857Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 640 -InterruptEvent 0 -NGENProcess 604 -Pipe 5bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294871Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d10C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294872Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5d0C:\Windows\System32\conhost.exe%%19360x3d10\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294873Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 640 -InterruptEvent 0 -NGENProcess 780 -Pipe 68c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294875Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x450C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7ac -InterruptEvent 0 -NGENProcess 6cc -Pipe 6b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294877Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x392cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 61c -InterruptEvent 0 -NGENProcess 604 -Pipe 5b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294879Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3444C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 5cc -Pipe 640 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294884Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b18C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294885Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4bc -InterruptEvent 0 -NGENProcess 374 -Pipe 494 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294889Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6bc -InterruptEvent 0 -NGENProcess 5f0 -Pipe 578 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294891Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 638 -InterruptEvent 0 -NGENProcess 5b4 -Pipe 4c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294893Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2664C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6cc -InterruptEvent 0 -NGENProcess 5ec -Pipe 4bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294895Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ac -InterruptEvent 0 -NGENProcess 5d0 -Pipe 61c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294897Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5cc -InterruptEvent 0 -NGENProcess 5c0 -Pipe 610 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294900Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x188C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f0 -InterruptEvent 0 -NGENProcess 6cc -Pipe 780 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294902Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xf10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6ac -InterruptEvent 0 -NGENProcess 6ec -Pipe 698 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294904Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 720 -InterruptEvent 0 -NGENProcess 654 -Pipe 750 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294906Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b78C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294907Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1bdcC:\Windows\System32\conhost.exe%%19360x3b78\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294908Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7ac -InterruptEvent 0 -NGENProcess 7c0 -Pipe 718 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294913Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294914Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 58c -Pipe 7ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294918Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2168C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6e0 -InterruptEvent 0 -NGENProcess 5ac -Pipe 654 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294920Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e0 -InterruptEvent 0 -NGENProcess 344 -Pipe 5f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294922Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 370 -InterruptEvent 0 -NGENProcess 6e0 -Pipe 3c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294924Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ca4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6f4 -InterruptEvent 0 -NGENProcess 3bc -Pipe 78c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294927Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1388C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f4 -InterruptEvent 0 -NGENProcess 4ec -Pipe 370 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294929Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3350C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 394 -Pipe 604 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294931Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3878C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294932Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f7cC:\Windows\System32\conhost.exe%%19360x3878\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294933Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 3bc -Pipe 570 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294938Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36ccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294939Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 374 -Pipe 350 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294947Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2de0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6e0 -InterruptEvent 0 -NGENProcess 3e4 -Pipe 38c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294949Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2874C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 394 -InterruptEvent 0 -NGENProcess 3e0 -Pipe 3a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294955Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x144cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a0 -InterruptEvent 0 -NGENProcess 360 -Pipe 4ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294957Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 3d4 -Pipe 7d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294959Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x814C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003294960Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35d0C:\Windows\System32\conhost.exe%%19360x814\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003294961Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f4 -InterruptEvent 0 -NGENProcess 6e0 -Pipe 258 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294966Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3498C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003294967Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6f4 -InterruptEvent 0 -NGENProcess 3d4 -Pipe 754 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294971Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3590C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3e4 -InterruptEvent 0 -NGENProcess 598 -Pipe 3f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294973Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 598 -InterruptEvent 0 -NGENProcess 7e0 -Pipe 3e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294975Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 514 -Pipe 548 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294977Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 7e8 -Pipe 680 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294979Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1774C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess 514 -Pipe 7e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294981Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 388 -InterruptEvent 0 -NGENProcess 488 -Pipe 3e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294983Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6f4 -InterruptEvent 0 -NGENProcess 7c8 -Pipe 320 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294985Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x381cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 738 -InterruptEvent 0 -NGENProcess 420 -Pipe 514 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003294987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2630C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 27c -InterruptEvent 0 -NGENProcess 7e8 -Pipe 6d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295000Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3810C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d0 -InterruptEvent 0 -NGENProcess 374 -Pipe 3dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295002Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3460C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 420 -Pipe 4dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295004Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 330 -InterruptEvent 0 -NGENProcess 7c0 -Pipe 394 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295007Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x177cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 738 -InterruptEvent 0 -NGENProcess 3cc -Pipe 438 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295009Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2f08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d4 -InterruptEvent 0 -NGENProcess 488 -Pipe 380 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295011Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x280cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 450 -InterruptEvent 0 -NGENProcess 770 -Pipe 47c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295013Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x186cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 770 -InterruptEvent 0 -NGENProcess 420 -Pipe 450 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295015Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3920C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295016Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3724C:\Windows\System32\conhost.exe%%19360x3920\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295017Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 4e8 -Pipe 5ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295022Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3654C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295025Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 418 -Pipe 27c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295027Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3678C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3d0 -InterruptEvent 0 -NGENProcess 458 -Pipe 430 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295029Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x367cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7fc -InterruptEvent 0 -NGENProcess 33c -Pipe 770 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295031Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2a8 -InterruptEvent 0 -NGENProcess 7c8 -Pipe 4e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295033Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fe4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 33c -Pipe 434 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295035Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x474C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 3c8 -Pipe 2a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295037Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess 3ac -Pipe 3a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295039Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3f0 -InterruptEvent 0 -NGENProcess 44c -Pipe 404 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295041Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x153cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 43c -InterruptEvent 0 -NGENProcess 420 -Pipe 388 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295043Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3abcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 44c -Pipe 314 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295052Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1408C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295053Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d10C:\Windows\System32\conhost.exe%%19360x1408\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295063Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c40C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295064Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 738 -InterruptEvent 0 -NGENProcess 488 -Pipe 418 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295066Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 368 -InterruptEvent 0 -NGENProcess 3ac -Pipe 484 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295068Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 39c -InterruptEvent 0 -NGENProcess 3d0 -Pipe 488 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295070Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3b4 -InterruptEvent 0 -NGENProcess 4b4 -Pipe 3d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295074Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7ec -InterruptEvent 0 -NGENProcess 32c -Pipe 510 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295076Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2650C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 32c -InterruptEvent 0 -NGENProcess 670 -Pipe 7ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295078Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 544 -InterruptEvent 0 -NGENProcess 42c -Pipe 3c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295080Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 3fc -Pipe 3d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295082Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 498 -InterruptEvent 0 -NGENProcess 5d0 -Pipe 4b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295084Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x22c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 498 -InterruptEvent 0 -NGENProcess 378 -Pipe 544 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295086Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 670 -InterruptEvent 0 -NGENProcess 408 -Pipe 32c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295088Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x395cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 49c -InterruptEvent 0 -NGENProcess 798 -Pipe 544 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295090Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 48c -Pipe 798 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295092Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 464 -InterruptEvent 0 -NGENProcess 3c8 -Pipe 33c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295094Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38ccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 378 -InterruptEvent 0 -NGENProcess 3fc -Pipe 7fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295096Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 39c -Pipe 3b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295098Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 420 -InterruptEvent 0 -NGENProcess 378 -Pipe 3d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295100Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 42c -InterruptEvent 0 -NGENProcess 470 -Pipe 49c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295102Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x365cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6e0 -InterruptEvent 0 -NGENProcess 7e8 -Pipe 6f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295104Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 378 -InterruptEvent 0 -NGENProcess 498 -Pipe 3fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295106Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3610C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess 3ac -Pipe 43c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295108Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 44c -InterruptEvent 0 -NGENProcess 498 -Pipe 420 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295110Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 378 -InterruptEvent 0 -NGENProcess 44c -Pipe 48c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295112Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x125cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 378 -InterruptEvent 0 -NGENProcess 498 -Pipe 330 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295114Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 6e0 -Pipe 670 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295117Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c8 -InterruptEvent 0 -NGENProcess 428 -Pipe 39c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295119Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3c8 -InterruptEvent 0 -NGENProcess 3ac -Pipe 464 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295121Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3bc -InterruptEvent 0 -NGENProcess 428 -Pipe 6cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295123Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x144cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 40c -InterruptEvent 0 -NGENProcess 374 -Pipe 738 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295125Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3cc -InterruptEvent 0 -NGENProcess 7c8 -Pipe 3e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295127Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3844C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6e0 -InterruptEvent 0 -NGENProcess 378 -Pipe 458 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295129Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2918C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 458 -InterruptEvent 0 -NGENProcess 424 -Pipe 378 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295131Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ab0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 458 -InterruptEvent 0 -NGENProcess 7c8 -Pipe 6e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295133Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3944C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295134Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3418C:\Windows\System32\conhost.exe%%19360x3944\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295135Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2610C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 458 -Pipe 3bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295137Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6f0 -InterruptEvent 0 -NGENProcess 408 -Pipe 3b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295139Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2954C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b4 -InterruptEvent 0 -NGENProcess 40c -Pipe 3cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295141Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7e8 -InterruptEvent 0 -NGENProcess 3ac -Pipe 368 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295143Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 428 -Pipe 7e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295148Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a70C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295149Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5d0 -InterruptEvent 0 -NGENProcess 568 -Pipe 550 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295151Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 498 -Pipe 5d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295153Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3858C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 360 -Pipe 40c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295155Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x244cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a0 -InterruptEvent 0 -NGENProcess 5e4 -Pipe 6ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295159Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bf4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 720 -InterruptEvent 0 -NGENProcess 428 -Pipe 6ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295161Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 4b4 -Pipe 720 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295163Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 458 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 3c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295165Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6bc -InterruptEvent 0 -NGENProcess 468 -Pipe 6f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295167Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3930C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 474 -InterruptEvent 0 -NGENProcess 444 -Pipe 410 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295169Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3db4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 408 -Pipe 3f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295171Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 44c -Pipe 5cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295173Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f0 -InterruptEvent 0 -NGENProcess 42c -Pipe 458 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295175Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 468 -InterruptEvent 0 -NGENProcess 5c0 -Pipe 6bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295178Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 444 -Pipe 42c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295180Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3218C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5c0 -InterruptEvent 0 -NGENProcess 568 -Pipe 454 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295182Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 444 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295184Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 6a0 -Pipe 5e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295186Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 598 -InterruptEvent 0 -NGENProcess 58c -Pipe 5c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295188Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x11bcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295189Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b68C:\Windows\System32\conhost.exe%%19360x11bc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295193Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1168C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295196Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 468 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 7c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295198Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x359cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 344 -InterruptEvent 0 -NGENProcess 3a0 -Pipe 58c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295200Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 35c -Pipe 468 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295202Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6fc -InterruptEvent 0 -NGENProcess 408 -Pipe 638 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295209Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 408 -InterruptEvent 0 -NGENProcess 7c0 -Pipe 6fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295217Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3518C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7c0 -InterruptEvent 0 -NGENProcess 3a0 -Pipe 408 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295219Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3694C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 568 -InterruptEvent 0 -NGENProcess 344 -Pipe 448 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295221Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f0 -InterruptEvent 0 -NGENProcess 3ec -Pipe 45c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295223Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1408C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 440 -Pipe 498 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295225Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 568 -InterruptEvent 0 -NGENProcess 334 -Pipe 3a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295227Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 344 -InterruptEvent 0 -NGENProcess 44c -Pipe 7c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295230Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 470 -InterruptEvent 0 -NGENProcess 3ec -Pipe 5b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295232Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 428 -Pipe 470 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295234Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 424 -Pipe 474 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295236Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ef8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 3ec -Pipe 360 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295238Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xcd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 560 -InterruptEvent 0 -NGENProcess 568 -Pipe 44c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295240Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 424 -Pipe 568 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295242Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1730C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 560 -Pipe 424 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295244Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f0 -InterruptEvent 0 -NGENProcess 35c -Pipe 560 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295246Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5ec -InterruptEvent 0 -NGENProcess 3ac -Pipe 358 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295248Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c5cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295249Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3470C:\Windows\System32\conhost.exe%%19360x1c5c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295250Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c68C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 428 -InterruptEvent 0 -NGENProcess 35c -Pipe 344 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295252Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x376cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 440 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 598 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295254Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ac -InterruptEvent 0 -NGENProcess 6a0 -Pipe 428 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295256Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3350C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess 4b4 -Pipe 3ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295258Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 814 -InterruptEvent 0 -NGENProcess 80c -Pipe 810 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295260Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 81c -InterruptEvent 0 -NGENProcess 844 -Pipe 820 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295264Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x397cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295266Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2048C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 854 -InterruptEvent 0 -NGENProcess 868 -Pipe 858 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295268Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2838C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 840 -InterruptEvent 0 -NGENProcess 84c -Pipe 818 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295270Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3214C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 838 -InterruptEvent 0 -NGENProcess 870 -Pipe 86c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295272Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x379cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 838 -InterruptEvent 0 -NGENProcess 864 -Pipe 83c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295276Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 884 -InterruptEvent 0 -NGENProcess 898 -Pipe 888 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295279Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2de0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 898 -InterruptEvent 0 -NGENProcess 88c -Pipe 874 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295281Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8a0 -InterruptEvent 0 -NGENProcess 870 -Pipe 864 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295283Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x144cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295284Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a78C:\Windows\System32\conhost.exe%%19360x144c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295285Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b4 -InterruptEvent 0 -NGENProcess 8ac -Pipe 8b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295290Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295291Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 84c -InterruptEvent 0 -NGENProcess 868 -Pipe 898 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295295Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 8a0 -Pipe 870 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295297Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 878 -InterruptEvent 0 -NGENProcess 89c -Pipe 87c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295299Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 894 -InterruptEvent 0 -NGENProcess 81c -Pipe 890 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295301Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b8 -InterruptEvent 0 -NGENProcess 830 -Pipe 85c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295304Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1774C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 844 -InterruptEvent 0 -NGENProcess 8cc -Pipe 868 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295306Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b8 -InterruptEvent 0 -NGENProcess 84c -Pipe 854 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295308Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3af0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 838 -InterruptEvent 0 -NGENProcess 8c0 -Pipe 894 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295310Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e0 -InterruptEvent 0 -NGENProcess 8d4 -Pipe 8dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295312Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3978C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295313Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dd0C:\Windows\System32\conhost.exe%%19360x3978\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295314Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3460C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 81c -InterruptEvent 0 -NGENProcess 8e8 -Pipe 884 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295316Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b58C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 878 -InterruptEvent 0 -NGENProcess 8e0 -Pipe 830 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295321Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3598C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295322Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c4 -InterruptEvent 0 -NGENProcess 84c -Pipe 8c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295326Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x276cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8fc -InterruptEvent 0 -NGENProcess 914 -Pipe 90c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295328Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d94C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 91c -InterruptEvent 0 -NGENProcess 910 -Pipe 918 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295330Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b8 -InterruptEvent 0 -NGENProcess 840 -Pipe 8a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295332Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 900 -InterruptEvent 0 -NGENProcess 840 -Pipe 8cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295334Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 904 -InterruptEvent 0 -NGENProcess 914 -Pipe 88c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295337Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3814C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 92c -InterruptEvent 0 -NGENProcess 920 -Pipe 928 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295339Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 93c -InterruptEvent 0 -NGENProcess 930 -Pipe 938 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295341Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 94c -InterruptEvent 0 -NGENProcess 8fc -Pipe 948 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295343Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x367cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 920 -InterruptEvent 0 -NGENProcess 940 -Pipe 92c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295346Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2834C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 95c -InterruptEvent 0 -NGENProcess 950 -Pipe 958 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295349Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2cc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 920 -InterruptEvent 0 -NGENProcess 8fc -Pipe 924 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295351Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 96c -InterruptEvent 0 -NGENProcess 8c0 -Pipe 944 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295353Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3950C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295354Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3edcC:\Windows\System32\conhost.exe%%19360x3950\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295355Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x153cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8fc -InterruptEvent 0 -NGENProcess 860 -Pipe 85c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295358Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c0 -InterruptEvent 0 -NGENProcess 94c -Pipe 96c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295363Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3abcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295364Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e8 -InterruptEvent 0 -NGENProcess 844 -Pipe 8fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295368Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 914 -InterruptEvent 0 -NGENProcess 840 -Pipe 8d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295370Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x33d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 914 -InterruptEvent 0 -NGENProcess 964 -Pipe 93c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295372Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 980 -InterruptEvent 0 -NGENProcess 930 -Pipe 97c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295374Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2418C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 930 -InterruptEvent 0 -NGENProcess 960 -Pipe 980 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295376Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 908 -InterruptEvent 0 -NGENProcess 914 -Pipe 920 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295378Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xec4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 940 -InterruptEvent 0 -NGENProcess 974 -Pipe 964 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295392Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x18c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295393Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b4cC:\Windows\System32\conhost.exe%%19360x18c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295397Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x394cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295400Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 98c -InterruptEvent 0 -NGENProcess 8f4 -Pipe 974 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295402Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x272cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e4 -InterruptEvent 0 -NGENProcess 978 -Pipe 904 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295404Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2930C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e4 -InterruptEvent 0 -NGENProcess 81c -Pipe 8e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295406Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3970C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c0 -InterruptEvent 0 -NGENProcess 994 -Pipe 990 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295409Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8e4 -InterruptEvent 0 -NGENProcess 840 -Pipe 908 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295411Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x19a8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295412Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e40C:\Windows\System32\conhost.exe%%19360x19a8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295416Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3234C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295417Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9a0 -InterruptEvent 0 -NGENProcess 5ec -Pipe 99c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295419Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x366cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 840 -InterruptEvent 0 -NGENProcess 9a4 -Pipe 8e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295423Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xba8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9bc -InterruptEvent 0 -NGENProcess 9b0 -Pipe 9b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295425Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fe0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9dc -InterruptEvent 0 -NGENProcess 9d0 -Pipe 9d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295427Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dc4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 960 -InterruptEvent 0 -NGENProcess 988 -Pipe 9b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295429Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2048C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 930 -InterruptEvent 0 -NGENProcess 8f4 -Pipe 9a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295431Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a3cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e4 -InterruptEvent 0 -NGENProcess 900 -Pipe 9e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295433Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x354cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9fc -InterruptEvent 0 -NGENProcess 9f4 -Pipe 9f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295435Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c5cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c8 -InterruptEvent 0 -NGENProcess 970 -Pipe 81c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295437Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a04 -InterruptEvent 0 -NGENProcess 9ec -Pipe a00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295439Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x6e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8f4 -InterruptEvent 0 -NGENProcess 9e4 -Pipe 910 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295441Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x162cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e4 -InterruptEvent 0 -NGENProcess 98c -Pipe 8f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295443Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9dc -InterruptEvent 0 -NGENProcess 988 -Pipe 9f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295445Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ad4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e8 -InterruptEvent 0 -NGENProcess 9ec -Pipe 9fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295447Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3384C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a10 -InterruptEvent 0 -NGENProcess a08 -Pipe a0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295449Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9a0 -InterruptEvent 0 -NGENProcess 998 -Pipe 914 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295451Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a04 -InterruptEvent 0 -NGENProcess 960 -Pipe 5ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295453Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a2c -InterruptEvent 0 -NGENProcess a34 -Pipe a20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295455Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a04 -InterruptEvent 0 -NGENProcess 9a0 -Pipe 9ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295457Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ec8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9a0 -InterruptEvent 0 -NGENProcess 994 -Pipe a04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295460Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess a1c -Pipe 9e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295462Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 51c -Pipe 480 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295464Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 534 -InterruptEvent 0 -NGENProcess 6a8 -Pipe 520 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295466Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2414C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 91c -Pipe 5c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295468Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 67c -InterruptEvent 0 -NGENProcess 994 -Pipe 684 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295470Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 540 -InterruptEvent 0 -NGENProcess 4c4 -Pipe 6a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295472Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 534 -InterruptEvent 0 -NGENProcess 688 -Pipe 690 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295474Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3444C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 55c -InterruptEvent 0 -NGENProcess 688 -Pipe 3b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295476Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3464C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295477Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ecC:\Windows\System32\conhost.exe%%19360x3464\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295478Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a30 -InterruptEvent 0 -NGENProcess 5a4 -Pipe 59c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295480Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x167cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 558 -InterruptEvent 0 -NGENProcess 678 -Pipe 57c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295482Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3810C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 678 -InterruptEvent 0 -NGENProcess 524 -Pipe 558 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295484Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 524 -InterruptEvent 0 -NGENProcess 55c -Pipe 678 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295488Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f30C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295490Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32bcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 534 -InterruptEvent 0 -NGENProcess 580 -Pipe 63c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295492Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 4d0 -Pipe a30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295494Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 688 -InterruptEvent 0 -NGENProcess 75c -Pipe 6c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295498Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 584 -InterruptEvent 0 -NGENProcess 9a0 -Pipe 6c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295500Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x594C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 744 -Pipe 71c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295502Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 688 -InterruptEvent 0 -NGENProcess 534 -Pipe 540 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295504Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess 694 -Pipe 55c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295506Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 688 -InterruptEvent 0 -NGENProcess 744 -Pipe 674 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295508Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 534 -InterruptEvent 0 -NGENProcess 9a0 -Pipe 580 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295510Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 528 -InterruptEvent 0 -NGENProcess 584 -Pipe 994 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295512Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f8 -InterruptEvent 0 -NGENProcess 530 -Pipe 534 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295514Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3504C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 850 -InterruptEvent 0 -NGENProcess 998 -Pipe 524 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295516Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3934C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a40 -InterruptEvent 0 -NGENProcess a38 -Pipe a3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295518Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x378C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 60c -InterruptEvent 0 -NGENProcess 64c -Pipe 91c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295520Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c4 -InterruptEvent 0 -NGENProcess a50 -Pipe 508 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295523Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295524Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38fcC:\Windows\System32\conhost.exe%%19360x5d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295528Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e84C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295552Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295553Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3db8C:\Windows\System32\conhost.exe%%19360x3a04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295557Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3984C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295570Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f80C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295571Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39fcC:\Windows\System32\conhost.exe%%19360x3f80\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295575Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b78C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295582Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2930C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295583Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ef8C:\Windows\System32\conhost.exe%%19360x2930\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295587Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d2cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295591Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c58C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295592Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xfb4C:\Windows\System32\conhost.exe%%19360x3c58\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295596Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x624C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295613Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x35b8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295614Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1db4C:\Windows\System32\conhost.exe%%19360x35b8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295618Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x382cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295622Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3648C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295623Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x15e0C:\Windows\System32\conhost.exe%%19360x3648\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295627Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a3cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295631Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b84C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295632Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a34C:\Windows\System32\conhost.exe%%19360x3b84\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295636Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x386cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295639Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2eb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4cc -InterruptEvent 0 -NGENProcess 4a8 -Pipe 300 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295641Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a8 -InterruptEvent 0 -NGENProcess a5c -Pipe 4cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295643Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 850 -InterruptEvent 0 -NGENProcess 8b8 -Pipe 934 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295645Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a54 -InterruptEvent 0 -NGENProcess 4f8 -Pipe 4c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295647Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3818C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b8 -InterruptEvent 0 -NGENProcess 998 -Pipe 850 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295649Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a44 -InterruptEvent 0 -NGENProcess 998 -Pipe 694 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295651Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 584 -InterruptEvent 0 -NGENProcess 60c -Pipe 608 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295653Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x348C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6c4 -InterruptEvent 0 -NGENProcess 9ec -Pipe 53c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295655Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 73c -InterruptEvent 0 -NGENProcess a1c -Pipe 56c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295657Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a4c -InterruptEvent 0 -NGENProcess 528 -Pipe a48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295659Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x356cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 518 -InterruptEvent 0 -NGENProcess a44 -Pipe 5d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295661Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fa4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6c4 -InterruptEvent 0 -NGENProcess a60 -Pipe a1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295663Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c0 -InterruptEvent 0 -NGENProcess a4c -Pipe 984 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295665Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x381cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 51c -InterruptEvent 0 -NGENProcess 530 -Pipe a24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295667Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3418C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a54 -InterruptEvent 0 -NGENProcess 8b8 -Pipe 530 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295669Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e00C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a70 -InterruptEvent 0 -NGENProcess 64c -Pipe 650 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295671Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 62c -InterruptEvent 0 -NGENProcess a44 -Pipe 660 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295673Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a78 -InterruptEvent 0 -NGENProcess 518 -Pipe a74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295675Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 658 -InterruptEvent 0 -NGENProcess 664 -Pipe 850 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295677Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a80 -InterruptEvent 0 -NGENProcess 60c -Pipe a7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295679Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b8 -InterruptEvent 0 -NGENProcess 51c -Pipe a44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295681Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32bcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aa0 -InterruptEvent 0 -NGENProcess a8c -Pipe a9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295683Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bf4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 67c -InterruptEvent 0 -NGENProcess a90 -Pipe a8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295685Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent abc -InterruptEvent 0 -NGENProcess a70 -Pipe ab8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295687Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x248cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 518 -InterruptEvent 0 -NGENProcess 4d0 -Pipe a78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295689Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac0 -InterruptEvent 0 -NGENProcess ad8 -Pipe acc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295692Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x594C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ad8 -InterruptEvent 0 -NGENProcess aa4 -Pipe ac0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295694Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent adc -InterruptEvent 0 -NGENProcess af0 -Pipe ae0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295696Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent af0 -InterruptEvent 0 -NGENProcess ae8 -Pipe adc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295698Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b08 -InterruptEvent 0 -NGENProcess 60c -Pipe b04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295700Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent afc -InterruptEvent 0 -NGENProcess ae8 -Pipe ae4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295702Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x80cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac4 -InterruptEvent 0 -NGENProcess ac8 -Pipe af0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295704Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x364C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b0c -InterruptEvent 0 -NGENProcess b14 -Pipe b08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295706Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ed0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295707Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x25d8C:\Windows\System32\conhost.exe%%19360x3ed0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295708Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b0c -InterruptEvent 0 -NGENProcess b10 -Pipe 60c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295710Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b2c -InterruptEvent 0 -NGENProcess b18 -Pipe b28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295712Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 64c -InterruptEvent 0 -NGENProcess a54 -Pipe a80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295714Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1284C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b20 -InterruptEvent 0 -NGENProcess b24 -Pipe b18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295719Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3914C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295720Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a4 -InterruptEvent 0 -NGENProcess a54 -Pipe 73c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295722Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e90C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6a4 -InterruptEvent 0 -NGENProcess a88 -Pipe abc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295724Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b14 -InterruptEvent 0 -NGENProcess b34 -Pipe b00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295728Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a70 -InterruptEvent 0 -NGENProcess b20 -Pipe b10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295730Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b34 -InterruptEvent 0 -NGENProcess a98 -Pipe b24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295732Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b2c -InterruptEvent 0 -NGENProcess b30 -Pipe b38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295734Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x307cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ae8 -InterruptEvent 0 -NGENProcess a98 -Pipe ab4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295736Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x22c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 668 -InterruptEvent 0 -NGENProcess b3c -Pipe b30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295738Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x369cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 668 -InterruptEvent 0 -NGENProcess afc -Pipe a6c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295740Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b20 -InterruptEvent 0 -NGENProcess 6a4 -Pipe 584 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295742Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 668 -InterruptEvent 0 -NGENProcess 6c4 -Pipe a60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295744Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ad0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ad4 -InterruptEvent 0 -NGENProcess af8 -Pipe 67c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295746Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x10d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac8 -InterruptEvent 0 -NGENProcess afc -Pipe b14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295748Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 668 -InterruptEvent 0 -NGENProcess a70 -Pipe 518 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295750Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ae8 -InterruptEvent 0 -NGENProcess b44 -Pipe aa0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295763Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac4 -InterruptEvent 0 -NGENProcess ac8 -Pipe b34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295765Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x28e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b48 -InterruptEvent 0 -NGENProcess a88 -Pipe aec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295767Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ed8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ae8 -InterruptEvent 0 -NGENProcess b40 -Pipe a88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295770Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ad8 -InterruptEvent 0 -NGENProcess b1c -Pipe ab0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295772Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ae8 -InterruptEvent 0 -NGENProcess 4d0 -Pipe b50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295774Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3378C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a54 -InterruptEvent 0 -NGENProcess ad8 -Pipe aac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295776Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d0 -InterruptEvent 0 -NGENProcess b5c -Pipe ae8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295778Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b2cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295779Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3574C:\Windows\System32\conhost.exe%%19360x1b2c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295780Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b70 -InterruptEvent 0 -NGENProcess b64 -Pipe b44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295782Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b48 -InterruptEvent 0 -NGENProcess 4d0 -Pipe afc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295787Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295790Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b7c -InterruptEvent 0 -NGENProcess b6c -Pipe b68 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295792Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b80 -InterruptEvent 0 -NGENProcess b70 -Pipe b5c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295794Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 658 -InterruptEvent 0 -NGENProcess b6c -Pipe b48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295796Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aa4 -InterruptEvent 0 -NGENProcess a98 -Pipe b1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295798Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1dc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess 51c -Pipe b4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295800Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3834C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a54 -InterruptEvent 0 -NGENProcess b84 -Pipe b2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295802Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8b8 -InterruptEvent 0 -NGENProcess 8c0 -Pipe 65c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295804Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3840C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess 66c -Pipe a5c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295806Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3790C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 594 -InterruptEvent 0 -NGENProcess 588 -Pipe 5b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295808Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b8c -InterruptEvent 0 -NGENProcess 9ec -Pipe a54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295810Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b7c -InterruptEvent 0 -NGENProcess 664 -Pipe 8b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295812Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b70 -InterruptEvent 0 -NGENProcess b94 -Pipe 588 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295814Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 62c -InterruptEvent 0 -NGENProcess 8c0 -Pipe b7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295816Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2630C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 734 -Pipe 66c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295819Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3444C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess ad8 -Pipe 6e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295820Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b98 -InterruptEvent 0 -NGENProcess 594 -Pipe b94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295823Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2598C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 594 -InterruptEvent 0 -NGENProcess 590 -Pipe b98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295825Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ba0 -InterruptEvent 0 -NGENProcess 664 -Pipe b88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295827Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c0 -InterruptEvent 0 -NGENProcess ad8 -Pipe 664 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295829Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x276cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bc0 -InterruptEvent 0 -NGENProcess bb8 -Pipe bbc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295831Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2768C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ba8 -InterruptEvent 0 -NGENProcess ba4 -Pipe ad8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295833Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bcc -InterruptEvent 0 -NGENProcess 748 -Pipe bc8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295835Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3848C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess b9c -Pipe b84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295837Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ffcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess b70 -Pipe bd0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295839Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ba4 -InterruptEvent 0 -NGENProcess b40 -Pipe 574 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295841Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ac8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bb4 -InterruptEvent 0 -NGENProcess 748 -Pipe ba0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295844Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x594C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bc4 -InterruptEvent 0 -NGENProcess b64 -Pipe bb8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295846Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x265cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295847Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14dcC:\Windows\System32\conhost.exe%%19360x265c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295848Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bb4 -InterruptEvent 0 -NGENProcess ba8 -Pipe b40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295850Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3480C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bac -InterruptEvent 0 -NGENProcess 590 -Pipe bcc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295852Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2834C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bdc -InterruptEvent 0 -NGENProcess 658 -Pipe bd4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295854Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b64 -InterruptEvent 0 -NGENProcess 590 -Pipe bc4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295856Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bf0 -InterruptEvent 0 -NGENProcess be4 -Pipe bec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295858Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2f08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a0 -InterruptEvent 0 -NGENProcess b9c -Pipe ba8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295860Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x27d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8c0 -InterruptEvent 0 -NGENProcess 748 -Pipe b9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295864Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39d8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295866Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 6e8 -Pipe aa4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295868Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 618 -InterruptEvent 0 -NGENProcess bd8 -Pipe 628 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295870Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bac -InterruptEvent 0 -NGENProcess ba4 -Pipe b64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess bf4 -Pipe a94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295876Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2854C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 618 -InterruptEvent 0 -NGENProcess 62c -Pipe 734 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295878Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 62c -InterruptEvent 0 -NGENProcess bb4 -Pipe bf0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295880Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfe8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bb4 -InterruptEvent 0 -NGENProcess bc0 -Pipe 62c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295882Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 500 -InterruptEvent 0 -NGENProcess bb0 -Pipe bf4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295884Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xcd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6e4 -InterruptEvent 0 -NGENProcess 624 -Pipe 6d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295886Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2650C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 624 -InterruptEvent 0 -NGENProcess be0 -Pipe 6e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295889Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x22c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 590 -InterruptEvent 0 -NGENProcess 714 -Pipe b70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295890Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x369cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 500 -InterruptEvent 0 -NGENProcess 748 -Pipe bd0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295892Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 624 -InterruptEvent 0 -NGENProcess 714 -Pipe 704 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295894Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bd8 -InterruptEvent 0 -NGENProcess 748 -Pipe 658 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295896Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x398cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bdc -InterruptEvent 0 -NGENProcess 5a0 -Pipe bf8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295898Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x242cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 618 -InterruptEvent 0 -NGENProcess ba4 -Pipe bac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295900Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x357cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be8 -InterruptEvent 0 -NGENProcess 500 -Pipe 748 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295902Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bdc -InterruptEvent 0 -NGENProcess b80 -Pipe bd8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295904Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bfc -InterruptEvent 0 -NGENProcess 618 -Pipe bc0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295906Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3da8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bb0 -InterruptEvent 0 -NGENProcess be8 -Pipe 624 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295908Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a98 -InterruptEvent 0 -NGENProcess 8c0 -Pipe 554 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295910Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 594 -InterruptEvent 0 -NGENProcess 51c -Pipe ba4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295912Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be4 -InterruptEvent 0 -NGENProcess 500 -Pipe 714 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295914Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be0 -InterruptEvent 0 -NGENProcess 8c0 -Pipe 618 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295916Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be8 -InterruptEvent 0 -NGENProcess a10 -Pipe 700 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295919Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess be4 -Pipe 590 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295920Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 960 -InterruptEvent 0 -NGENProcess a10 -Pipe 9d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295923Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 564 -InterruptEvent 0 -NGENProcess bdc -Pipe bc0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295925Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c0 -InterruptEvent 0 -NGENProcess 960 -Pipe a18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295927Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6e8 -InterruptEvent 0 -NGENProcess be4 -Pipe 500 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295929Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess 8c0 -Pipe 564 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295931Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a08 -InterruptEvent 0 -NGENProcess a14 -Pipe a10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295934Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x970C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 960 -InterruptEvent 0 -NGENProcess a08 -Pipe bb4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295936Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3310C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b74 -InterruptEvent 0 -NGENProcess bfc -Pipe 9f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295938Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1dc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 930 -InterruptEvent 0 -NGENProcess 960 -Pipe 848 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295940Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ec8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be4 -InterruptEvent 0 -NGENProcess 988 -Pipe 6e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295942Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 900 -InterruptEvent 0 -NGENProcess 970 -Pipe 840 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295944Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aa8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 824 -InterruptEvent 0 -NGENProcess 9cc -Pipe 970 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295946Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a08 -InterruptEvent 0 -NGENProcess 51c -Pipe a98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295948Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2414C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9ec -InterruptEvent 0 -NGENProcess 9d0 -Pipe 6e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295950Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c8 -InterruptEvent 0 -NGENProcess 9ec -Pipe 98c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295952Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 51c -InterruptEvent 0 -NGENProcess 9d0 -Pipe 9ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295954Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2004C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c8 -InterruptEvent 0 -NGENProcess 9cc -Pipe 824 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295955Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d24C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003295956Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2dacC:\Windows\System32\conhost.exe%%19360x3d24\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003295958Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2890C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 900 -InterruptEvent 0 -NGENProcess 9e4 -Pipe 9cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295960Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e4 -InterruptEvent 0 -NGENProcess 9c0 -Pipe 900 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295962Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3424C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 94c -InterruptEvent 0 -NGENProcess 960 -Pipe 9d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295964Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9a8 -InterruptEvent 0 -NGENProcess be0 -Pipe 600 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295966Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 710 -InterruptEvent 0 -NGENProcess be4 -Pipe a14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295968Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be8 -InterruptEvent 0 -NGENProcess 9c0 -Pipe 5a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295970Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9a8 -InterruptEvent 0 -NGENProcess bdc -Pipe b8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295972Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be8 -InterruptEvent 0 -NGENProcess bfc -Pipe a08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295974Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2af8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be0 -InterruptEvent 0 -NGENProcess 9e4 -Pipe 9c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295976Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c0 -InterruptEvent 0 -NGENProcess be4 -Pipe 8c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295978Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3430C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9b0 -InterruptEvent 0 -NGENProcess b80 -Pipe bdc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295980Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 710 -InterruptEvent 0 -NGENProcess 988 -Pipe 968 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295984Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34e8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003295986Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 594 -InterruptEvent 0 -NGENProcess 9c0 -Pipe 9dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295988Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 710 -InterruptEvent 0 -NGENProcess 9e4 -Pipe 844 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295990Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e4 -InterruptEvent 0 -NGENProcess 9bc -Pipe 710 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295992Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b78 -InterruptEvent 0 -NGENProcess 95c -Pipe 968 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295994Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be4 -InterruptEvent 0 -NGENProcess 960 -Pipe 95c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295996Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x367cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent be8 -InterruptEvent 0 -NGENProcess b80 -Pipe 9b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003295998Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 838 -InterruptEvent 0 -NGENProcess b80 -Pipe 940 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296000Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2734C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 954 -InterruptEvent 0 -NGENProcess 668 -Pipe 94c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296002Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2698C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 960 -InterruptEvent 0 -NGENProcess b80 -Pipe 9bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296004Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b80 -InterruptEvent 0 -NGENProcess 8c4 -Pipe 960 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296008Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 84c -InterruptEvent 0 -NGENProcess 8f8 -Pipe 950 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296010Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x450C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9a8 -InterruptEvent 0 -NGENProcess 51c -Pipe 988 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296012Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13bcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 960 -InterruptEvent 0 -NGENProcess b78 -Pipe 51c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296014Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34b0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 960 -InterruptEvent 0 -NGENProcess 9e4 -Pipe 9a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296016Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e4 -InterruptEvent 0 -NGENProcess b80 -Pipe 960 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296018Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bfc -InterruptEvent 0 -NGENProcess 594 -Pipe b80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296020Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8ec -InterruptEvent 0 -NGENProcess 8d8 -Pipe 8f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296022Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9e4 -InterruptEvent 0 -NGENProcess 8ac -Pipe 878 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296024Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f5cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8ac -InterruptEvent 0 -NGENProcess 8ec -Pipe 9e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296026Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3500C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bb0 -InterruptEvent 0 -NGENProcess b58 -Pipe be0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296028Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bfc -InterruptEvent 0 -NGENProcess ae8 -Pipe b58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296030Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x299cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b54 -InterruptEvent 0 -NGENProcess 838 -Pipe 8c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296032Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ae8 -InterruptEvent 0 -NGENProcess be8 -Pipe bb0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296034Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x638C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b54 -InterruptEvent 0 -NGENProcess 9c0 -Pipe 8b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296036Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bf0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b54 -InterruptEvent 0 -NGENProcess b60 -Pipe 8d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296038Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x372cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8f8 -InterruptEvent 0 -NGENProcess ac4 -Pipe 9c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296040Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2650C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ad4 -InterruptEvent 0 -NGENProcess a70 -Pipe af8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296042Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1590C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8a8 -InterruptEvent 0 -NGENProcess b3c -Pipe ad0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296044Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e94C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a84 -InterruptEvent 0 -NGENProcess 6c4 -Pipe b0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296046Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bfc -InterruptEvent 0 -NGENProcess 5a4 -Pipe 8a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296048Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess 954 -Pipe 6a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296050Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9a0 -InterruptEvent 0 -NGENProcess bfc -Pipe 528 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296052Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x398cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 998 -InterruptEvent 0 -NGENProcess a64 -Pipe b20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296054Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a68 -InterruptEvent 0 -NGENProcess 4a4 -Pipe a84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296056Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aa8 -InterruptEvent 0 -NGENProcess a4c -Pipe 9a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296058Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ff4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b60 -InterruptEvent 0 -NGENProcess 954 -Pipe 8e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296060Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c14C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4f8 -InterruptEvent 0 -NGENProcess a64 -Pipe 954 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296062Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a64 -InterruptEvent 0 -NGENProcess 6c4 -Pipe 4f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296064Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 9c4 -InterruptEvent 0 -NGENProcess 594 -Pipe ac4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296066Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a68 -InterruptEvent 0 -NGENProcess b60 -Pipe 64c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296068Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4d0 -InterruptEvent 0 -NGENProcess b3c -Pipe b60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296070Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x330cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b3c -InterruptEvent 0 -NGENProcess 9c4 -Pipe 4d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296072Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3670C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7cc -InterruptEvent 0 -NGENProcess 37c -Pipe 7d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296074Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x365cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a4 -InterruptEvent 0 -NGENProcess a68 -Pipe 7cc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296076Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c34C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a68 -InterruptEvent 0 -NGENProcess b3c -Pipe 5a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296078Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 610 -InterruptEvent 0 -NGENProcess 4a4 -Pipe 7b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296080Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b3c -InterruptEvent 0 -NGENProcess 784 -Pipe a68 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296082Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b90C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess 4bc -Pipe 9c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296084Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x954C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess af4 -Pipe 784 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296086Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 610 -InterruptEvent 0 -NGENProcess 7b4 -Pipe 778 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296088Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 610 -InterruptEvent 0 -NGENProcess 7a0 -Pipe 4bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296090Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 758 -InterruptEvent 0 -NGENProcess 70c -Pipe 77c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296092Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 494 -InterruptEvent 0 -NGENProcess 6d8 -Pipe 4c8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296094Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 640 -InterruptEvent 0 -NGENProcess 728 -Pipe 5b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296096Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x324cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 494 -InterruptEvent 0 -NGENProcess 318 -Pipe 364 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296098Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1388C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 654 -Pipe 494 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296100Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f4 -InterruptEvent 0 -NGENProcess 740 -Pipe 68c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296102Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6d8 -InterruptEvent 0 -NGENProcess 338 -Pipe 61c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296104Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 338 -InterruptEvent 0 -NGENProcess 79c -Pipe 6d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296106Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 79c -InterruptEvent 0 -NGENProcess 788 -Pipe 338 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296108Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3790C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 7bc -Pipe 654 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296110Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa00C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 318 -InterruptEvent 0 -NGENProcess 79c -Pipe 290 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296112Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x118C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 79c -InterruptEvent 0 -NGENProcess 578 -Pipe 318 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296114Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 398 -InterruptEvent 0 -NGENProcess 34c -Pipe 728 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296116Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x7c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 200 -InterruptEvent 0 -NGENProcess 7f0 -Pipe 5bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296118Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3878C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f0 -InterruptEvent 0 -NGENProcess 7ac -Pipe 200 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296120Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2890C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8f8 -InterruptEvent 0 -NGENProcess bfc -Pipe 998 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296122Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 760 -InterruptEvent 0 -NGENProcess 5dc -Pipe 740 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296124Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f4 -InterruptEvent 0 -NGENProcess 644 -Pipe 7e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296126Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 504 -InterruptEvent 0 -NGENProcess 718 -Pipe 398 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296128Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 790 -InterruptEvent 0 -NGENProcess aa8 -Pipe 730 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296129Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3810C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 698 -InterruptEvent 0 -NGENProcess 370 -Pipe 7a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296132Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 604 -InterruptEvent 0 -NGENProcess 4f4 -Pipe 3c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296134Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 774 -InterruptEvent 0 -NGENProcess 570 -Pipe 7c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296136Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 5dc -Pipe 774 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296138Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a8 -InterruptEvent 0 -NGENProcess 4c0 -Pipe 6c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296140Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 698 -InterruptEvent 0 -NGENProcess 718 -Pipe 788 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296142Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x162cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 304 -InterruptEvent 0 -NGENProcess 5a8 -Pipe 4f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296144Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3238C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f8 -InterruptEvent 0 -NGENProcess 34c -Pipe 760 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296147Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7b8 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 718 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296149Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f00C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 6b4 -InterruptEvent 0 -NGENProcess 764 -Pipe 4c0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296151Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 764 -InterruptEvent 0 -NGENProcess 780 -Pipe 6b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296153Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f04C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 78c -InterruptEvent 0 -NGENProcess 74c -Pipe 34c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296155Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11bcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 604 -InterruptEvent 0 -NGENProcess 7f4 -Pipe 780 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296157Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b68C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent bfc -InterruptEvent 0 -NGENProcess 74c -Pipe 8f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296158Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x269cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f8 -InterruptEvent 0 -NGENProcess 708 -Pipe 7b8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296161Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 370 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 708 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296163Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5d4 -InterruptEvent 0 -NGENProcess 41c -Pipe 370 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296165Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f8 -InterruptEvent 0 -NGENProcess 5d4 -Pipe 644 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296167Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a64 -InterruptEvent 0 -NGENProcess 698 -Pipe 4d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296169Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 698 -InterruptEvent 0 -NGENProcess 578 -Pipe a64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296171Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 604 -InterruptEvent 0 -NGENProcess 41c -Pipe 5dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296173Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f0 -InterruptEvent 0 -NGENProcess 7f8 -Pipe 6dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296175Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 69c -InterruptEvent 0 -NGENProcess 348 -Pipe 604 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296177Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ec0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess 70c -Pipe 7a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296179Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a4 -InterruptEvent 0 -NGENProcess aa8 -Pipe 610 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296181Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent aa8 -InterruptEvent 0 -NGENProcess 70c -Pipe 4a4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296183Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3458C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 72c -InterruptEvent 0 -NGENProcess 4a8 -Pipe 41c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296185Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3db8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 724 -InterruptEvent 0 -NGENProcess 750 -Pipe 758 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296187Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eccC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f8 -InterruptEvent 0 -NGENProcess 688 -Pipe 7dc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296188Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x794C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003296189Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b70C:\Windows\System32\conhost.exe%%19360x794\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003296191Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b5cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a8 -InterruptEvent 0 -NGENProcess aa8 -Pipe 594 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296193Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 69c -InterruptEvent 0 -NGENProcess 744 -Pipe 7f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296195Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x196cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a8 -InterruptEvent 0 -NGENProcess 70c -Pipe 688 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296197Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 4a8 -Pipe 478 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296198Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x159cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a40 -InterruptEvent 0 -NGENProcess 4a8 -Pipe 5d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296200Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1c78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 724 -InterruptEvent 0 -NGENProcess 7ac -Pipe 7d8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296202Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b20C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7f8 -InterruptEvent 0 -NGENProcess 504 -Pipe 750 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296204Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 304 -InterruptEvent 0 -NGENProcess a40 -Pipe 7f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296206Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 4a8 -Pipe a40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296211Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b80C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003296212Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3538C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 744 -InterruptEvent 0 -NGENProcess 7ac -Pipe a50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296214Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5a8 -InterruptEvent 0 -NGENProcess 4a0 -Pipe 348 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296216Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 70c -InterruptEvent 0 -NGENProcess 5a8 -Pipe 490 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296218Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 698 -Pipe 7f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296220Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3914C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e0 -InterruptEvent 0 -NGENProcess 50c -Pipe 698 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296226Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 594 -InterruptEvent 0 -NGENProcess 4b0 -Pipe 4a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296228Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 790 -InterruptEvent 0 -NGENProcess 504 -Pipe 4ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296232Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess 278 -Pipe aa8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296234Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 634 -InterruptEvent 0 -NGENProcess 630 -Pipe 70c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296236Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 594 -InterruptEvent 0 -NGENProcess 4fc -Pipe 4b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296238Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 790 -InterruptEvent 0 -NGENProcess 7ac -Pipe bfc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296240Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7ac -InterruptEvent 0 -NGENProcess 578 -Pipe 790 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296242Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 578 -InterruptEvent 0 -NGENProcess 50c -Pipe 7ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296244Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c60C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess 630 -Pipe 578 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296247Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess 278 -Pipe 79c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296248Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4fc -InterruptEvent 0 -NGENProcess 538 -Pipe 620 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296250Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 46c -InterruptEvent 0 -NGENProcess 504 -Pipe 5a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296252Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 724 -InterruptEvent 0 -NGENProcess 4fc -Pipe 538 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296254Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ed0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e8 -InterruptEvent 0 -NGENProcess 634 -Pipe 614 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296256Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4fc -InterruptEvent 0 -NGENProcess 744 -Pipe 724 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296259Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a78C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess 460 -Pipe 4d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296260Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 414 -InterruptEvent 0 -NGENProcess 594 -Pipe 72c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296263Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x324cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4a8 -InterruptEvent 0 -NGENProcess 6b8 -Pipe 504 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296264Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1388C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 744 -Pipe 278 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296266Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 634 -InterruptEvent 0 -NGENProcess 794 -Pipe 4e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296268Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 69c -InterruptEvent 0 -NGENProcess 5c4 -Pipe 5e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296270Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3344C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f8 -InterruptEvent 0 -NGENProcess 744 -Pipe 4a8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296273Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5c4 -InterruptEvent 0 -NGENProcess 8a0 -Pipe 6b0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296274Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fa4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f8 -InterruptEvent 0 -NGENProcess 794 -Pipe 5fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296276Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3af0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 80c -InterruptEvent 0 -NGENProcess 828 -Pipe 4f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296278Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x381cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 744 -InterruptEvent 0 -NGENProcess a34 -Pipe 634 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296280Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2710C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess a34 -Pipe 54c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296282Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 648 -InterruptEvent 0 -NGENProcess 640 -Pipe 594 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296284Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x390cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 69c -InterruptEvent 0 -NGENProcess 5f8 -Pipe 46c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296286Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 640 -InterruptEvent 0 -NGENProcess 460 -Pipe 414 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296288Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 5f4 -Pipe 640 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296290Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 37c -InterruptEvent 0 -NGENProcess 4e4 -Pipe a34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296292Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 648 -InterruptEvent 0 -NGENProcess 5e0 -Pipe 74c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296294Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ba0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 570 -InterruptEvent 0 -NGENProcess 46c -Pipe 50c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296296Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 46c -InterruptEvent 0 -NGENProcess a28 -Pipe 570 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296298Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x25dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent af4 -InterruptEvent 0 -NGENProcess b3c -Pipe 52c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296300Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 828 -InterruptEvent 0 -NGENProcess 460 -Pipe 5f8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296302Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3724C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 78c -InterruptEvent 0 -NGENProcess 46c -Pipe 37c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296304Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3920C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 46c -InterruptEvent 0 -NGENProcess 69c -Pipe 78c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296307Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 69c -InterruptEvent 0 -NGENProcess 7bc -Pipe 46c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296308Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x162cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a4c -InterruptEvent 0 -NGENProcess 50c -Pipe 5f4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296310Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x255cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess 80c -Pipe a4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296312Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 814 -InterruptEvent 0 -NGENProcess 460 -Pipe 794 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296314Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a28 -InterruptEvent 0 -NGENProcess 5e0 -Pipe 82c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296316Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 744 -InterruptEvent 0 -NGENProcess 5c4 -Pipe 814 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296318Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2870C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 828 -InterruptEvent 0 -NGENProcess 80c -Pipe 7bc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296320Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e50C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4fc -InterruptEvent 0 -NGENProcess af4 -Pipe ad4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296322Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2834C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5c4 -InterruptEvent 0 -NGENProcess 834 -Pipe b54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296327Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a84C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8a0 -InterruptEvent 0 -NGENProcess 4fc -Pipe 80c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296338Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 460 -InterruptEvent 0 -NGENProcess 648 -Pipe 828 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296339Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x27dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 808 -InterruptEvent 0 -NGENProcess 7b4 -Pipe 4fc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296341Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f30C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7b4 -InterruptEvent 0 -NGENProcess 4e4 -Pipe 808 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296343Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b4 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 334 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296345Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1284C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a70 -InterruptEvent 0 -NGENProcess af4 -Pipe 5c4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296347Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 978 -InterruptEvent 0 -NGENProcess 440 -Pipe 8a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296349Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4b4 -InterruptEvent 0 -NGENProcess a28 -Pipe 440 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296351Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xeb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 744 -InterruptEvent 0 -NGENProcess 7b4 -Pipe 69c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296354Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 834 -Pipe 978 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296355Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x25d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5f0 -InterruptEvent 0 -NGENProcess 764 -Pipe 804 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296357Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3428C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a2c -InterruptEvent 0 -NGENProcess 50c -Pipe 764 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296359Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ce8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 648 -InterruptEvent 0 -NGENProcess 6a0 -Pipe 744 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296361Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess ac8 -Pipe a2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296363Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x299cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 35c -InterruptEvent 0 -NGENProcess 5e0 -Pipe 4b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296365Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bdcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e0 -InterruptEvent 0 -NGENProcess 5f0 -Pipe 35c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296368Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 630 -InterruptEvent 0 -NGENProcess a70 -Pipe 7b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296371Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 50c -InterruptEvent 0 -NGENProcess 4e4 -Pipe 834 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296373Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x22c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent a28 -InterruptEvent 0 -NGENProcess 6a0 -Pipe 5f0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296387Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e0 -InterruptEvent 0 -NGENProcess af4 -Pipe 460 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296389Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 2d4 -InterruptEvent 0 -NGENProcess ac8 -Pipe 50c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296391Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3668C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b3c -InterruptEvent 0 -NGENProcess 880 -Pipe af4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296394Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x26ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 89c -InterruptEvent 0 -NGENProcess be8 -Pipe 8d0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296396Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cbcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7b4 -InterruptEvent 0 -NGENProcess b74 -Pipe 6a0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296398Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b3c -InterruptEvent 0 -NGENProcess a28 -Pipe 838 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296400Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac8 -InterruptEvent 0 -NGENProcess 8ac -Pipe 89c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296402Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 84c -InterruptEvent 0 -NGENProcess 3ec -Pipe 75c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296404Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x468C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 668 -InterruptEvent 0 -NGENProcess b3c -Pipe a28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296406Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ae8 -InterruptEvent 0 -NGENProcess 84c -Pipe be8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296408Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 5e0 -InterruptEvent 0 -NGENProcess 8ec -Pipe 2d4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296410Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b3c -InterruptEvent 0 -NGENProcess 880 -Pipe 8ac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296412Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ac8 -InterruptEvent 0 -NGENProcess 880 -Pipe b3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296414Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3964C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 880 -InterruptEvent 0 -NGENProcess 8ec -Pipe ac8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296416Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent b78 -InterruptEvent 0 -NGENProcess a70 -Pipe 668 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296418Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x380cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 880 -InterruptEvent 0 -NGENProcess 5e0 -Pipe a70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36f8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 8ec -InterruptEvent 0 -NGENProcess b78 -Pipe ae8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296422Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess 7b4 -Pipe b78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296424Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c14 -InterruptEvent 0 -NGENProcess c08 -Pipe c10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296426Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c30 -InterruptEvent 0 -NGENProcess 5e0 -Pipe 630 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296428Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x14b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c20 -InterruptEvent 0 -NGENProcess 4e4 -Pipe 5e0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296430Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4c0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 880 -InterruptEvent 0 -NGENProcess c40 -Pipe c28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296432Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess c24 -Pipe c08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296434Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7b4 -InterruptEvent 0 -NGENProcess c38 -Pipe c30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296436Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2358C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c60 -InterruptEvent 0 -NGENProcess c50 -Pipe c58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296437Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3760C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003296438Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x27f8C:\Windows\System32\conhost.exe%%19360x3760\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003296439Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c54 -InterruptEvent 0 -NGENProcess c6c -Pipe c68 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296441Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ab0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c54 -InterruptEvent 0 -NGENProcess c78 -Pipe c70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296444Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d00C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c94 -InterruptEvent 0 -NGENProcess c34 -Pipe c74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296446Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c34 -InterruptEvent 0 -NGENProcess c7c -Pipe c94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296448Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c4c -InterruptEvent 0 -NGENProcess c80 -Pipe c5c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296450Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1774C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c88 -InterruptEvent 0 -NGENProcess c84 -Pipe c80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296452Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2414C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c88 -InterruptEvent 0 -NGENProcess c50 -Pipe c4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296454Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c64 -InterruptEvent 0 -NGENProcess c7c -Pipe c88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296456Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb54C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c50 -InterruptEvent 0 -NGENProcess c98 -Pipe c38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296457Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x29a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cd8 -InterruptEvent 0 -NGENProcess cd0 -Pipe cd4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296460Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c90 -InterruptEvent 0 -NGENProcess ca0 -Pipe cb0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296462Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1848C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cd0 -InterruptEvent 0 -NGENProcess cb4 -Pipe cd8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296466Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aa4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003296468Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3874C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c64 -InterruptEvent 0 -NGENProcess c50 -Pipe c7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296470Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x167cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cdc -InterruptEvent 0 -NGENProcess cc0 -Pipe c64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296471Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cc0 -InterruptEvent 0 -NGENProcess cb8 -Pipe cdc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296474Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cf4 -InterruptEvent 0 -NGENProcess cec -Pipe cf0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296476Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x12e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cf4 -InterruptEvent 0 -NGENProcess cc8 -Pipe cec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296478Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c9c -InterruptEvent 0 -NGENProcess cc0 -Pipe cf8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296480Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cc0 -InterruptEvent 0 -NGENProcess ca8 -Pipe c9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296482Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3430C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d10 -InterruptEvent 0 -NGENProcess ca8 -Pipe cf4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296483Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cbc -InterruptEvent 0 -NGENProcess c98 -Pipe cc4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296487Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b6cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c98 -InterruptEvent 0 -NGENProcess ce8 -Pipe cbc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296490Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3994C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c84 -InterruptEvent 0 -NGENProcess cb8 -Pipe c60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296492Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cb8 -InterruptEvent 0 -NGENProcess cfc -Pipe c84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296494Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3218C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d14 -InterruptEvent 0 -NGENProcess ca0 -Pipe cfc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296496Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xaf8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d08 -InterruptEvent 0 -NGENProcess d0c -Pipe d10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296498Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x16ecC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d04 -InterruptEvent 0 -NGENProcess d1c -Pipe ce8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296500Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x594C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cd0 -InterruptEvent 0 -NGENProcess c98 -Pipe ce4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296502Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2664C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cb4 -InterruptEvent 0 -NGENProcess c98 -Pipe 880 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296504Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x269cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c98 -InterruptEvent 0 -NGENProcess d0c -Pipe cb4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296506Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d0c -InterruptEvent 0 -NGENProcess d18 -Pipe c98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296508Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ce8 -InterruptEvent 0 -NGENProcess cd0 -Pipe d18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296510Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ca4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d04 -InterruptEvent 0 -NGENProcess d30 -Pipe d1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296512Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3950C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d04 -InterruptEvent 0 -NGENProcess c8c -Pipe c50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296514Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3edcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d54 -InterruptEvent 0 -NGENProcess d48 -Pipe d50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296516Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d28 -InterruptEvent 0 -NGENProcess cd0 -Pipe d20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296518Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e68C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d28 -InterruptEvent 0 -NGENProcess d40 -Pipe d24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296520Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d64 -InterruptEvent 0 -NGENProcess d2c -Pipe d60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296522Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3504C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d28 -InterruptEvent 0 -NGENProcess cd0 -Pipe d2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296524Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d40 -InterruptEvent 0 -NGENProcess d4c -Pipe d28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296526Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ce8 -InterruptEvent 0 -NGENProcess d64 -Pipe d4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296528Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c48 -InterruptEvent 0 -NGENProcess d0c -Pipe d3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296530Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess c3c -Pipe c20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296532Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c40 -InterruptEvent 0 -NGENProcess 3ec -Pipe d0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296534Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x299cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d5c -InterruptEvent 0 -NGENProcess d68 -Pipe d58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296536Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1bdcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c40 -InterruptEvent 0 -NGENProcess d70 -Pipe cd0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296538Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x361cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d34 -InterruptEvent 0 -NGENProcess cac -Pipe ce8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296540Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x362cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c1c -InterruptEvent 0 -NGENProcess d40 -Pipe cac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296542Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d38 -InterruptEvent 0 -NGENProcess c04 -Pipe d54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296544Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3970C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d44 -InterruptEvent 0 -NGENProcess d34 -Pipe d40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296546Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d78 -InterruptEvent 0 -NGENProcess c1c -Pipe d6c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296548Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ed4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d70 -InterruptEvent 0 -NGENProcess d34 -Pipe d74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296550Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d88 -InterruptEvent 0 -NGENProcess d34 -Pipe d84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296552Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cc8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d34 -InterruptEvent 0 -NGENProcess c8c -Pipe d88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296554Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cbcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c8c -InterruptEvent 0 -NGENProcess ce0 -Pipe d34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296556Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xbf0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d98 -InterruptEvent 0 -NGENProcess d78 -Pipe d94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296558Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xdb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d7c -InterruptEvent 0 -NGENProcess d70 -Pipe d78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296560Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x19a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d8c -InterruptEvent 0 -NGENProcess c18 -Pipe c40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296562Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3914C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d80 -InterruptEvent 0 -NGENProcess d04 -Pipe d98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296564Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent db0 -InterruptEvent 0 -NGENProcess da4 -Pipe dac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296566Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 4e4 -InterruptEvent 0 -NGENProcess da8 -Pipe b74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296568Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dc0 -InterruptEvent 0 -NGENProcess db4 -Pipe dbc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296570Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3dacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dd8 -InterruptEvent 0 -NGENProcess ddc -Pipe d5c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296572Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x330cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent db8 -InterruptEvent 0 -NGENProcess dc0 -Pipe da4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296574Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d68 -InterruptEvent 0 -NGENProcess d64 -Pipe c8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296576Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d68 -InterruptEvent 0 -NGENProcess dcc -Pipe ce0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296578Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x349cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dd4 -InterruptEvent 0 -NGENProcess de4 -Pipe de8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296580Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32f0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d8c -InterruptEvent 0 -NGENProcess dfc -Pipe dec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296582Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3258C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent df0 -InterruptEvent 0 -NGENProcess 3ec -Pipe de4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296584Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x5e4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess d68 -Pipe df0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296586Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ee8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dd4 -InterruptEvent 0 -NGENProcess e18 -Pipe dcc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296588Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 3ec -InterruptEvent 0 -NGENProcess e00 -Pipe e10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296590Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3384C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dc8 -InterruptEvent 0 -NGENProcess d64 -Pipe dd0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296592Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d30 -InterruptEvent 0 -NGENProcess db8 -Pipe d68 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296594Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3accC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dd4 -InterruptEvent 0 -NGENProcess e1c -Pipe e14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296596Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d8c -InterruptEvent 0 -NGENProcess e08 -Pipe df8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296598Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e08 -InterruptEvent 0 -NGENProcess db4 -Pipe d8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296600Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e8cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent de0 -InterruptEvent 0 -NGENProcess db4 -Pipe d9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296602Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e0c -InterruptEvent 0 -NGENProcess de0 -Pipe 3ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296604Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aa8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e3c -InterruptEvent 0 -NGENProcess e30 -Pipe e38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296606Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e40 -InterruptEvent 0 -NGENProcess e04 -Pipe e2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296608Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xa00C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e48 -InterruptEvent 0 -NGENProcess e34 -Pipe e54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296610Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x118C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e34 -InterruptEvent 0 -NGENProcess e30 -Pipe e48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296612Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e30 -InterruptEvent 0 -NGENProcess e40 -Pipe e34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296614Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a98C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dc8 -InterruptEvent 0 -NGENProcess e24 -Pipe e58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296616Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x114cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent db0 -InterruptEvent 0 -NGENProcess e1c -Pipe dd4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296618Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3418C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e00 -InterruptEvent 0 -NGENProcess e0c -Pipe df4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296620Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x20c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d30 -InterruptEvent 0 -NGENProcess e3c -Pipe e1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296622Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3874C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e04 -InterruptEvent 0 -NGENProcess db4 -Pipe e40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296624Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x167cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e28 -InterruptEvent 0 -NGENProcess d30 -Pipe dc8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296626Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36acC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e18 -InterruptEvent 0 -NGENProcess e08 -Pipe dfc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296629Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e64 -InterruptEvent 0 -NGENProcess e50 -Pipe e60 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296630Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x12e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e24 -InterruptEvent 0 -NGENProcess db0 -Pipe e4c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296633Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent db0 -InterruptEvent 0 -NGENProcess e44 -Pipe e04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296635Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e18 -InterruptEvent 0 -NGENProcess de0 -Pipe e28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296637Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3430C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d64 -InterruptEvent 0 -NGENProcess dc4 -Pipe e18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296639Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3920C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d7c -InterruptEvent 0 -NGENProcess e08 -Pipe dc4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296641Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3850C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent de0 -InterruptEvent 0 -NGENProcess d70 -Pipe db8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296643Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x4d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e68 -InterruptEvent 0 -NGENProcess db4 -Pipe d64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296645Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e30 -InterruptEvent 0 -NGENProcess e50 -Pipe d70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296647Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3748C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d7c -InterruptEvent 0 -NGENProcess dc0 -Pipe db4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296649Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xb4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dc0 -InterruptEvent 0 -NGENProcess d30 -Pipe d7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296651Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e74 -InterruptEvent 0 -NGENProcess e00 -Pipe 4e4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296653Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x21c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e20 -InterruptEvent 0 -NGENProcess de0 -Pipe e0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296655Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dd8 -InterruptEvent 0 -NGENProcess da8 -Pipe de0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296657Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c18 -InterruptEvent 0 -NGENProcess e64 -Pipe dd8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296659Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2834C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d38 -InterruptEvent 0 -NGENProcess c1c -Pipe 8ec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296661Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x834C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c44 -InterruptEvent 0 -NGENProcess e74 -Pipe e08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296663Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d48 -InterruptEvent 0 -NGENProcess c34 -Pipe e74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296665Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d04 -InterruptEvent 0 -NGENProcess cb8 -Pipe ddc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296667Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1174C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cb8 -InterruptEvent 0 -NGENProcess e64 -Pipe d04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296669Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x383cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d90 -InterruptEvent 0 -NGENProcess dc0 -Pipe d44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296673Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f08C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e20 -InterruptEvent 0 -NGENProcess da0 -Pipe d80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296674Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x37ccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003296675Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1268C:\Windows\System32\conhost.exe%%19360x37cc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003296677Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ec0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cc0 -InterruptEvent 0 -NGENProcess da0 -Pipe c1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296679Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3504C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c1c -InterruptEvent 0 -NGENProcess cc0 -Pipe c54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296681Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent db0 -InterruptEvent 0 -NGENProcess ca0 -Pipe d08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296683Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x25d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cc0 -InterruptEvent 0 -NGENProcess ca4 -Pipe ccc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296685Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3428C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ca4 -InterruptEvent 0 -NGENProcess c78 -Pipe cc0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296687Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e00 -InterruptEvent 0 -NGENProcess c48 -Pipe d48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296689Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x333cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7b4 -InterruptEvent 0 -NGENProcess 84c -Pipe d90 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296691Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1da4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c1c -InterruptEvent 0 -NGENProcess c78 -Pipe e00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296693Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d00 -InterruptEvent 0 -NGENProcess da0 -Pipe c78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296695Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a10C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e70 -InterruptEvent 0 -NGENProcess c48 -Pipe d14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296697Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x474C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cc8 -InterruptEvent 0 -NGENProcess c14 -Pipe e20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296699Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x369cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess c6c -Pipe c0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296703Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a80C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003296704Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent da8 -InterruptEvent 0 -NGENProcess d00 -Pipe c04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296707Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a64C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e44 -InterruptEvent 0 -NGENProcess 84c -Pipe ca0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296709Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3538C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent db0 -InterruptEvent 0 -NGENProcess c1c -Pipe d30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296711Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent cc8 -InterruptEvent 0 -NGENProcess d38 -Pipe c14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296713Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ca4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c34 -InterruptEvent 0 -NGENProcess c3c -Pipe cb8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296715Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent d38 -InterruptEvent 0 -NGENProcess db0 -Pipe e44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296717Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent da8 -InterruptEvent 0 -NGENProcess cc8 -Pipe e70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296719Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent db0 -InterruptEvent 0 -NGENProcess c90 -Pipe e30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296721Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e64 -InterruptEvent 0 -NGENProcess e5c -Pipe c90 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296725Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e6c -InterruptEvent 0 -NGENProcess e68 -Pipe e64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296727Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent dc0 -InterruptEvent 0 -NGENProcess db0 -Pipe c48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296729Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24a0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 7b4 -InterruptEvent 0 -NGENProcess c1c -Pipe ca4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296731Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3378C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c1c -InterruptEvent 0 -NGENProcess da0 -Pipe 7b4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296733Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x330cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c44 -InterruptEvent 0 -NGENProcess e50 -Pipe dc0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296735Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent da0 -InterruptEvent 0 -NGENProcess db0 -Pipe c24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296737Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c3c -InterruptEvent 0 -NGENProcess e68 -Pipe d38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296739Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e6c -InterruptEvent 0 -NGENProcess e78 -Pipe 84c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296741Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x348cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent db0 -InterruptEvent 0 -NGENProcess e24 -Pipe c1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296743Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3960C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e80 -InterruptEvent 0 -NGENProcess c34 -Pipe e78 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296745Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2eb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c44 -InterruptEvent 0 -NGENProcess e3c -Pipe e68 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296747Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c44 -InterruptEvent 0 -NGENProcess e50 -Pipe cc8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296749Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37e0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e7c -InterruptEvent 0 -NGENProcess da8 -Pipe e84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296751Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3844C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess ea0 -Pipe c6c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296753Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x24dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e88 -InterruptEvent 0 -NGENProcess e7c -Pipe e90 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296755Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bd8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e7c -InterruptEvent 0 -NGENProcess e94 -Pipe e88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296757Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent eb0 -InterruptEvent 0 -NGENProcess c3c -Pipe eac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296759Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a44C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c3c -InterruptEvent 0 -NGENProcess e24 -Pipe eb0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296761Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a24C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e50 -InterruptEvent 0 -NGENProcess ecc -Pipe ebc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296763Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3558C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e50 -InterruptEvent 0 -NGENProcess ed8 -Pipe ec8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296765Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d2cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent eb4 -InterruptEvent 0 -NGENProcess e7c -Pipe eb8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296767Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aa8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e8c -InterruptEvent 0 -NGENProcess ea0 -Pipe edc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296769Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2b7cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent eb4 -InterruptEvent 0 -NGENProcess ef8 -Pipe ee8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296771Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e18C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f04 -InterruptEvent 0 -NGENProcess f20 -Pipe f08 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296773Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e80C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f24 -InterruptEvent 0 -NGENProcess e3c -Pipe f18 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296775Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x18c4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f24 -InterruptEvent 0 -NGENProcess e98 -Pipe f14 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296777Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2710C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f24 -InterruptEvent 0 -NGENProcess e5c -Pipe ea4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296782Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f28 -InterruptEvent 0 -NGENProcess e3c -Pipe efc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296789Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2bd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess e5c -Pipe f1c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296791Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2598C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess f4c -Pipe f2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296793Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e98 -InterruptEvent 0 -NGENProcess f34 -Pipe eec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296795Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3810C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f00 -InterruptEvent 0 -NGENProcess e5c -Pipe f10 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296797Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2354C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f54 -InterruptEvent 0 -NGENProcess f24 -Pipe f50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296799Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b88C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e98 -InterruptEvent 0 -NGENProcess f28 -Pipe f54 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296801Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f30 -InterruptEvent 0 -NGENProcess f4c -Pipe f0c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296803Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f48 -InterruptEvent 0 -NGENProcess f44 -Pipe f28 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296805Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ea4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f24 -InterruptEvent 0 -NGENProcess f3c -Pipe e98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296807Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent eb4 -InterruptEvent 0 -NGENProcess e9c -Pipe ee4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296808Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3474C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent eb4 -InterruptEvent 0 -NGENProcess f04 -Pipe f38 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296811Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3760C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ef8 -InterruptEvent 0 -NGENProcess f48 -Pipe e9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296813Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3848C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent c2c -InterruptEvent 0 -NGENProcess f30 -Pipe f44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296815Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3678C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f04 -InterruptEvent 0 -NGENProcess f4c -Pipe e3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296817Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ef4 -InterruptEvent 0 -NGENProcess f40 -Pipe da8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296819Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f70C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f40 -InterruptEvent 0 -NGENProcess c2c -Pipe ef4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296821Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3218C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f6c -InterruptEvent 0 -NGENProcess f30 -Pipe f68 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296822Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfacC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f4c -InterruptEvent 0 -NGENProcess ef8 -Pipe f04 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296825Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f60 -InterruptEvent 0 -NGENProcess f24 -Pipe f6c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296826Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2870C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f64 -InterruptEvent 0 -NGENProcess f40 -Pipe ef0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296828Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2680C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f60 -InterruptEvent 0 -NGENProcess f58 -Pipe f24 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296831Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ee0 -InterruptEvent 0 -NGENProcess f48 -Pipe eb4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296833Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f9cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f20 -InterruptEvent 0 -NGENProcess e5c -Pipe c2c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296835Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x378C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e5c -InterruptEvent 0 -NGENProcess f48 -Pipe f20 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296837Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ca4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f74 -InterruptEvent 0 -NGENProcess f40 -Pipe f3c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296839Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f40 -InterruptEvent 0 -NGENProcess f70 -Pipe f74 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296841Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x290cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f58 -InterruptEvent 0 -NGENProcess e94 -Pipe f64 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296843Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3934C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f78 -InterruptEvent 0 -NGENProcess f88 -Pipe c44 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296845Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x197cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f30 -InterruptEvent 0 -NGENProcess f48 -Pipe ef8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296847Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3be0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f34 -InterruptEvent 0 -NGENProcess f7c -Pipe f80 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296849Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a28C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f90 -InterruptEvent 0 -NGENProcess e94 -Pipe f9c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296851Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x265cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f90 -InterruptEvent 0 -NGENProcess f48 -Pipe f94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296852Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f4cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f58 -InterruptEvent 0 -NGENProcess f5c -Pipe f30 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296855Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x34d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f5c -InterruptEvent 0 -NGENProcess fa0 -Pipe f58 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296857Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f70 -InterruptEvent 0 -NGENProcess f40 -Pipe fa0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296859Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f40 -InterruptEvent 0 -NGENProcess f60 -Pipe f70 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296861Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fb0 -InterruptEvent 0 -NGENProcess e8c -Pipe fac -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296862Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1370C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f78 -InterruptEvent 0 -NGENProcess fb4 -Pipe fb0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296865Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fd0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fc0 -InterruptEvent 0 -NGENProcess fcc -Pipe fb8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296868Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d74C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fcc -InterruptEvent 0 -NGENProcess f88 -Pipe fc0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296870Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f88 -InterruptEvent 0 -NGENProcess fd0 -Pipe fcc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296872Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3bc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f7c -InterruptEvent 0 -NGENProcess f8c -Pipe f48 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296873Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fc0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ff0 -InterruptEvent 0 -NGENProcess f7c -Pipe ff4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296876Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f48C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f7c -InterruptEvent 0 -NGENProcess fc8 -Pipe ff0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296878Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e8c -InterruptEvent 0 -NGENProcess e5c -Pipe e94 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296880Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xe0cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fd0 -InterruptEvent 0 -NGENProcess ff8 -Pipe fc4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296882Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2048C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fd8 -InterruptEvent 0 -NGENProcess fa8 -Pipe fdc -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296884Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38c8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ff8 -InterruptEvent 0 -NGENProcess fe0 -Pipe f88 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296886Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x32b8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f90 -InterruptEvent 0 -NGENProcess fe0 -Pipe fa8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296888Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x37f4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fd0 -InterruptEvent 0 -NGENProcess fe4 -Pipe fd8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296890Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x396cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fbc -InterruptEvent 0 -NGENProcess f7c -Pipe fc8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296892Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e5c -InterruptEvent 0 -NGENProcess fd4 -Pipe fe4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296894Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c40C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fd0 -InterruptEvent 0 -NGENProcess f34 -Pipe e8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296896Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent e5c -InterruptEvent 0 -NGENProcess f7c -Pipe f84 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296898Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ffc -InterruptEvent 0 -NGENProcess f90 -Pipe fec -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296900Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3414C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f60 -InterruptEvent 0 -NGENProcess f5c -Pipe f98 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296902Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2d8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fe0 -InterruptEvent 0 -NGENProcess ffc -Pipe f34 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296904Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x327cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ffc -InterruptEvent 0 -NGENProcess ff8 -Pipe f7c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296906Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3350C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f60 -InterruptEvent 0 -NGENProcess f78 -Pipe fe8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296908Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39dcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f00 -InterruptEvent 0 -NGENProcess fbc -Pipe f90 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296910Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1e1cC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent fa4 -InterruptEvent 0 -NGENProcess f5c -Pipe f40 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296911Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b2cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003296912Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x310C:\Windows\System32\conhost.exe%%19360x1b2c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003296913Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2780C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f78 -InterruptEvent 0 -NGENProcess ecc -Pipe ea0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296915Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ec4 -InterruptEvent 0 -NGENProcess f78 -Pipe f00 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296917Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1b38C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f78 -InterruptEvent 0 -NGENProcess ed0 -Pipe ec4 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296919Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd4C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent f60 -InterruptEvent 0 -NGENProcess fe0 -Pipe f8c -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296922Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3204C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ec0 -InterruptEvent 0 -NGENProcess ed0 -Pipe e50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296923Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3df0C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ed0 -InterruptEvent 0 -NGENProcess fb4 -Pipe ec0 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296932Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3adcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x3fb8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent ecc -InterruptEvent 0 -NGENProcess ff8 -Pipe e50 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296936Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1ab0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe%%19360x352cC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -StartupEvent 19c -InterruptEvent 0 -NGENProcess 1d8 -Pipe 1e8 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296957Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3404C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003296958Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe%%19360x3924"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" install "System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" /NoDependencies /noroot /version:v4.0.30319 /LegacyServiceBehaviorS-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-16384 +4688201331200x80200000000000003296959Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x15fcC:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe%%19360x8e8C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -StartupEvent 118 -InterruptEvent 0 -NGENProcess 204 -Pipe 120 -Comment "NGen Worker Process"S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeS-1-16-16384 +4688201331200x80200000000000003296964Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8d4C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe%%19360x3c38"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /StopEvent:976S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-12288 +4688201331200x80200000000000003296965Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xa00C:\Windows\System32\conhost.exe%%19360x8d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeS-1-16-12288 +4688201331200x80200000000000003296987Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3878C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exe%%19360x3924"C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /StopEvent:1428S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-12288 +4688201331200x80200000000000003296988Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1f40C:\Windows\System32\conhost.exe%%19360x3878\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeS-1-16-12288 +4688201331200x80200000000000003297000Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3248C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297001Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bfcC:\Windows\System32\conhost.exe%%19360x3248\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297005Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3978C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297020Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1288C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297021Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2354C:\Windows\System32\conhost.exe%%19360x1288\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297025Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a20C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297029Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3808C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297030Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ecC:\Windows\System32\conhost.exe%%19360x3808\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297034Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x324cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297038Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3850C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297039Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b6cC:\Windows\System32\conhost.exe%%19360x3850\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297043Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13d8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297049Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb4cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297050Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f60C:\Windows\System32\conhost.exe%%19360xb4c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297055Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfacC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297070Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2630C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297071Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39c8C:\Windows\System32\conhost.exe%%19360x2630\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297075Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3324C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297079Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x450C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297080Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2f08C:\Windows\System32\conhost.exe%%19360x450\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297084Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1174C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297088Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39ccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297089Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ea0C:\Windows\System32\conhost.exe%%19360x39cc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297093Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3934C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299177Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ec4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299173Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3eacC:\Windows\System32\conhost.exe%%19360x14b0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299172Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14b0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299149Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299145Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1e1cC:\Windows\System32\conhost.exe%%19360x3b94\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299144Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b94C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299140Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x36a4C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe%%19360x948"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource schedulerS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003299137Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x188C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299133Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2088C:\Windows\System32\conhost.exe%%19360x3d98\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299132Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d98C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299124Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3200C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299120Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3914C:\Windows\System32\conhost.exe%%19360x3fdc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299119Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fdcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299115Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f5cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299111Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2ef0C:\Windows\System32\conhost.exe%%19360x3a38\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299110Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a38C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299093Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d44C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299089Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x397cC:\Windows\System32\conhost.exe%%19360x2a64\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299088Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a64C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299084Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2068C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299080Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3554C:\Windows\System32\conhost.exe%%19360xb1c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299079Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xb1cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299075Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cf8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299071Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b20C:\Windows\System32\conhost.exe%%19360x39e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299070Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299064Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3808C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299060Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x938C:\Windows\System32\conhost.exe%%19360xde0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299059Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xde0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299044Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x8b4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299040Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2600C:\Windows\System32\conhost.exe%%19360x2854\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299039Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2854C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299031Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2ca4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299027Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3724C:\Windows\System32\conhost.exe%%19360x3214\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299026Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3214C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003299011Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fbcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003299007Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x19a0C:\Windows\System32\conhost.exe%%19360x5c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003299006Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298992Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fa4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298988Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d84C:\Windows\System32\conhost.exe%%19360x3de0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298987Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3de0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298968Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1fccC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298964Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x390cC:\Windows\System32\conhost.exe%%19360x3dd4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298963Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3dd4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298950Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2dacC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298946Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1c94C:\Windows\System32\conhost.exe%%19360x2734\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298945Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2734C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298941Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fa8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298937Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x23d4C:\Windows\System32\conhost.exe%%19360x39c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298936Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298924Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x359cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298920Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f10C:\Windows\System32\conhost.exe%%19360x398c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298919Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x398cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298896Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1848C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298892Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1534C:\Windows\System32\conhost.exe%%19360x3444\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298891Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3444C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298875Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e30C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298871Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3654C:\Windows\System32\conhost.exe%%19360x2600\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298870Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2600C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3724C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298836Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbacC:\Windows\System32\conhost.exe%%19360x14dc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298835Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14dcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298831Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f0cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298827Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39bcC:\Windows\System32\conhost.exe%%19360x474\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298826Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x474C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298811Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35b0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298807Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ad8C:\Windows\System32\conhost.exe%%19360x3b3c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298806Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b3cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298800Securitysoc101win11S-1-5-19LOCAL SERVICENT AUTHORITY0x3e50x3610C:\Windows\System32\conhost.exe%%19360x352c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\appidcertstorecheck.exeS-1-16-16384 +4688201331200x80200000000000003298799Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x352cC:\Windows\System32\appidcertstorecheck.exe%%19360x948"C:\WINDOWS\system32\appidcertstorecheck.exe"S-1-5-19LOCAL SERVICENT AUTHORITY0x3e5C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003298795Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x31f4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298791Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1278C:\Windows\System32\conhost.exe%%19360x2e64\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298790Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e64C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298780Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2a44C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298776Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f10C:\Windows\System32\conhost.exe%%19360x2028\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298775Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2028C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298739Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a0cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298732Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34a0C:\Windows\System32\conhost.exe%%19360x3750\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298729Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3750C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298700Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c04C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298696Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x12fcC:\Windows\System32\conhost.exe%%19360x3f9c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298695Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3f9cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298633Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x11bcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298629Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3344C:\Windows\System32\conhost.exe%%19360x1388\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298628Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1388C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298611Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x9cC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe%%19360xe5c"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --no-pre-read-main-dll --ram-no-pressure-read-main-dll --metrics-shmem-handle=10244,i,1258207834773654606,1069584752252637898,524288 --field-trial-handle=2352,i,15205593387111654540,16252463628370879391,262144 --variations-seed-version --mojo-platform-channel-handle=11012 /prefetch:14S-1-0-0--0x0C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeS-1-16-12288 +4688201331200x80200000000000003298605Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b54C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298601Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3be0C:\Windows\System32\conhost.exe%%19360x38fc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298600Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38fcC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298595Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3cb8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298591Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a20C:\Windows\System32\conhost.exe%%19360x3d04\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298590Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d04C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298571Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d74C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe -flow showtoast -checkup recoverabilityS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003298552Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b1cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298548Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38e8C:\Windows\System32\conhost.exe%%19360x3a7c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298547Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a7cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298538Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x379cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298533Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13b8C:\Windows\System32\conhost.exe%%19360x3790\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298532Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3790C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298524Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ed0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298520Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xc6cC:\Windows\System32\conhost.exe%%19360x21c4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298519Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x21c4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298505Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298501Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3858C:\Windows\System32\conhost.exe%%19360x3bb8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298500Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bb8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298464Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2418C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298460Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xbb8C:\Windows\System32\conhost.exe%%19360x39e8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298459Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39e8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298402Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd54C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298393Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x13b8C:\Windows\System32\conhost.exe%%19360x2630\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298392Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2630C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298252Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a7cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k CameraMonitorS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298240Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2e34C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe KEYROAMINGS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003298239Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3960C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exeS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003298197Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2660C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298185Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3af0C:\Windows\System32\conhost.exe%%19360x10f0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298184Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x10f0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298104Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c20C:\Windows\System32\slui.exe%%19360x3e4C:\WINDOWS\System32\slui.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003298093Securitysoc101win11S-1-5-20SOC101WIN11$WORKGROUP0x3e40x1774C:\Windows\System32\slui.exe%%19360x3de8"C:\WINDOWS\System32\SLUI.exe" RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=89e87510-ba92-45f6-8329-3afa905e3e83;NotificationInterval=1440;Trigger=NetworkAvailableS-1-0-0--0x0C:\Windows\System32\SppExtComObj.ExeS-1-16-16384 +4688201331200x80200000000000003298091Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1610C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe networkS-1-0-0SOC101WIN11$WORKGROUP0x3e4C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003298053Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fbcC:\Windows\System32\ctfmon.exe%%19360xb34/QuitInfo:00000000000002BC;00000000000002A0; S-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003298048Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3960C:\Windows\System32\conhost.exe%%19360x3b90\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298047Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b90C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003298040Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x28e4C:\Windows\System32\RuntimeBroker.exe%%19360x3e4C:\Windows\System32\RuntimeBroker.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003298039Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xd88C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003298025Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35c4C:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003298019Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b60C:\Windows\System32\conhost.exe%%19360x2710\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003298016Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2710C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297997Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xfe8C:\Windows\System32\slui.exe%%19360x3e4C:\WINDOWS\System32\slui.exe -EmbeddingS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003297994Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d2cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wusvcs -p -s WaaSMedicSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297958Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38f8C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe%%19360x2eb4"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003297956Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x13a0C:\Windows\System32\wermgr.exe%%19360x948"C:\WINDOWS\system32\wermgr.exe" -uploadS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003297880Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x954C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhostsS-1-5-19LOCAL SERVICENT AUTHORITY0x3e5C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297867Securitysoc101win11S-1-5-20SOC101WIN11$WORKGROUP0x3e40xd4C:\Windows\System32\slui.exe%%19360x3de8"C:\WINDOWS\System32\SLUI.exe" RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=89e87510-ba92-45f6-8329-3afa905e3e83;NotificationInterval=1440;Trigger=NetworkAvailableS-1-0-0--0x0C:\Windows\System32\SppExtComObj.ExeS-1-16-16384 +4688201331200x80200000000000003297852Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b14C:\Windows\System32\ipconfig.exe%%19360x392cC:\WINDOWS\system32\ipconfig /renewS-1-0-0--0x0C:\Windows\System32\cmd.exeS-1-16-16384 +4688201331200x80200000000000003297843Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fb8C:\Windows\System32\conhost.exe%%19360x392c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\cmd.exeS-1-16-16384 +4688201331200x80200000000000003297840Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc38C:\Windows\System32\backgroundTaskHost.exe%%19360x3e4"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProviderS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-4096 +4688201331200x80200000000000003297839Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x35f4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k wsappx -p -s ClipSVCS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297817Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x392cC:\Windows\System32\cmd.exe%%19360x1130C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\resume-vm-default.bat""S-1-0-0--0x0C:\Program Files\VMware\VMware Tools\vmtoolsd.exeS-1-16-16384 +4688201331200x80200000000000003297791Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e50C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe networkS-1-0-0SOC101WIN11$WORKGROUP0x3e4C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003297711Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ad4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k CameraMonitorS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297710Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3344C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k Camera -s FrameServerS-1-5-19LOCAL SERVICENT AUTHORITY0x3e5C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297705Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x290cC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe%%19360xe5c"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-pre-read-main-dll --ram-no-pressure-read-main-dll --metrics-shmem-handle=10516,i,5962111564466169539,16234610599390407472,524288 --field-trial-handle=2352,i,15205593387111654540,16252463628370879391,262144 --variations-seed-version --mojo-platform-channel-handle=9612 /prefetch:14S-1-0-0--0x0C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeS-1-16-4096 +4688201331200x80200000000000003297680Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1150C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe TpmPreAttestationHealthCheckS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003297676Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39a8C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe%%19360x948"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource schedulerS-1-0-0--0x0C:\Windows\System32\svchost.exeS-1-16-16384 +4688201331200x80200000000000003297625Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297620Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c8cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k CameraMonitorS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297616Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x28e4C:\Windows\System32\taskhostw.exe%%19360x948taskhostw.exe KEYROAMINGS-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea91C:\Windows\System32\svchost.exeS-1-16-12288 +4688201331200x80200000000000003297613Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ab0C:\Windows\System32\LogonUI.exe%%19360x304"LogonUI.exe" /flags:0x0 /state0:0xa254d055 /state1:0x41c64e6dS-1-0-0--0x0C:\Windows\System32\winlogon.exeS-1-16-16384 +4688201331200x80200000000000003297610Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3fa4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297606Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x248cC:\Windows\System32\conhost.exe%%19360x26e4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297605Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x26e4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297601Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1d2cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297597Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x39c0C:\Windows\System32\conhost.exe%%19360x3ccc\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297596Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3cccC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297592Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x196cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297588Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b50C:\Windows\System32\conhost.exe%%19360x3b2c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297587Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b2cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297564Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e80C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297560Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c7cC:\Windows\System32\conhost.exe%%19360x3e18\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297559Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e18C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297555Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x356cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297551Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1ab0C:\Windows\System32\conhost.exe%%19360x36ec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297550Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x36ecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297544Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xc38C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297540Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2838C:\Windows\System32\conhost.exe%%19360x3860\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297539Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3860C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297533Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297529Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1928C:\Windows\System32\conhost.exe%%19360x80c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297528Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x80cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297513Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f50C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297509Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x438C:\Windows\System32\conhost.exe%%19360x2900\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297508Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2900C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297504Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3da8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297500Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x5d4C:\Windows\System32\conhost.exe%%19360x3474\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297499Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3474C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297495Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1150C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297491Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3730C:\Windows\System32\conhost.exe%%19360x3e14\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297490Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e14C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297477Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297473Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xa6cC:\Windows\System32\conhost.exe%%19360x3710\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297472Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3710C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297449Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3eacC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297445Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2cfcC:\Windows\System32\conhost.exe%%19360x3c58\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297444Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c58C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297440Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b20C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297436Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x243cC:\Windows\System32\conhost.exe%%19360x3a8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297435Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3a8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297431Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3e1cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297427Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38a0C:\Windows\System32\conhost.exe%%19360x2b20\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297426Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2b20C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297420Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x299cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297416Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3744C:\Windows\System32\conhost.exe%%19360x20d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297415Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x20d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297400Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a04C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297395Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3be0C:\Windows\System32\conhost.exe%%19360x23d4\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297394Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x23d4C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297386Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3aacC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297382Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x38e8C:\Windows\System32\conhost.exe%%19360x3c50\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297381Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c50C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297377Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1718C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297373Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3480C:\Windows\System32\conhost.exe%%19360x16ec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297372Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x16ecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297366Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x17a4C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297362Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2e64C:\Windows\System32\conhost.exe%%19360x1534\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297361Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1534C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297346Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3b6cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297338Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xcb0C:\Windows\System32\conhost.exe%%19360x202c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297337Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x202cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297327Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x2928C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297321Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x10f4C:\Windows\System32\conhost.exe%%19360x3488\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297320Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3488C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297316Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297307Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1288C:\Windows\System32\conhost.exe%%19360x2030\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297306Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2030C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297294Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3874C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297290Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2a98C:\Windows\System32\conhost.exe%%19360x3600\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297289Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3600C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297288Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70xf10C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\system32\svchost.exe -k GPSvcGroupS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297254Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3f64C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297250Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1854C:\Windows\System32\conhost.exe%%19360x3fa8\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297249Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3fa8C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297245Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x118C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297241Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2c98C:\Windows\System32\conhost.exe%%19360x3c7c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297240Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3c7cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297236Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1320C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297232Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d00C:\Windows\System32\conhost.exe%%19360x3d74\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297231Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3d74C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297227Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c24C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297223Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1984C:\Windows\System32\conhost.exe%%19360x3204\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297222Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3204C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297207Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3860C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297203Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1b68C:\Windows\System32\conhost.exe%%19360x3e54\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297202Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3e54C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297198Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x39dcC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297194Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x1330C:\Windows\System32\conhost.exe%%19360x349c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297193Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x349cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297189Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x365cC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297185Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3ca4C:\Windows\System32\conhost.exe%%19360x3b8c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297184Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b8cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297180Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x1150C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297176Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3abcC:\Windows\System32\conhost.exe%%19360x396c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297175Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x396cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297158Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x38acC:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297154Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x382cC:\Windows\System32\conhost.exe%%19360x2474\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297153Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x2474C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297149Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3d0C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297145Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3bb8C:\Windows\System32\conhost.exe%%19360x242c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297144Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x242cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297140Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3c58C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297136Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x3b20C:\Windows\System32\conhost.exe%%19360x14d0\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297135Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14d0C:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297130Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3ec8C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297126Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910xcd0C:\Windows\System32\conhost.exe%%19360x34ec\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297125Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x34ecC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 +4688201331200x80200000000000003297102Securitysoc101win11S-1-5-18SOC101WIN11$WORKGROUP0x3e70x3a28C:\Windows\System32\svchost.exe%%19360x34cC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcS-1-0-0--0x0C:\Windows\System32\services.exeS-1-16-16384 +4688201331200x80200000000000003297098Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x14dcC:\Windows\System32\conhost.exe%%19360x152c\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1S-1-0-0--0x0C:\Windows\System32\netsh.exeS-1-16-12288 +4688201331200x80200000000000003297097Securitysoc101win11S-1-5-21-4051859043-1187413090-3677023548-500Administratorsoc101win110x9ea910x152cC:\Windows\System32\netsh.exe%%19360xb10netsh interface show interfaceS-1-0-0--0x0C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeS-1-16-12288 diff --git a/datasets/suspicious_behaviour/local_llms/sysmon_local_llms.txt b/datasets/suspicious_behaviour/local_llms/sysmon_local_llms.txt new file mode 100644 index 00000000..6f13ca68 --- /dev/null +++ b/datasets/suspicious_behaviour/local_llms/sysmon_local_llms.txt @@ -0,0 +1,21718 @@ +434400x80000000000000008703Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 13:14:01.696Started15.154.90 +13241300x80000000000000008704Microsoft-Windows-Sysmon/Operationalsoc101win11Context,DeviceConnectedOrUpdatedSetValue2025-10-29 13:13:53.424{8223a6b9-1311-6902-eb03-000000000000}4SystemHKLM\System\CurrentControlSet\Control\DeviceClasses\{0a4252a0-7e70-11d0-a5d6-28db04c10000}\##?#ROOT#SYSTEM#0000#{0a4252a0-7e70-11d0-a5d6-28db04c10000}\#{cfd669f1-9bc2-11d0-8299-0000f822fe8a}&{0A4252A0-7E70-11D0-A5D6-28DB04C10000}\Device Parameters\FriendlyNameTee/Sink-to-Sink ConverterNT AUTHORITY\SYSTEM +13241300x80000000000000008705Microsoft-Windows-Sysmon/Operationalsoc101win11Context,DeviceConnectedOrUpdatedSetValue2025-10-29 13:13:53.424{8223a6b9-1311-6902-eb03-000000000000}4SystemHKLM\System\CurrentControlSet\Control\DeviceClasses\{cf1dda2c-9743-11d0-a3ee-00a0c9223196}\##?#ROOT#SYSTEM#0000#{cf1dda2c-9743-11d0-a3ee-00a0c9223196}\#{cfd669f1-9bc2-11d0-8299-0000f822fe8a}&{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}\Device Parameters\FriendlyNameTee/Sink-to-Sink ConverterNT AUTHORITY\SYSTEM +13241300x80000000000000008706Microsoft-Windows-Sysmon/Operationalsoc101win11Context,DeviceConnectedOrUpdatedSetValue2025-10-29 13:13:53.424{8223a6b9-1311-6902-eb03-000000000000}4SystemHKLM\System\CurrentControlSet\Control\DeviceClasses\{ffbb6e3f-ccfe-4d84-90d9-421418b03a8e}\##?#ROOT#SYSTEM#0000#{ffbb6e3f-ccfe-4d84-90d9-421418b03a8e}\#{EEC12DB6-AD9C-4168-8658-B03DAEF417FE}&{ABD61E00-9350-47e2-A632-4438B90C6641}\Device Parameters\FriendlyNameMicrosoft Trusted Audio DriversNT AUTHORITY\SYSTEM +11241100x80000000000000008707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:53.688{8223a6b9-1311-6902-eb03-000000000000}4SystemC:\Windows\System32\drivers\DriverData\LogFiles\WMI\Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etl2024-11-11 18:43:29.297NT AUTHORITY\SYSTEM +154100x80000000000000008708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:56.280{8223a6b9-1314-6902-0500-000000002b00}584C:\Windows\System32\smss.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Session ManagerMicrosoft® Windows® Operating SystemMicrosoft Corporationsmss.exe\SystemRoot\System32\smss.exe 000000e8 000000d4 C:\WINDOWS\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4CDDC568D65CFC449790EA114C70C611,SHA256=BDC489C640B6F9ECD345D63A5756598CC89307C7DFFC9B9D0EC414C3740F9EDA,IMPHASH=4E9EC486863D71200EBE8105C18E645B{8223a6b9-1311-6902-0300-000000002b00}460C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exeNT AUTHORITY\SYSTEM +154100x80000000000000008709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:56.531{8223a6b9-1314-6902-0600-000000002b00}616C:\Windows\System32\csrss.exe10.0.26100.1 (WinBuild.160101.0800)Client Server Runtime ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationCSRSS.Exe%%SystemRoot%%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E77E433573B7F629CFA089FFC8626292,SHA256=A958083FD4982697973D1F4A05A8F51B1F5D551A558CFA0097CFB6867FDCE3BA,IMPHASH=2A4F07729AD0B91A59C641DBB9BBB3E7{8223a6b9-1314-6902-0500-000000002b00}584C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exe 000000e8 000000d4 NT AUTHORITY\SYSTEM +154100x80000000000000008710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:56.754{8223a6b9-1314-6902-0700-000000002b00}680C:\Windows\System32\smss.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Session ManagerMicrosoft® Windows® Operating SystemMicrosoft Corporationsmss.exe\SystemRoot\System32\smss.exe 000000dc 000000d4 C:\WINDOWS\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e71SystemMD5=4CDDC568D65CFC449790EA114C70C611,SHA256=BDC489C640B6F9ECD345D63A5756598CC89307C7DFFC9B9D0EC414C3740F9EDA,IMPHASH=4E9EC486863D71200EBE8105C18E645B{8223a6b9-1311-6902-0300-000000002b00}460C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exeNT AUTHORITY\SYSTEM +154100x80000000000000008711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:56.759{8223a6b9-1314-6902-0900-000000002b00}696C:\Windows\System32\csrss.exe10.0.26100.1 (WinBuild.160101.0800)Client Server Runtime ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationCSRSS.Exe%%SystemRoot%%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e71SystemMD5=E77E433573B7F629CFA089FFC8626292,SHA256=A958083FD4982697973D1F4A05A8F51B1F5D551A558CFA0097CFB6867FDCE3BA,IMPHASH=2A4F07729AD0B91A59C641DBB9BBB3E7{8223a6b9-1314-6902-0700-000000002b00}680C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exe 000000dc 000000d4 NT AUTHORITY\SYSTEM +154100x80000000000000008712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:56.757{8223a6b9-1314-6902-0800-000000002b00}688C:\Windows\System32\wininit.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Start-Up ApplicationMicrosoft® Windows® Operating SystemMicrosoft CorporationWinInit.exewininit.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4F56EC56DA37DFD1096A4AFA41B23D61,SHA256=41AE183FD7BB2CF9335E263A8816F218ACDED9E9379D9C261CEB51DBBE3E6133,IMPHASH=BC0D3E8B8FB1085D75AF638FEBDDD664{8223a6b9-1314-6902-0500-000000002b00}584C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exe 000000e8 000000d4 NT AUTHORITY\SYSTEM +154100x80000000000000008713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:56.796{8223a6b9-1314-6902-0a00-000000002b00}760C:\Windows\System32\winlogon.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Logon ApplicationMicrosoft® Windows® Operating SystemMicrosoft CorporationWINLOGON.EXEwinlogon.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e71SystemMD5=3101780DB9979DE247DF761C79B9C1BA,SHA256=8A6BDCD7D63C058C4244B019FF38DB28362DE953BF12AE6ACA5B618EB221E624,IMPHASH=E69DA191C10719269C8283A2998DB55A{8223a6b9-1314-6902-0700-000000002b00}680C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exe 000000dc 000000d4 NT AUTHORITY\SYSTEM +154100x80000000000000008714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:56.879{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exe10.0.26100.4768 (WinBuild.160101.0800)Services and Controller appMicrosoft® Windows® Operating SystemMicrosoft Corporationservices.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=9D5976750E3185D6876890AFFC4F5D5B,SHA256=58265603924D91BF896ED2CBEA7D0F3605029C3F7E888739A9902E1BF16D7099,IMPHASH=1F4CC1FC2C8E8DD22EB2C6EE9E8734A2{8223a6b9-1314-6902-0800-000000002b00}688C:\Windows\System32\wininit.exewininit.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008715Microsoft-Windows-Sysmon/Operationalsoc101win11T1183,IFEOSetValue2025-10-29 13:13:56.936{8223a6b9-1314-6902-0800-000000002b00}688C:\WINDOWS\system32\wininit.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LSASS.exe\AuditLevelDWORD (0x00000008)NT AUTHORITY\SYSTEM +13241300x80000000000000008716Microsoft-Windows-Sysmon/Operationalsoc101win11T1101SetValue2025-10-29 13:13:56.936{8223a6b9-1314-6902-0800-000000002b00}688C:\WINDOWS\system32\wininit.exeHKLM\System\CurrentControlSet\Control\Lsa\RunAsPPLBootDWORD (0x00000002)NT AUTHORITY\SYSTEM +154100x80000000000000008717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:56.946{8223a6b9-1314-6902-0c00-000000002b00}856C:\Windows\System32\lsass.exe10.0.26100.1882 (WinBuild.160101.0800)Local Security Authority ProcessMicrosoft® Windows® Operating SystemMicrosoft Corporationlsass.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5C800E1EE62A6DEE95FA7043D5964696,SHA256=13249566F8FE00E00D0A0EE85FB18AE109AD28017DF0A622B3872A37932CF958,IMPHASH=8E2CE2D88C1F92045630EE37F4676E54{8223a6b9-1314-6902-0800-000000002b00}688C:\Windows\System32\wininit.exewininit.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008718Microsoft-Windows-Sysmon/Operationalsoc101win11T1101SetValue2025-10-29 13:13:57.015{8223a6b9-1314-6902-0c00-000000002b00}856C:\WINDOWS\system32\lsass.exeHKLM\System\CurrentControlSet\Control\Lsa\LsaCfgFlagsDefaultDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x80000000000000008719Microsoft-Windows-Sysmon/Operationalsoc101win11T1101SetValue2025-10-29 13:13:57.238{8223a6b9-1314-6902-0c00-000000002b00}856C:\WINDOWS\system32\lsass.exeHKLM\System\CurrentControlSet\Control\Lsa\ProductTypeDWORD (0x000000a2)NT AUTHORITY\SYSTEM +154100x80000000000000008720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:57.288{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:57.399{8223a6b9-1315-6902-1000-000000002b00}700C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k RPCSS -pC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:57.442{8223a6b9-1315-6902-1100-000000002b00}804C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSMC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:57.591{8223a6b9-1315-6902-1200-000000002b00}1056C:\Windows\System32\LogonUI.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Logon User Interface HostMicrosoft® Windows® Operating SystemMicrosoft Corporationlogonui.exe"LogonUI.exe" /flags:0x2 /state0:0xa3bcf055 /state1:0x41c64e6dC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e71SystemMD5=CA1EDE2B18C459F9A1D9BB39225F4E50,SHA256=85326EFC9428DA086F425C311304268AE039DD0A0CC547DA01E3AA213318F950,IMPHASH=A725A6C0F65392C3C24A8AF649AC1C54{8223a6b9-1314-6902-0a00-000000002b00}760C:\Windows\System32\winlogon.exewinlogon.exeNT AUTHORITY\SYSTEM +154100x80000000000000008724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:57.593{8223a6b9-1315-6902-1300-000000002b00}1064C:\Windows\System32\dwm.exe10.0.26100.3624 (WinBuild.160101.0800)Desktop Window ManagerMicrosoft® Windows® Operating SystemMicrosoft Corporationdwm.exe"dwm.exe"C:\WINDOWS\system32\Window Manager\DWM-1{8223a6b9-1315-6902-fa55-010000000000}0x155fa1SystemMD5=A8C31CECEDE4347F35120AE1514045ED,SHA256=1F7DD1CE8234473852AC6BC0061F9E554B56D5E6F096BAE33A2893114B9799B1,IMPHASH=D72871D9A3F2F20778DCEAAE6D7C89EF{8223a6b9-1314-6902-0a00-000000002b00}760C:\Windows\System32\winlogon.exewinlogon.exeNT AUTHORITY\SYSTEM +154100x80000000000000008725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.110{8223a6b9-1316-6902-1400-000000002b00}1252C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k GPSvcGroupC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.117{8223a6b9-1316-6902-1700-000000002b00}1280C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s PrintDeviceConfigurationServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.126{8223a6b9-1316-6902-1800-000000002b00}1324C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -pC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.126{8223a6b9-1316-6902-1900-000000002b00}1316C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhostsC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.147{8223a6b9-1316-6902-1b00-000000002b00}1444C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.188{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.188{8223a6b9-1316-6902-1d00-000000002b00}1596C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s AppIDSvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.215{8223a6b9-1316-6902-1e00-000000002b00}1640C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k UserProfileService -p -s ProfSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.233{8223a6b9-1316-6902-1f00-000000002b00}1672C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsiC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.278{8223a6b9-1316-6902-2000-000000002b00}1748C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netprofm -p -s netprofmC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.294{8223a6b9-1316-6902-2100-000000002b00}1768C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManagerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.298{8223a6b9-1316-6902-2200-000000002b00}1776C:\Windows\System32\upfc.exe10.0.26100.4768 (WinBuild.160101.0800)Updateability From SCMMicrosoft® Windows® Operating SystemMicrosoft Corporationupfc.exeC:\WINDOWS\System32\Upfc.exe /launchtype boot /cv 0l+IcNzackCMFMeBlAbxDA.0C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=D08C489CEFBB9583AF988686E1A0C768,SHA256=06C1B9AF663E7EB7E284BEDC92C4A0A511CCA952DCC0D36C6344F7DB41B4FACF,IMPHASH=679AE244AE760F56F3F50641797A3915{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +11241100x80000000000000008737Microsoft-Windows-Sysmon/Operationalsoc101win11T10532025-10-29 13:13:58.309{8223a6b9-1316-6902-1c00-000000002b00}1588C:\WINDOWS\system32\svchost.exeC:\Windows\Tasks\SA.DAT2024-11-11 18:43:44.554NT AUTHORITY\SYSTEM +154100x80000000000000008738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.342{8223a6b9-1316-6902-2300-000000002b00}1832C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.445{8223a6b9-1316-6902-2400-000000002b00}2000C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s UmRdpServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.459{8223a6b9-1316-6902-2600-000000002b00}2016C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLogC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.481{8223a6b9-1316-6902-2700-000000002b00}1048C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe ExploitGuardPolicyC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.493{8223a6b9-1316-6902-2800-000000002b00}1380C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\SYSTEM32\cmd.exe /c ""C:\Program Files\Npcap\CheckStatus.bat""C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.504{8223a6b9-1316-6902-2900-000000002b00}1396C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMainC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.519{8223a6b9-1316-6902-2a00-000000002b00}1636C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ThemesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.521{8223a6b9-1316-6902-2b00-000000002b00}1900C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystemC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.535{8223a6b9-1316-6902-2c00-000000002b00}2076C:\Windows\System32\dxgiadaptercache.exe10.0.26100.3624 (WinBuild.160101.0800)DXGI Adapter CacheMicrosoft® Windows® Operating SystemMicrosoft CorporationDXGIAdapterCache.exe"C:\WINDOWS\system32\dxgiadaptercache.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=FFE4EF2EAE85C9D317027E7C6C6FAE30,SHA256=82AB1C8BA6D2AC0D51DAEF246A35CA54AD49F52CC7B9241FC7CBA1832D5B3936,IMPHASH=618B67EACA04EA41C7FD785E4ACC7038{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.620{8223a6b9-1316-6902-2e00-000000002b00}2332C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENSC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.662{8223a6b9-1316-6902-3100-000000002b00}2428C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCacheC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.667{8223a6b9-1316-6902-3200-000000002b00}2440C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilderC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.735{8223a6b9-1316-6902-3300-000000002b00}2528C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k NetworkService -p -s LanmanWorkstationC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +824800x80000000000000008751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.742{8223a6b9-1315-6902-1300-000000002b00}1064C:\Windows\System32\dwm.exe{8223a6b9-1314-6902-0900-000000002b00}696C:\Windows\System32\csrss.exe25640xFFFFF8007E847EC0--Window Manager\DWM-1NT AUTHORITY\SYSTEM +154100x80000000000000008752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.773{8223a6b9-1316-6902-3400-000000002b00}2624C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s DhcpC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.809{8223a6b9-1316-6902-3500-000000002b00}2684C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe TimeSyncTaskC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.820{8223a6b9-1316-6902-3600-000000002b00}2708C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k NetSvcs -p -s hnsC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.820{8223a6b9-1316-6902-3700-000000002b00}2716C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -pC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:58.922{8223a6b9-1316-6902-3900-000000002b00}2800C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TextInputManagementServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.018{8223a6b9-1317-6902-3a00-000000002b00}2880C:\Windows\System32\ctfmon.exe10.0.26100.3624 (WinBuild.160101.0800)CTF LoaderMicrosoft® Windows® Operating SystemMicrosoft CorporationCTFMON.EXE/QuitInfo:0000000000000204;0000000000000214; C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e71SystemMD5=A3E50EF69038B3415A4D75820255A301,SHA256=F219F0975E70935D0BD4898BC568B146603C1D2E07ECE027F5E5B5E4EAD203D5,IMPHASH=B539389D4BE1DD68C8213A539FEB41FB{8223a6b9-1316-6902-3900-000000002b00}2800C:\Windows\System32\svchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TextInputManagementServiceNT AUTHORITY\SYSTEM +154100x80000000000000008758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.067{8223a6b9-1317-6902-3b00-000000002b00}2960C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceHttp -pC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.078{8223a6b9-1317-6902-3d00-000000002b00}2988C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -pC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.108{8223a6b9-1317-6902-4000-000000002b00}3036C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.283{8223a6b9-1317-6902-4100-000000002b00}3184C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepositoryC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.311{8223a6b9-1317-6902-4200-000000002b00}3216C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WcmsvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.357{8223a6b9-1317-6902-4400-000000002b00}3276C:\Windows\System32\ClipRenew.exe10.0.26100.4768 (WinBuild.160101.0800)Acquire License From StoreMicrosoft® Windows® Operating SystemMicrosoft CorporationClipRenew.exe"C:\WINDOWS\system32\ClipRenew.exe" -eC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0FD07469B0D4FEEBE99176CCF3C4BDC7,SHA256=649AD53A732DA7A0473040406E94F95D4029DDBA7FD67A7B5A392E3AFB69516D,IMPHASH=99CD5E069927805E37A630FEB314F1E2{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.377{8223a6b9-1317-6902-4500-000000002b00}3304C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetectionC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +12241200x80000000000000008765Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteValue2025-10-29 13:13:59.435{8223a6b9-1315-6902-1200-000000002b00}1056C:\WINDOWS\system32\LogonUI.exeHKU\.DEFAULT\Keyboard Layout\Preload\1NT AUTHORITY\SYSTEM +13241300x80000000000000008766Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:13:59.435{8223a6b9-1315-6902-1200-000000002b00}1056C:\WINDOWS\system32\LogonUI.exeHKU\.DEFAULT\Keyboard Layout\Preload\100000409NT AUTHORITY\SYSTEM +154100x80000000000000008767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.481{8223a6b9-1317-6902-4600-000000002b00}3392C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -s RmSvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.515{8223a6b9-1317-6902-4700-000000002b00}3432C:\Windows\System32\spoolsv.exe10.0.26100.4768 (WinBuild.160101.0800)Spooler SubSystem AppMicrosoft® Windows® Operating SystemMicrosoft Corporationspoolsv.exeC:\WINDOWS\System32\spoolsv.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=820B301C3C50F22874F85FFBF4F033F2,SHA256=AE213F5A732BAF8A3A7EB2D76B21961195E896D3276F35C709A0CADB29F0BC01,IMPHASH=339B36254A24BF11E6C24F733846C8AF{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.743{8223a6b9-1317-6902-4800-000000002b00}3556C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k NetSvcs -s nvagentC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.979{8223a6b9-1317-6902-4900-000000002b00}3740C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgentC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.984{8223a6b9-1317-6902-4a00-000000002b00}3748C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s IKEEXTC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:13:59.988{8223a6b9-1317-6902-4b00-000000002b00}3756C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.017{8223a6b9-1318-6902-4c00-000000002b00}3776C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.038{8223a6b9-1318-6902-4d00-000000002b00}3816C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPSC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.050{8223a6b9-1318-6902-4f00-000000002b00}3852C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -pC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.045{8223a6b9-1318-6902-4e00-000000002b00}3832C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k utcsvc -pC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.132{8223a6b9-1318-6902-5100-000000002b00}3972C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s SharedAccessC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.153{8223a6b9-1318-6902-5200-000000002b00}4036C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WinmgmtC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.159{8223a6b9-1318-6902-5400-000000002b00}4056C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWksC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.179{8223a6b9-1318-6902-5500-000000002b00}4080C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe12.4.5.5473VMware Guest Authentication ServiceVMware Guest AuthenticationVMware, Inc.VGAuthService.exe"C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=D3DBE3C3DC56CB77005CB43ECD46F5C9,SHA256=B0145210B236EE2F001D5A9B14A70541740E8F6154108B1BDCF9478702AB020C,IMPHASH=EDFC41C63462FA352B6B3CB320C8AC70{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.186{8223a6b9-1318-6902-5600-000000002b00}3076C:\Program Files\VMware\VMware Tools\vmtoolsd.exe12.4.5.49651VMware Tools Core ServiceVMware ToolsVMware, Inc.vmtoolsd.exe"C:\Program Files\VMware\VMware Tools\vmtoolsd.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=F7E079744B7AD6CD6F791898A1619460,SHA256=FA89670DF7E350D173A8B233D7F00BDBCF86F75041F76FB55EF29C2B996C0B43,IMPHASH=8A2930EA5F1EC61A2F9994C5214D2650{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.186{8223a6b9-1318-6902-5700-000000002b00}3300C:\Windows\System32\vm3dservice.exe9.17.07.0004VMware SVGA Helper ServiceVMware SVGA 3DVMware, Inc.vm3dservice.exeC:\WINDOWS\system32\vm3dservice.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=2172F4365DCFF8E8F2A2C2C77C391DB5,SHA256=41DCE909CC6E2A988727A62DE830CAFB7D0D9B404E2488459D5F8DA242E3341B,IMPHASH=A883606B194DAC36361014E31AC889A3{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.301{8223a6b9-1318-6902-5b00-000000002b00}4252C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WpnServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.272{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Antimalware Service ExecutableMicrosoft® Windows® Operating SystemMicrosoft CorporationMsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=77E9CCBB8335BA5D4345447BA5B6121D,SHA256=C02655606C199BA276D2B01A796E6EBBA07A41EEDE9C85FE516D9A5851290155,IMPHASH=6D2BBFBF0C29D2CD8E6FD86A0206A516{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.364{8223a6b9-1318-6902-5d00-000000002b00}4380C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k WSAIFabricSvcGroup -p -s WSAIFabricSvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.234{8223a6b9-1318-6902-5800-000000002b00}4136C:\Program Files (x86)\ossec-agent\wazuh-agent.exev4.6.0Wazuh AgentWazuh Windows AgentWazuh Inc.-"C:\Program Files (x86)\ossec-agent\wazuh-agent.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=48DB5DB47B10675EBA7DED6A0240CDCC,SHA256=80B80BAB77CEC09DF4FCC98F07915915D13B6ABBBDCC7666ECF8BAD47B9ADE67,IMPHASH=36DEAA9400DE44B83F70455512FAC6C9{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.492{8223a6b9-1318-6902-5f00-000000002b00}4528C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BrowserC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.533{8223a6b9-1318-6902-6000-000000002b00}4588C:\Windows\System32\vm3dservice.exe9.17.07.0004VMware SVGA Helper ServiceVMware SVGA 3DVMware, Inc.vm3dservice.exeC:\WINDOWS\system32\vm3dservice.exe -nC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e71SystemMD5=2172F4365DCFF8E8F2A2C2C77C391DB5,SHA256=41DCE909CC6E2A988727A62DE830CAFB7D0D9B404E2488459D5F8DA242E3341B,IMPHASH=A883606B194DAC36361014E31AC889A3{8223a6b9-1318-6902-5700-000000002b00}3300C:\Windows\System32\vm3dservice.exeC:\WINDOWS\system32\vm3dservice.exeNT AUTHORITY\SYSTEM +154100x80000000000000008789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.071{8223a6b9-1318-6902-5000-000000002b00}3888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpDefenderCoreService.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Antimalware Core ServiceMicrosoft® Windows® Operating SystemMicrosoft CorporationMpDefenderCoreService.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpDefenderCoreService.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=FEB6562797D3B7A9E58AEEE0EF5387CF,SHA256=EA71D139107FE5ECFAFBB989E0962A46137DC52053874333BD1066F84BC7074C,IMPHASH=ED3A17AA05D0B4A9FB630A72E4C76D31{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.739{8223a6b9-1318-6902-6200-000000002b00}4788C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.439{8223a6b9-1318-6902-5e00-000000002b00}4468C:\Program Files\WSL\wslservice.exe2.3.26.0Windows Subsystem for Linux ServiceWindows Subsystem for LinuxMicrosoft Corporationwslservice.exe"C:\Program Files\WSL\wslservice.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6B3DC327642B1840BDFC1280A419CD43,SHA256=B63443A8DB7B3DB1B0439238A395DADF4D66B8C06A0A0457BD759D9D06946A25,IMPHASH=9DA2A9570932986B1B882C03C047A461{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.246{8223a6b9-1318-6902-5900-000000002b00}4164C:\Program Files (x86)\Wing FTP Server\WFTPServer.exe-----"C:\Program Files (x86)\Wing FTP Server\WFTPServer.exe" serviceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A84C68060117CF18BAD1630208A925F,SHA256=0360AAE9EAEB70315514BA25FE39AB3A47C634B7CCEA024FD2723F2742E3C597,IMPHASH=A90C7A9D60DDCBB96A834877D8910A15{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +11241100x80000000000000008793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.949{8223a6b9-1318-6902-5200-000000002b00}4036C:\WINDOWS\system32\svchost.exeC:\Windows\System32\wbem\Repository\WRITABLE.TST2025-10-29 13:14:00.949NT AUTHORITY\SYSTEM +154100x80000000000000008794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.983{8223a6b9-1318-6902-6500-000000002b00}5028C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\poweron-vm-default.bat""C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1318-6902-5600-000000002b00}3076C:\Program Files\VMware\VMware Tools\vmtoolsd.exe"C:\Program Files\VMware\VMware Tools\vmtoolsd.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.686{8223a6b9-1318-6902-6100-000000002b00}4732C:\Windows\Sysmon64.exe15.15System activity monitorSysinternals SysmonSysinternals - www.sysinternals.com-C:\WINDOWS\Sysmon64.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=7663C565BF28115506CB7EBD1DA389E0,SHA256=D9C8FDFDCE510FD9922DA3A1084B6AC4476C1407D1D8BBB67FC0A61988552771,IMPHASH=A039666F8D08DD16E0909469DA998438{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008796Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:01.122{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MDCoreSvc\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +154100x80000000000000008797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:01.341{8223a6b9-1319-6902-6800-000000002b00}5252C:\Windows\System32\wbem\unsecapp.exe10.0.26100.4202 (WinBuild.160101.0800)Sink to receive asynchronous callbacks for WMI client applicationMicrosoft® Windows® Operating SystemMicrosoft Corporationunsecapp.dllC:\WINDOWS\system32\wbem\unsecapp.exe -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5584C351F1823053A4E66BB66282D923,SHA256=36FA30B1CFBC84F0F9E4F74428D4F6994B02E6C47113AE1F3BFE3A278962092E,IMPHASH=9656E21ED232DDC034DE628B1E2968AD{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:01.585{8223a6b9-1319-6902-6900-000000002b00}5420C:\Windows\System32\msdtc.exe2001.12.10941.16384 (WinBuild.160101.0800)Microsoft Distributed Transaction Coordinator ServiceMicrosoft® Windows® Operating SystemMicrosoft CorporationMSDTC.EXEC:\WINDOWS\System32\msdtc.exeC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=BB7C4EA1158C76361C64686A0E62650E,SHA256=C1866B5CB01FB83543929C61A1885DF137EB2317F87BBC346383D437413C09E7,IMPHASH=475D78C71E65532A4B0638519D521F5A{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:00.154{8223a6b9-1318-6902-5300-000000002b00}4048C:\Program Files\osquery\osqueryd\osqueryd.exe5.11.0.0osquery daemon and shellosqueryOsquery Foundationosqueryd.exe"C:\Program Files\osquery\osqueryd\osqueryd.exe" --flagfile=C:\Program Files\osquery\osquery.flagsC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=8FA3431CDD8590C04C7D9197231C4C50,SHA256=37271C5F0A95FE85056136A89DBAFD6D191D7ED7D43BB0842279C194886B8DB0,IMPHASH=CA548767B9890320F7B2B806ECEA2413{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008800Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:01.944{8223a6b9-1316-6902-2000-000000002b00}1748C:\WINDOWS\System32\svchost.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles\{F02987B0-5B23-45AB-A2CC-659724EB2D10}\DateLastConnectedBinary DataNT AUTHORITY\NETWORK SERVICE +154100x80000000000000008801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:02.253{8223a6b9-131a-6902-6b00-000000002b00}5796C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /c reg query "HKLM\Software\WOW6432Node\Npcap" /ve 2>nul | find "REG_SZ"C:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1316-6902-2800-000000002b00}1380C:\Windows\System32\cmd.exeC:\WINDOWS\SYSTEM32\cmd.exe /c ""C:\Program Files\Npcap\CheckStatus.bat""NT AUTHORITY\SYSTEM +154100x80000000000000008802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:02.270{8223a6b9-131a-6902-6c00-000000002b00}5812C:\Windows\System32\reg.exe10.0.26100.4484 (WinBuild.160101.0800)Registry Console ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationreg.exereg query "HKLM\Software\WOW6432Node\Npcap" /ve C:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AB6C6B22FF2F2585DB01ECB18BFC0BE8,SHA256=5CEBCDCCD46D30D8B72D7790A81CC21B523D43680C11062FEB1E497524DAFBD1,IMPHASH=3B322244D4C64F3C932F94E6E3457771{8223a6b9-131a-6902-6b00-000000002b00}5796C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /c reg query "HKLM\Software\WOW6432Node\Npcap" /ve 2>nul | find "REG_SZ"NT AUTHORITY\SYSTEM +154100x80000000000000008803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:02.325{8223a6b9-131a-6902-6d00-000000002b00}5824C:\Windows\System32\find.exe10.0.26100.1 (WinBuild.160101.0800)Find String (grep) UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationFIND.EXEfind "REG_SZ"C:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=21AF9D1389428FB7DE154C11ADCAC954,SHA256=CF9CC5A552DE280750B36743E80C33381E59D5EC8AA65A2DCFDD6A34198799BC,IMPHASH=7EF15CE1238ABC9D0468CB4D7C10B6F3{8223a6b9-131a-6902-6b00-000000002b00}5796C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /c reg query "HKLM\Software\WOW6432Node\Npcap" /ve 2>nul | find "REG_SZ"NT AUTHORITY\SYSTEM +154100x80000000000000008804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:02.401{8223a6b9-131a-6902-6e00-000000002b00}5844C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /c sc.exe qc npcapC:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1316-6902-2800-000000002b00}1380C:\Windows\System32\cmd.exeC:\WINDOWS\SYSTEM32\cmd.exe /c ""C:\Program Files\Npcap\CheckStatus.bat""NT AUTHORITY\SYSTEM +154100x80000000000000008805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:02.425{8223a6b9-131a-6902-6f00-000000002b00}5856C:\Windows\System32\sc.exe10.0.26100.4484 (WinBuild.160101.0800)Service Control Manager Configuration ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationsc.exesc.exe qc npcapC:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=C8F632A326219F85927B3F33A13F7C7D,SHA256=A452BFCB6000D03942DDFADDCDA5A7EB121447ED99B1BA090446B4A989F1F7AE,IMPHASH=42DADBD60BBC453DD1773FDC089E19B7{8223a6b9-131a-6902-6e00-000000002b00}5844C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /c sc.exe qc npcapNT AUTHORITY\SYSTEM +22542200x80000000000000008806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:01.879{8223a6b9-1316-6902-3000-000000002b00}2340soc101win111460-C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +22542200x80000000000000008807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:01.943{8223a6b9-1316-6902-2000-000000002b00}1748_ldap._tcp.dc._msdcs.localdomain123-C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +154100x80000000000000008808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:02.847{8223a6b9-131a-6902-7100-000000002b00}5908C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe networkC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:03.017{8223a6b9-131b-6902-7200-000000002b00}5968C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k osprivacy -p -s camsvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:03.442{8223a6b9-131b-6902-7700-000000002b00}5852C:\Windows\System32\AggregatorHost.exe10.0.26100.4768 (WinBuild.160101.0800)Microsoft (R) Aggregator HostMicrosoft® Windows® Operating SystemMicrosoft CorporationAggregatorHost.exeAggregatorHost.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4076B2C887CA819BF687325EF7A089C7,SHA256=695A463DFEA05B8BFC4F5D193103456149313234C49E0D3FF7AED0931DD5B6A9,IMPHASH=AD82AF6FE8395BBD9698613C6EE80CD8{8223a6b9-1318-6902-4e00-000000002b00}3832C:\Windows\System32\svchost.exeC:\WINDOWS\System32\svchost.exe -k utcsvc -pNT AUTHORITY\SYSTEM +154100x80000000000000008811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:03.488{8223a6b9-131b-6902-7800-000000002b00}1380C:\Windows\System32\slui.exe10.0.26100.4484 (WinBuild.160101.0800)Windows Activation ClientMicrosoft® Windows® Operating SystemMicrosoft Corporationslui.exe"C:\WINDOWS\System32\SLUI.exe" RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=89e87510-ba92-45f6-8329-3afa905e3e83;NotificationInterval=1440;Trigger=TimerEventC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=3756CD9F4CD2D1DC9E4EA562743E2B56,SHA256=DF6434A5EB94353F23EB301C94C07DA828346A57F7402986B428839D3E5F1E29,IMPHASH=965E6FDBF2B84C0CDAA6303EA677DF71{8223a6b9-131b-6902-7600-000000002b00}5800C:\Windows\System32\SppExtComObj.ExeC:\WINDOWS\system32\SppExtComObj.exe -EmbeddingNT AUTHORITY\NETWORK SERVICE +154100x80000000000000008812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:03.559{8223a6b9-131b-6902-7900-000000002b00}3208C:\Windows\System32\slui.exe10.0.26100.4484 (WinBuild.160101.0800)Windows Activation ClientMicrosoft® Windows® Operating SystemMicrosoft Corporationslui.exe"C:\WINDOWS\System32\SLUI.exe" RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=89e87510-ba92-45f6-8329-3afa905e3e83;NotificationInterval=1440;Trigger=NetworkAvailableC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=3756CD9F4CD2D1DC9E4EA562743E2B56,SHA256=DF6434A5EB94353F23EB301C94C07DA828346A57F7402986B428839D3E5F1E29,IMPHASH=965E6FDBF2B84C0CDAA6303EA677DF71{8223a6b9-131b-6902-7600-000000002b00}5800C:\Windows\System32\SppExtComObj.ExeC:\WINDOWS\system32\SppExtComObj.exe -EmbeddingNT AUTHORITY\NETWORK SERVICE +154100x80000000000000008813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:03.632{8223a6b9-131b-6902-7a00-000000002b00}1172C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManagerC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:04.143{8223a6b9-131c-6902-7c00-000000002b00}5732C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-AMFilter.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:04.260{8223a6b9-131c-6902-7e00-000000002b00}5648C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-AMFilter.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Drivers\WdFilter.sys" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Drivers\WdFilter.sys" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Drivers\WdFilter.sys"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:04.347{8223a6b9-131c-6902-8000-000000002b00}3208C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Windows-Windows Defender.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x80000000000000008817Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:14:04.417{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unsecapp.exe|c11d412e85f8935b\LowerCaseLongPathc:\windows\system32\wbem\unsecapp.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008818Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:14:04.417{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unsecapp.exe|c11d412e85f8935b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000008819Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:14:04.417{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unsecapp.exe|c11d412e85f8935b\LinkDate07/09/2077 02:14:19NT AUTHORITY\SYSTEM +13241300x80000000000000008820Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:14:04.417{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unsecapp.exe|c11d412e85f8935b\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +12241200x80000000000000008821Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:14:04.425{8223a6b9-131c-6902-8000-000000002b00}3208C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/OperationalNT AUTHORITY\SYSTEM +12241200x80000000000000008822Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:14:04.457{8223a6b9-131c-6902-8000-000000002b00}3208C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHCNT AUTHORITY\SYSTEM +154100x80000000000000008823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:04.471{8223a6b9-131c-6902-8200-000000002b00}6156C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Windows-Windows Defender.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpEvMsg.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpEvMsg.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpEvMsg.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x80000000000000008824Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\OwningPublisher{11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78}NT AUTHORITY\SYSTEM +13241300x80000000000000008825Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x80000000000000008826Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\IsolationDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x80000000000000008827Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\ChannelAccessO:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x3;;;BO)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x3;;;SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x80000000000000008828Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\MaxSizeDWORD (0x01000000)NT AUTHORITY\SYSTEM +13241300x80000000000000008829Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x80000000000000008830Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x80000000000000008831Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\OwningPublisher{11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78}NT AUTHORITY\SYSTEM +13241300x80000000000000008832Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x80000000000000008833Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\IsolationDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x80000000000000008834Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\ChannelAccessO:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x3;;;BO)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x3;;;SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x80000000000000008835Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\MaxSizeDWORD (0x00040000)NT AUTHORITY\SYSTEM +13241300x80000000000000008836Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x80000000000000008837Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:04.560{8223a6b9-131c-6902-8200-000000002b00}6156C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +154100x80000000000000008838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:04.800{8223a6b9-131c-6902-8400-000000002b00}6292C:\Windows\System32\VSSVC.exe10.0.26100.3323 (WinBuild.160101.0800)Microsoft® Volume Shadow Copy ServiceMicrosoft® Windows® Operating SystemMicrosoft CorporationVSSVC.EXEC:\WINDOWS\system32\vssvc.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=3559C1EDC443935C920C259275FEC4B6,SHA256=6FB3F8164246636719919B53EC34522B1A332F4D0CFFCE30C88DC2CC596C9979,IMPHASH=632AC2019A2FB34FA7F16C068866AB50{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:04.873{8223a6b9-131c-6902-8500-000000002b00}6336C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-Service.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:04.940{8223a6b9-131c-6902-8700-000000002b00}6392C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-Service.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpSvc.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpSvc.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpSvc.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:05.020{8223a6b9-131d-6902-8900-000000002b00}6444C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-NIS.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:05.027{8223a6b9-131d-6902-8b00-000000002b00}6460C:\Windows\UUS\amd64\WaaSMedicAgent.exe10.0.26100.4768 (WinBuild.160101.0800)WaasMedic Agent ExeMicrosoft® Windows® Operating SystemMicrosoft CorporationWaasMedicAgent.exeC:\WINDOWS\uus\AMD64\WaaSMedicAgent.exe 90f09f510d3637158bb965733db163ce 0l+IcNzackCMFMeBlAbxDA.0.1.0.3.0C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=7FFF526FC565C6A2EB8D6A21BFF901AA,SHA256=D262348FD1005297779B7A87DC8B4FC441A1FD19C59BED189FD6480AF5548ECF,IMPHASH=A640481B7998DC1021869FA45A890AA6{8223a6b9-1316-6902-2500-000000002b00}2008C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wusvcs -p -s WaaSMedicSvcNT AUTHORITY\SYSTEM +154100x80000000000000008843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:05.087{8223a6b9-131d-6902-8d00-000000002b00}6548C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-NIS.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:05.156{8223a6b9-131d-6902-8f00-000000002b00}6600C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-RTP.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:05.233{8223a6b9-131d-6902-9100-000000002b00}6652C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-RTP.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpRtp.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpRtp.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpRtp.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:05.300{8223a6b9-131d-6902-9300-000000002b00}6704C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-Protection.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:05.407{8223a6b9-131d-6902-9500-000000002b00}6756C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\Microsoft-Antimalware-Protection.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpClient.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpClient.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpClient.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x80000000000000008848Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:14:05.499{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\CLSID\{2DCD7FDB-8809-48E4-8E4F-3157C57CF987}\InprocServer32\(Default)C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MPUXAGENT.DLLNT AUTHORITY\SYSTEM +13241300x80000000000000008849Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:14:05.499{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\CLSID\{4DB116D1-9B24-4DFC-946B-BFE03E852002}\InProcServer32\(Default)C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MPUXAGENT.DLLNT AUTHORITY\SYSTEM +13241300x80000000000000008850Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:05.499{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MDCoreSvc\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x80000000000000008851Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:05.516{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\*\shellex\ContextMenuHandlers\EPP\(Default){09A47860-11B0-4DA5-AFA5-26D86198A780}NT AUTHORITY\SYSTEM +13241300x80000000000000008852Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:05.516{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\Drive\shellex\ContextMenuHandlers\EPP\(Default){09A47860-11B0-4DA5-AFA5-26D86198A780}NT AUTHORITY\SYSTEM +13241300x80000000000000008853Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:05.516{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\Directory\shellex\ContextMenuHandlers\EPP\(Default){09A47860-11B0-4DA5-AFA5-26D86198A780}NT AUTHORITY\SYSTEM +22542200x80000000000000008854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:07.343{8223a6b9-1317-6902-3b00-000000002b00}2960wpad1460-C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +154100x80000000000000008855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:08.158{8223a6b9-1320-6902-9700-000000002b00}6948C:\Windows\System32\wermgr.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Problem ReportingMicrosoft® Windows® Operating SystemMicrosoft CorporationWerMgr"C:\WINDOWS\system32\wermgr.exe" -uploadC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ABE1D752643419A8252520AABF75C29D,SHA256=1707CB793B8F64B65CA5C2FEEB05CB7198349354E9E67ADE0671EEC3647F351B,IMPHASH=2FEAC3143808B4542A16622000CCFCAE{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +22542200x80000000000000008856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:07.958{8223a6b9-1316-6902-2000-000000002b00}1748www.msftconnecttest.com0type: 5 ncsi-geo.trafficmanager.net;type: 5 www.msftncsi.com.edgesuite.net;type: 5 a1961.g2.akamai.net;::ffff:23.50.120.199;::ffff:23.50.120.198;C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +154100x80000000000000008857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:09.116{8223a6b9-1321-6902-9800-000000002b00}7052C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivilegesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x80000000000000008858Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:09.174{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WdNisDrv\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +154100x80000000000000008859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:09.207{8223a6b9-1321-6902-9a00-000000002b00}7144C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -UnmanagedUpdateC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000008860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:09.230{8223a6b9-1321-6902-9c00-000000002b00}6200C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Network Realtime Inspection ServiceMicrosoft® Windows® Operating SystemMicrosoft CorporationNisSrv.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe"C:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=CA9FAA940A4CEFCC81E7A234910C13B0,SHA256=9D70405BAC6B0DE403C34973606F1934DB979C809F18E42E5E89A368022CB778,IMPHASH=1DF092BD9A196CF019F35F9F3FEC51E5{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +22542200x80000000000000008861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:09.992{8223a6b9-1316-6902-2700-000000002b00}1048vmw-keyid-45520bb2d7ecfcc02cc3173a41f71357b65fc1d1.microsoftaik.azure.net0type: 5 prdf.aadg.msidentity.com;type: 5 www.tm.f.prd.aadg.akadns.net;::ffff:40.126.29.23;::ffff:40.126.29.22;::ffff:40.126.29.2;::ffff:40.126.29.21;::ffff:40.126.29.20;::ffff:40.126.29.1;::ffff:40.126.29.0;C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008862Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:14.603{8223a6b9-1315-6902-1200-000000002b00}1056C:\WINDOWS\system32\LogonUI.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\LastLoggedOnUser.\AdministratorNT AUTHORITY\SYSTEM +154100x80000000000000008863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:14.612{8223a6b9-1326-6902-9e00-000000002b00}6588C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k WebThreatDefense -p -s webthreatdefsvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:14.870{8223a6b9-1326-6902-9f00-000000002b00}6696C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k CameraMonitorC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008865Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.107{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\AarSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008866Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.107{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\AarSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k AarSvcGroup -pNT AUTHORITY\SYSTEM +154100x80000000000000008867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.107{8223a6b9-1327-6902-a000-000000002b00}6748C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +13241300x80000000000000008868Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.111{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\BcastDVRUserService_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008869Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.111{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\BcastDVRUserService_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k BcastDVRUserServiceNT AUTHORITY\SYSTEM +13241300x80000000000000008870Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.113{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\BluetoothUserService_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008871Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.113{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\BluetoothUserService_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k BthAppGroup -pNT AUTHORITY\SYSTEM +13241300x80000000000000008872Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.119{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\CaptureService_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008873Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.119{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\CaptureService_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k LocalService -pNT AUTHORITY\SYSTEM +154100x80000000000000008874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.116{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exe10.0.26100.1882 (WinBuild.160101.0800)Shell Infrastructure HostMicrosoft® Windows® Operating SystemMicrosoft Corporationsihost.exesihost.exeC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=1CD5D3342251D0C39ADA51E3C0BB0BE2,SHA256=DE14D56A139FD4D02D4586728B7978B67C865013271916FA1E4DABA2918B1FBE,IMPHASH=0C2E5D141ACA7FB7E39618995321C151{8223a6b9-1316-6902-2100-000000002b00}1768C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManagerNT AUTHORITY\SYSTEM +13241300x80000000000000008875Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.121{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\cbdhsvc_ba422\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x80000000000000008876Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.121{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\cbdhsvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -pNT AUTHORITY\SYSTEM +13241300x80000000000000008877Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.123{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\CDPUserSvc_ba422\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x80000000000000008878Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.123{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\CDPUserSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroupNT AUTHORITY\SYSTEM +13241300x80000000000000008879Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.127{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\CloudBackupRestoreSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008880Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.127{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\CloudBackupRestoreSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroupNT AUTHORITY\SYSTEM +13241300x80000000000000008881Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.129{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\ConsentUxUserSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008882Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.129{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\ConsentUxUserSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k DevicesFlowNT AUTHORITY\SYSTEM +13241300x80000000000000008883Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.131{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\CredentialEnrollmentManagerUserSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008884Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.131{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\CredentialEnrollmentManagerUserSvc_ba422\ImagePathC:\WINDOWS\system32\CredentialEnrollmentManager.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008885Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.133{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\DeviceAssociationBrokerSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008886Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.133{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\DeviceAssociationBrokerSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k DevicesFlow -pNT AUTHORITY\SYSTEM +13241300x80000000000000008887Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.135{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\DevicePickerUserSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008888Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.135{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\DevicePickerUserSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k DevicesFlowNT AUTHORITY\SYSTEM +13241300x80000000000000008889Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.137{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\DevicesFlowUserSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008890Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.137{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\DevicesFlowUserSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k DevicesFlowNT AUTHORITY\SYSTEM +13241300x80000000000000008891Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.141{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MessagingService_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008892Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.141{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MessagingService_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroupNT AUTHORITY\SYSTEM +13241300x80000000000000008893Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.145{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\NPSMSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008894Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.145{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\NPSMSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k LocalService -pNT AUTHORITY\SYSTEM +13241300x80000000000000008895Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.147{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\OneSyncSvc_ba422\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x80000000000000008896Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.147{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\OneSyncSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroupNT AUTHORITY\SYSTEM +13241300x80000000000000008897Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.149{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\P9RdrService_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008898Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.149{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\P9RdrService_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k P9RdrService -pNT AUTHORITY\SYSTEM +13241300x80000000000000008899Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.151{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\PenService_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008900Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.151{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\PenService_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k PenServiceNT AUTHORITY\SYSTEM +13241300x80000000000000008901Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.155{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008902Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.155{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroupNT AUTHORITY\SYSTEM +13241300x80000000000000008903Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.157{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\PrintWorkflowUserSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008904Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.157{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\PrintWorkflowUserSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k PrintWorkflowNT AUTHORITY\SYSTEM +13241300x80000000000000008905Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.161{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\UdkUserSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008906Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.161{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\UdkUserSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k UdkSvcGroupNT AUTHORITY\SYSTEM +13241300x80000000000000008907Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.161{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\UnistoreSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008908Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.161{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\UnistoreSvc_ba422\ImagePathC:\WINDOWS\System32\svchost.exe -k UnistackSvcGroupNT AUTHORITY\SYSTEM +13241300x80000000000000008909Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.163{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\UserDataSvc_ba422\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x80000000000000008910Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.163{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\UserDataSvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroupNT AUTHORITY\SYSTEM +13241300x80000000000000008911Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.165{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\webthreatdefusersvc_ba422\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x80000000000000008912Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.165{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\webthreatdefusersvc_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -pNT AUTHORITY\SYSTEM +13241300x80000000000000008913Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.167{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WpnUserService_ba422\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x80000000000000008914Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:14:15.167{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WpnUserService_ba422\ImagePathC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroupNT AUTHORITY\SYSTEM +154100x80000000000000008915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.171{8223a6b9-1327-6902-a200-000000002b00}6800C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.176{8223a6b9-1327-6902-a300-000000002b00}6760C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvcC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.199{8223a6b9-1327-6902-a400-000000002b00}6528C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s webthreatdefusersvcC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.236{8223a6b9-1327-6902-a500-000000002b00}6460C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserServiceC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.298{8223a6b9-1327-6902-a600-000000002b00}7024C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.303{8223a6b9-1327-6902-a700-000000002b00}7036C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s TokenBrokerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.311{8223a6b9-1327-6902-a800-000000002b00}7004C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.321{8223a6b9-1327-6902-a900-000000002b00}7008C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.332{8223a6b9-1327-6902-aa00-000000002b00}7072C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /cC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.545{8223a6b9-1327-6902-ab00-000000002b00}6692C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalService -p -s CDPSvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.695{8223a6b9-1327-6902-ac00-000000002b00}7256C:\Windows\System32\slui.exe10.0.26100.4484 (WinBuild.160101.0800)Windows Activation ClientMicrosoft® Windows® Operating SystemMicrosoft Corporationslui.exe"C:\WINDOWS\System32\SLUI.exe" RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=89e87510-ba92-45f6-8329-3afa905e3e83;NotificationInterval=1440;Trigger=UserLogon;SessionId=1C:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=3756CD9F4CD2D1DC9E4EA562743E2B56,SHA256=DF6434A5EB94353F23EB301C94C07DA828346A57F7402986B428839D3E5F1E29,IMPHASH=965E6FDBF2B84C0CDAA6303EA677DF71{8223a6b9-131b-6902-7600-000000002b00}5800C:\Windows\System32\SppExtComObj.ExeC:\WINDOWS\system32\SppExtComObj.exe -EmbeddingNT AUTHORITY\NETWORK SERVICE +154100x80000000000000008926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.751{8223a6b9-1327-6902-ad00-000000002b00}7304C:\Windows\System32\slui.exe10.0.26100.4484 (WinBuild.160101.0800)Windows Activation ClientMicrosoft® Windows® Operating SystemMicrosoft Corporationslui.exeC:\WINDOWS\System32\slui.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=3756CD9F4CD2D1DC9E4EA562743E2B56,SHA256=DF6434A5EB94353F23EB301C94C07DA828346A57F7402986B428839D3E5F1E29,IMPHASH=965E6FDBF2B84C0CDAA6303EA677DF71{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.782{8223a6b9-1327-6902-ae00-000000002b00}7328C:\Windows\System32\userinit.exe10.0.26100.4484 (WinBuild.160101.0800)Userinit Logon ApplicationMicrosoft® Windows® Operating SystemMicrosoft CorporationUSERINIT.EXEC:\WINDOWS\system32\userinit.exeC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=08A5A039278FB14C1F872BBE55D8C5BB,SHA256=64CCAF40EE788F63738C811A2E9B8FF66C777D820BA9008E6C568954EBDC1C4F,IMPHASH=831F09A183825FCD04B27DF4080A7582{8223a6b9-1314-6902-0a00-000000002b00}760C:\Windows\System32\winlogon.exewinlogon.exeNT AUTHORITY\SYSTEM +154100x80000000000000008928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.835{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exe10.0.26100.4768 (WinBuild.160101.0800)Windows ExplorerMicrosoft® Windows® Operating SystemMicrosoft CorporationEXPLORER.EXEC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5E6C926A8C43C90472417CBA00E96820,SHA256=EF7BC1AEBE53658E8B92F51E1693671F2220E1CAE7D5DD92DEC977DA6C82CAFC,IMPHASH=9ADB846E02C3BD5CC3A7DBC3FD2DCA34{8223a6b9-1327-6902-ae00-000000002b00}7328C:\Windows\System32\userinit.exeC:\WINDOWS\system32\userinit.exesoc101win11\Administrator +154100x80000000000000008929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:15.902{8223a6b9-1327-6902-b000-000000002b00}7400C:\Windows\System32\ShellHost.exe10.0.26100.4768 (WinBuild.160101.0800)ShellHostMicrosoft® Windows® Operating SystemMicrosoft CorporationShellHost.exe"C:\Windows\System32\ShellHost.exe"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=25CD2D40C80C3492310864D9ECA46849,SHA256=1695122C6F4160CAC0BF2CDD20DBAB38A2AEDC29BBC18BFC36AA07B229FFFCC4,IMPHASH=5D86A36429F669912036DD1BEBCE55D4{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exesihost.exesoc101win11\Administrator +154100x80000000000000008930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:16.280{8223a6b9-1328-6902-b200-000000002b00}7620C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe2125.17600.0.0-Microsoft® Windows® Operating SystemMicrosoft CorporationCrossDeviceResume.exe"C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe" /tileid MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeAppC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D75916490080BC96DEEC62DF8976BEB7,SHA256=4B25EA727B4905B88C0941FF22091BDA83DF137428494321B986671EABCDC675,IMPHASH=C4CD5015B55B46336513DE7F281A9B04{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exesihost.exesoc101win11\Administrator +154100x80000000000000008931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:16.573{8223a6b9-1328-6902-b300-000000002b00}7696C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvcC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +22542200x80000000000000008932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:16.716{8223a6b9-1317-6902-4700-000000002b00}3432SOC101WIN110fe80::a832:a53b:32c1:6645;::ffff:172.16.143.133;C:\Windows\System32\spoolsv.exeNT AUTHORITY\SYSTEM +154100x80000000000000008933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:17.838{8223a6b9-1329-6902-b900-000000002b00}7492C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k UdkSvcGroup -s UdkUserSvcC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:18.085{8223a6b9-132a-6902-bc00-000000002b00}8252C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.22301.90.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe525.22301.40.0-Microsoft® Windows® Operating SystemMicrosoft CorporationWidgets.exe"C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.22301.90.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe" -ServerName:Microsoft.Windows.DashboardServerC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=81A4B9534F4640B2A01148A08879E1C9,SHA256=7311758CF6C730E20CD38090E21DB9BF61DA6A5E187F77C4C2E6E35A73BC5AEA,IMPHASH=18F4C68545C5D3070BF221F0E6B4F08D{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +22542200x80000000000000008935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:17.938{8223a6b9-1317-6902-4700-000000002b00}3432SOC101WIN110172.16.143.133;C:\Windows\System32\spoolsv.exeNT AUTHORITY\SYSTEM +22542200x80000000000000008936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:17.938{8223a6b9-1317-6902-4700-000000002b00}3432SOC101WIN110fe80::a832:a53b:32c1:6645;C:\Windows\System32\spoolsv.exeNT AUTHORITY\SYSTEM +154100x80000000000000008937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:18.921{8223a6b9-132a-6902-be00-000000002b00}8640C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource coreC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.199.11\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1327-6902-aa00-000000002b00}7072C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /cNT AUTHORITY\SYSTEM +154100x80000000000000008938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:19.223{8223a6b9-132b-6902-c100-000000002b00}8792C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe0.5.0.0WidgetService.exeWidgets Platform RuntimeMicrosoft CorporationWidgetService.exe"C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe" -RegisterProcessAsComServer -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7E8BB0805D97016C3D0121836FE7E21A,SHA256=7335EEC0530B4FB2B8E523A16AE7D4D4F3FEA3D98E00F5B608EF204EB73F6578,IMPHASH=91719B95729577E550F597CC4FD3F981{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:23.523{8223a6b9-132f-6902-ca00-000000002b00}9988C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s lfsvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:24.112{8223a6b9-1330-6902-cb00-000000002b00}10148C:\Windows\System32\smartscreen.exe10.0.26100.4652 (WinBuild.160101.0800)Windows Defender SmartScreenMicrosoft® Windows® Operating SystemMicrosoft Corporationsmartscreen.exeC:\Windows\System32\smartscreen.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4B9FD8FEFBA636B66F81E0CDBD12B3DA,SHA256=86530447A3E2B502FE2AC164434B13137E5505A86743A96A091EC18A9377D9D9,IMPHASH=C84171DF6E7F087EA4E625CCCE2AB167{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:27.242{8223a6b9-1333-6902-cd00-000000002b00}9720C:\Windows\System32\oobe\UserOOBEBroker.exe10.0.26100.3624 (WinBuild.160101.0800)User OOBE BrokerMicrosoft® Windows® Operating SystemMicrosoft CorporationUserOOBEBroker.exeC:\Windows\System32\oobe\UserOOBEBroker.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CDFEA7CDEC9B4FACB7A6360B1320A945,SHA256=CBF49D6F6C72058CFA35FE3E7E5BD9ACCC58A3B77CC9FCE9635599B598C3B057,IMPHASH=1E87A888E7E2FDA75A690AB7D6818D68{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:27.349{8223a6b9-1333-6902-ce00-000000002b00}7976C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exe25.159.0817.0003Microsoft OneDriveFile Co-Authoring ExecutableMicrosoft OneDriveMicrosoft CorporationFileCoAuth.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=DA15ECEE1CDDA36B23C86C85019F3B07,SHA256=37503E4234147A3F873586F63CFD9EDEF9A5024D4C98D9AB710AB07D54733B1A,IMPHASH=407C742688E30E9C56211721840A108A{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:27.685{8223a6b9-1333-6902-cf00-000000002b00}9124C:\Windows\System32\ctfmon.exe10.0.26100.3624 (WinBuild.160101.0800)CTF LoaderMicrosoft® Windows® Operating SystemMicrosoft CorporationCTFMON.EXE/QuitInfo:0000000000000274;0000000000000278; C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=A3E50EF69038B3415A4D75820255A301,SHA256=F219F0975E70935D0BD4898BC568B146603C1D2E07ECE027F5E5B5E4EAD203D5,IMPHASH=B539389D4BE1DD68C8213A539FEB41FB{8223a6b9-1316-6902-3900-000000002b00}2800C:\Windows\System32\svchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TextInputManagementServiceNT AUTHORITY\SYSTEM +154100x80000000000000008944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:28.702{8223a6b9-1334-6902-d100-000000002b00}10280C:\Windows\System32\SIHClient.exe1350.2506.29012.0SIH ClientMicrosoft® Windows® Operating SystemMicrosoft Corporationsihclient.exeC:\WINDOWS\System32\sihclient.exe /cv 0l+IcNzackCMFMeBlAbxDA.0.2C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=31219950056F3AD089EE3DC8E2EAE083,SHA256=C98F0E7F21B1CB371DB84ED4FB9692171C3EAB38BB400754633B7536AE360B14,IMPHASH=837499ADAB542A83642C23324CBE2E60{8223a6b9-1316-6902-2200-000000002b00}1776C:\Windows\System32\upfc.exeC:\WINDOWS\System32\Upfc.exe /launchtype boot /cv 0l+IcNzackCMFMeBlAbxDA.0NT AUTHORITY\SYSTEM +22542200x80000000000000008945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:28.038{8223a6b9-132c-6902-c400-000000002b00}9148wpad1460-C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +154100x80000000000000008946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:29.431{8223a6b9-1335-6902-d200-000000002b00}10332C:\Windows\System32\AppHostRegistrationVerifier.exe10.0.26100.4202 (WinBuild.160101.0800)App Uri Handlers Registration VerifierMicrosoft® Windows® Operating SystemMicrosoft CorporationAppHostNameRegistrationVerifier.exe"C:\WINDOWS\system32\AppHostRegistrationVerifier.exe"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=52A337ECD6667A11692E82DC77545028,SHA256=2C7EBBEE4AAA4E60D7444800E1F3A9797E10D2EF01A65382C4116C9BD4CB409A,IMPHASH=6C914AB773FBD8191DFBD4E4439F189B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:29.441{8223a6b9-1335-6902-d300-000000002b00}10348C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" -IdleTask -TaskName WdVerificationC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:29.448{8223a6b9-1335-6902-d400-000000002b00}10364C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" -IdleTask -TaskName WdCleanupC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:29.716{8223a6b9-1335-6902-d700-000000002b00}10524C:\Windows\System32\SecurityHealthService.exe10.0.26100.3624 (WinBuild.160101.0800)Windows Security Health ServiceMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthService.exeC:\WINDOWS\system32\SecurityHealthService.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=79DBF0DF097DD309F3B8FE62D9612B46,SHA256=D33874DA2E3E7E0CEFB6B369DC9FFCB7B77B4B74FFFB8E15EE18D4DBA23D0E13,IMPHASH=04BA4BDBA20FA3CE99778FD77096B5FA{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008950Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:14:29.824{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\WdMam\Shell\Open\Command\(Default)C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe %%1NT AUTHORITY\SYSTEM +154100x80000000000000008951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:29.900{8223a6b9-1335-6902-d800-000000002b00}10588C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe10.0.27840.1000 (WinBuild.160101.0800)Windows Security Health HostMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=478FBFDA6A51CF9F0D5BFD50B72DFB08,SHA256=272896B88C6C30DD41E8D44FD54A676FDC6A675BE3F38AAA7434F51B98B822E0,IMPHASH=E8960CAF12CF621B3CA78988264C27F1{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x80000000000000008952Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:14:29.999{8223a6b9-1329-6902-b800-000000002b00}4048C:\Windows\System32\RuntimeBroker.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD} {2FABA4C7-4DA9-4013-9697-20CC3FD40F85} 0xFFFFBinary Datasoc101win11\Administrator +13241300x80000000000000008953Microsoft-Windows-Sysmon/Operationalsoc101win11Suspicious,ImageBeginWithBackslashSetValue2025-10-29 13:14:30.003{8223a6b9-1335-6902-d800-000000002b00}10588\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\418A073AA3BC1C75Binary Datasoc101win11\Administrator +13241300x80000000000000008954Microsoft-Windows-Sysmon/Operationalsoc101win11Suspicious,ImageBeginWithBackslashSetValue2025-10-29 13:14:30.007{8223a6b9-1335-6902-d800-000000002b00}10588\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\418A073AA3BC1C75Binary Datasoc101win11\Administrator +13241300x80000000000000008955Microsoft-Windows-Sysmon/Operationalsoc101win11Suspicious,ImageBeginWithBackslashSetValue2025-10-29 13:14:30.007{8223a6b9-1335-6902-d800-000000002b00}10588\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\418A073AA3BC1C75Binary Datasoc101win11\Administrator +13241300x80000000000000008956Microsoft-Windows-Sysmon/Operationalsoc101win11Suspicious,ImageBeginWithBackslashSetValue2025-10-29 13:14:30.007{8223a6b9-1335-6902-d800-000000002b00}10588\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\418A073AA3BC1C75Binary Datasoc101win11\Administrator +11241100x80000000000000008957Microsoft-Windows-Sysmon/Operationalsoc101win11T10532025-10-29 13:14:30.011{8223a6b9-1316-6902-1c00-000000002b00}1588C:\WINDOWS\system32\svchost.exeC:\Windows\System32\Tasks\PostponeDeviceSetupToast_S-1-5-21-4051859043-1187413090-3677023548-500_02025-10-29 13:14:30.011NT AUTHORITY\SYSTEM +13241300x80000000000000008958Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:14:30.146{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\apphostregistrat|23d050ec54a320fe\LowerCaseLongPathc:\windows\system32\apphostregistrationverifier.exeNT AUTHORITY\SYSTEM +13241300x80000000000000008959Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:14:30.146{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\apphostregistrat|23d050ec54a320fe\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000008960Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:14:30.146{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\apphostregistrat|23d050ec54a320fe\LinkDate08/18/2030 16:54:50NT AUTHORITY\SYSTEM +13241300x80000000000000008961Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:14:30.146{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\apphostregistrat|23d050ec54a320fe\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x80000000000000008962Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:14:30.751{8223a6b9-1327-6902-af00-000000002b00}7368C:\WINDOWS\Explorer.EXEHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Control Panel\NotifyIconSettings\14088594186581486386\PublisherMicrosoft Windowssoc101win11\Administrator +22542200x80000000000000008963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:31.201{8223a6b9-1335-6902-d200-000000002b00}10332to-do.office.com0type: 5 outlook.office365.com;type: 5 ooc-g2.tm-4.office.com;::ffff:52.96.165.50;::ffff:52.96.37.34;::ffff:52.96.172.114;::ffff:52.96.173.146;::ffff:52.96.165.226;::ffff:52.96.104.34;::ffff:52.96.104.50;::ffff:52.96.173.210;C:\Windows\System32\AppHostRegistrationVerifier.exesoc101win11\Administrator +22542200x80000000000000008964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:32.062{8223a6b9-1335-6902-d200-000000002b00}10332staging.to-do.officeppe.com9003-C:\Windows\System32\AppHostRegistrationVerifier.exesoc101win11\Administrator +534500x80000000000000008965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:33.618{8223a6b9-1333-6902-ce00-000000002b00}7976C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exesoc101win11\Administrator +154100x80000000000000008966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:42.568{8223a6b9-1342-6902-e200-000000002b00}11056C:\Windows\System32\DataExchangeHost.exe10.0.26100.4202 (WinBuild.160101.0800)Data Exchange HostMicrosoft® Windows® Operating SystemMicrosoft CorporationDataExchangeHost.exeC:\Windows\System32\DataExchangeHost.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=971ED9E3801DD3B9F639C823E46009A7,SHA256=ADBD854FEFB12B1AAA7AE2AB2DDEC5F59A7C2E9AB037BE7CC239205B4AEBFE71,IMPHASH=13C2794134C5CD3964484311DEA46EA7{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:45.803{8223a6b9-1345-6902-e300-000000002b00}11120C:\Windows\System32\wlrmdr.exe10.0.26100.3624 (WinBuild.160101.0800)Windows logon reminderMicrosoft® Windows® Operating SystemMicrosoft CorporationWLRMNDR.EXE -c -s 0 -f 0 -t Empty -m Empty -a 0 -u EmptyC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=E2229DC1B19D2C589617E12B1481B9C1,SHA256=18FF283B94A44C281A1418019969AB7B5C689D4823985834BBFFDE282BFC200D,IMPHASH=0CE1167F022650E5C6F6A3764CF80084{8223a6b9-1314-6902-0a00-000000002b00}760C:\Windows\System32\winlogon.exewinlogon.exeNT AUTHORITY\SYSTEM +154100x80000000000000008968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:45.807{8223a6b9-1345-6902-e400-000000002b00}4604C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe SyncFromCloudC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:46.653{8223a6b9-1346-6902-eb00-000000002b00}1124C:\Windows\System32\backgroundTaskHost.exe10.0.26100.1 (WinBuild.160101.0800)Background Task HostMicrosoft® Windows® Operating SystemMicrosoft CorporationbackgroundTaskHost.exe"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:WindowsBackup.AppXnn6fnh4raxtmg45ba8k2f4ykb7n0k3y4.mcaC:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=8BDE0AE40012BD639FC60E494CC32356,SHA256=B7D2C17E0038945AA4B72AE7A89E54D29B04CCC0FEB62DF5C9B7B67DE43C2530,IMPHASH=DC601E2593053A84A6989DE251407AA7{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x80000000000000008970Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:14:46.917{8223a6b9-1327-6902-af00-000000002b00}7368C:\WINDOWS\Explorer.EXEHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{2cc5ca98-6485-489a-920e-b3e88a6ccce3}\shell\SpotlightClick\command\DelegateExecute{4813071a-41ad-44a2-9835-886d2f63ca30}soc101win11\Administrator +154100x80000000000000008971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:47.155{8223a6b9-1347-6902-ee00-000000002b00}10576C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exe25.159.0817.0003Microsoft OneDriveFile Co-Authoring ExecutableMicrosoft OneDriveMicrosoft CorporationFileCoAuth.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=DA15ECEE1CDDA36B23C86C85019F3B07,SHA256=37503E4234147A3F873586F63CFD9EDEF9A5024D4C98D9AB710AB07D54733B1A,IMPHASH=407C742688E30E9C56211721840A108A{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:47.169{8223a6b9-1347-6902-ef00-000000002b00}10856C:\Windows\System32\BdeUISrv.exe10.0.26100.2894 (WinBuild.160101.0800)BDE UI LauncherMicrosoft® Windows® Operating SystemMicrosoft CorporationBDEUISRV.DLLC:\WINDOWS\System32\BdeUISrv.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4CE6BDC4F92C31EEDB088E74698100D6,SHA256=A25C2B0F1D111856573F06FFEEAA9D02C1D96769C0BB375D0EAC65F557557EEE,IMPHASH=26FC02AE7E783017EE0998C22957BDD0{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +534500x80000000000000008973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:53.605{8223a6b9-1347-6902-ee00-000000002b00}10576C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exesoc101win11\Administrator +154100x80000000000000008974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:14:59.042{8223a6b9-1353-6902-f000-000000002b00}7452C:\Windows\System32\dxgiadaptercache.exe10.0.26100.3624 (WinBuild.160101.0800)DXGI Adapter CacheMicrosoft® Windows® Operating SystemMicrosoft CorporationDXGIAdapterCache.exe"C:\WINDOWS\system32\dxgiadaptercache.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=FFE4EF2EAE85C9D317027E7C6C6FAE30,SHA256=82AB1C8BA6D2AC0D51DAEF246A35CA54AD49F52CC7B9241FC7CBA1832D5B3936,IMPHASH=618B67EACA04EA41C7FD785E4ACC7038{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000008975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:00.201{8223a6b9-1354-6902-f100-000000002b00}6712C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe10.0.27840.1000 (WinBuild.160101.0800)Windows Security Health HostMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=478FBFDA6A51CF9F0D5BFD50B72DFB08,SHA256=272896B88C6C30DD41E8D44FD54A676FDC6A675BE3F38AAA7434F51B98B822E0,IMPHASH=E8960CAF12CF621B3CA78988264C27F1{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000008976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:00.893{8223a6b9-1354-6902-f200-000000002b00}5732C:\Windows\System32\SecurityHealthSystray.exe10.0.26100.1882 (WinBuild.160101.0800)Windows Security notification iconMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthSystray.exe"C:\Windows\System32\SecurityHealthSystray.exe" C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=04DB94F10266A28B3A7B6FD0D1C75969,SHA256=7E1747256C74F48D153B7F95A53151CA6988BB210CFEC60EB05921F5DA94FC0E,IMPHASH=81064125BBA480CDFE4B334998446BE8{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x80000000000000008977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:02.479{8223a6b9-1356-6902-f300-000000002b00}5720C:\Program Files\VMware\VMware Tools\vmtoolsd.exe12.4.5.49651VMware Tools Core ServiceVMware ToolsVMware, Inc.vmtoolsd.exe"C:\Program Files\VMware\VMware Tools\vmtoolsd.exe" -n vmusrC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=F7E079744B7AD6CD6F791898A1619460,SHA256=FA89670DF7E350D173A8B233D7F00BDBCF86F75041F76FB55EF29C2B996C0B43,IMPHASH=8A2930EA5F1EC61A2F9994C5214D2650{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x80000000000000008978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:02.630{8223a6b9-1356-6902-f400-000000002b00}5692C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000008979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:03.152{8223a6b9-1357-6902-f500-000000002b00}10828C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjYxMDAuNDk0NiIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjE2MiIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iVk13YXJlLCBJbmMuIiBwcm9kdWN0X25hbWU9IlZNd2FyZTIwLDEiLz48ZXhwIGV0YWc9IiZxdW90O1ZQUW9QMUYrZnExNXdSemgxa1BMNFBNcFdoOE9STUI1aXp2ck9DL2NoalE9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjEzMS4wLjY3NzguNzAiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9Ik9aWlkiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIzNTEiIGluc3RhbGxkYXRldGltZT0iMTczMTM0MjMwNCIgb29iZV9pbnN0YWxsX3RpbWU9IjEzMzc1ODE1MTY1ODE2OTgzNiIgZmlyc3RfZnJlX3NlZW5fdGltZT0iMTM0MDEzODM1NDI4NjQ5MzEwIiBmaXJzdF9mcmVfc2Vlbl92ZXJzaW9uPSIxMzkuMC4zNDA1LjEyNSI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIxODAzNzQiIHN5c3RlbV91cHRpbWVfdGlja3M9Ijc2MDY5Mjc1MyIvPjwvYXBwPjwvcmVxdWVzdD4C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.199.11\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1356-6902-f400-000000002b00}5692C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcNT AUTHORITY\SYSTEM +154100x80000000000000008980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:04.069{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe25.159.0817.0003Microsoft OneDriveMicrosoft OneDriveMicrosoft CorporationOneDrive.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /backgroundC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5AD05925A8FE3A1A15EB2449F70AA135,SHA256=0AD18EC348A99FD04EDD65477B48FB6D0B9535411AF0F5E9B40C0C61A57E91DD,IMPHASH=9B64999A42FEBC0CB20DB21F6621FC6F{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +13241300x80000000000000008981Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008982Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008983Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008984Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008985Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008986Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008987Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008988Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008989Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008990Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008991Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008992Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008993Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008994Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008995Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008996Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008997Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000008998Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000008999Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009000Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009001Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009002Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009003Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009004Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009005Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\*\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009006Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\*\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009007Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009008Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009009Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009010Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009011Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009012Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009013Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009014Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:04.739{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009015Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.755{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\i386\FileCoAuthLib.dllsoc101win11\Administrator +13241300x80000000000000009016Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:04.760{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuthLib64.dllsoc101win11\Administrator +13241300x80000000000000009017Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:04.760{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\odopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009018Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:04.760{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\odopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009019Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:04.760{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009020Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:04.760{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +22542200x80000000000000009021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:04.811{8223a6b9-1318-6902-5e00-000000002b00}4468api.github.com0::ffff:140.82.112.6;C:\Program Files\WSL\wslservice.exeNT AUTHORITY\SYSTEM +154100x80000000000000009022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:05.299{8223a6b9-1359-6902-f700-000000002b00}728C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exe25.159.0817.0003Microsoft OneDriveFile Co-Authoring ExecutableMicrosoft OneDriveMicrosoft CorporationFileCoAuth.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=DA15ECEE1CDDA36B23C86C85019F3B07,SHA256=37503E4234147A3F873586F63CFD9EDEF9A5024D4C98D9AB710AB07D54733B1A,IMPHASH=407C742688E30E9C56211721840A108A{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x80000000000000009023Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:05.598{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009024Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:05.598{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +154100x80000000000000009025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:06.331{8223a6b9-135a-6902-f900-000000002b00}10476C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe-----"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe" C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=FB6BF39F8D6670A2E9B14A403FB16348,SHA256=B1840B123E327F8E8324D43E3D96B3FC62E79A0314966A527E50C7696110D507,IMPHASH=11A5BA82ECB066D0C57FF5BF19D8CB80{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exesihost.exesoc101win11\Administrator +154100x80000000000000009026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:06.978{8223a6b9-135a-6902-fa00-000000002b00}9528C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\WebViewHost.exe19.2509.42011.0Microsoft 365 Copilot AppMicrosoft 365 CopilotMicrosoft CorporationWebViewHost.exe"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\WebViewHost.exe" ms-getoffice: autostart reason=AutoStarterC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4346F28935126BECAB53D1766C68A9A5,SHA256=DE81BE6CBE0EBA6B2186990521EC0D7135C0EB0832F3D012BA2086D262A87052,IMPHASH=1B40BEE88B12B6F993E8737951C7417A{8223a6b9-135a-6902-f900-000000002b00}10476C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe" soc101win11\Administrator +154100x80000000000000009027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:07.679{8223a6b9-135b-6902-fc00-000000002b00}4728C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s seclogonC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:07.831{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135a-6902-fa00-000000002b00}9528C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\WebViewHost.exe"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\WebViewHost.exe" ms-getoffice: autostart reason=AutoStartersoc101win11\Administrator +154100x80000000000000009029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:07.931{8223a6b9-135b-6902-ff00-000000002b00}3876C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView /prefetch:4 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0cc --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=140.0.7339.133 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=140.0.3485.66 --initial-client-data=0x19c,0x1a0,0x1a4,0x168,0x1a8,0x7ff8d5d82200,0x7ff8d5d8220c,0x7ff8d5d82218C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +154100x80000000000000009030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:08.155{8223a6b9-135c-6902-0001-000000002b00}3376C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1664,i,9441038020296075668,2370477150872858398,262144 --field-trial-handle=1824,i,16309926270948425934,13846169497689979656,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,msAggressiveCacheTrimming,msCustomDataPartition,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2NoTabForScreenShare,msWindowsTaskManager --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEnhancedTrackingPreventionEnabled,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=1816 /prefetch:2 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccC:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +154100x80000000000000009031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:08.164{8223a6b9-135c-6902-0101-000000002b00}3492C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=1992,i,4808531080583271863,4240956299034664681,524288 --field-trial-handle=1824,i,16309926270948425934,13846169497689979656,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,msAggressiveCacheTrimming,msCustomDataPartition,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2NoTabForScreenShare,msWindowsTaskManager --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEnhancedTrackingPreventionEnabled,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:11 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccC:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +154100x80000000000000009032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:08.217{8223a6b9-135c-6902-0201-000000002b00}10584C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2328,i,2092152241967741418,7674121917277633664,524288 --field-trial-handle=1824,i,16309926270948425934,13846169497689979656,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,msAggressiveCacheTrimming,msCustomDataPartition,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2NoTabForScreenShare,msWindowsTaskManager --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEnhancedTrackingPreventionEnabled,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:13 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccC:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +22542200x80000000000000009033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:07.284{8223a6b9-1358-6902-f600-000000002b00}10944ecs.office.com0type: 5 ecs.office.trafficmanager.net;type: 5 dual-s-0005-office.config.skype.com;type: 5 ecs-office.s-0005.dual-s-msedge.net;type: 5 s-0005.dual-s-msedge.net;::ffff:52.123.129.14;::ffff:52.123.128.14;C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administrator +22542200x80000000000000009034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:07.540{8223a6b9-132e-6902-c800-000000002b00}9780oneclient.sfx.ms0type: 5 oneclient.sfx.ms.edgesuite.net;type: 5 a124.dscd.akamai.net;::ffff:23.219.155.161;::ffff:23.219.155.142;::ffff:23.219.155.165;::ffff:23.219.155.167;::ffff:23.219.155.173;::ffff:23.219.155.145;::ffff:23.219.155.150;::ffff:23.219.155.175;::ffff:23.219.155.190;C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +354300x80000000000000009035Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:07.301{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49763-false13.107.246.41-443https +354300x80000000000000009036Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:07.312{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49764-false52.123.129.14-443https +154100x80000000000000009037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:08.352{8223a6b9-135c-6902-0301-000000002b00}11304C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--expose-gc --ms-user-locale=" --time-ticks-at-unix-epoch=-1761743627040776 --launch-time-ticks=81308103 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=3552,i,759199376643787333,3766257765722339035,2097152 --field-trial-handle=1824,i,16309926270948425934,13846169497689979656,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,msAggressiveCacheTrimming,msCustomDataPartition,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2NoTabForScreenShare,msWindowsTaskManager --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEnhancedTrackingPreventionEnabled,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=3556 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0cc /prefetch:1C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +13241300x80000000000000009038Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:08.518{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009039Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:08.518{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +354300x80000000000000009040Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:07.439{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49765-false162.159.142.9-80http +22542200x80000000000000009041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:07.693{8223a6b9-1358-6902-f600-000000002b00}10944oneclient.sfx.ms0type: 5 oneclient.sfx.ms.edgesuite.net;type: 5 a124.dscd.akamai.net;::ffff:23.219.155.161;::ffff:23.219.155.142;::ffff:23.219.155.165;::ffff:23.219.155.167;::ffff:23.219.155.173;::ffff:23.219.155.145;::ffff:23.219.155.150;::ffff:23.219.155.175;::ffff:23.219.155.190;C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administrator +354300x80000000000000009042Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:07.796{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49768-false23.219.155.161a23-219-155-161.deploy.static.akamaitechnologies.com443https +154100x80000000000000009043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:10.414{8223a6b9-135e-6902-0401-000000002b00}11568C:\Windows\SysWOW64\runonce.exe10.0.26100.4768 (WinBuild.160101.0800)Run Once WrapperMicrosoft® Windows® Operating SystemMicrosoft CorporationRUNONCE.EXEC:\WINDOWS\SysWOW64\runonce.exe /Run6432C:\WINDOWS\SysWOW64\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=39CD48EC90F64CEEBFAF6B4CADAA2262,SHA256=B186B24BA13C6AF6E7BE223619F8963C510B8186DBE4DA86A4A48BCC83761A81,IMPHASH=D1BB3974605EE6C09496D9A6FB3D049E{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x80000000000000009044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:10.642{8223a6b9-135e-6902-0501-000000002b00}11608C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe2.8.431.10Java Update SchedulerJava Platform SE Auto UpdaterOracle Corporationjusched.exe"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" C:\WINDOWS\SysWOW64\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=3C9463E5EEC8D543EF15D967C933D040,SHA256=0D139F5D4EDEA457AD830186D14076A3A7F5A375BB7DBBA763D23F710FA827A8,IMPHASH=5D2536415681E3CE77F7B79596BEAC0D{8223a6b9-135e-6902-0401-000000002b00}11568C:\Windows\SysWOW64\runonce.exeC:\WINDOWS\SysWOW64\runonce.exe /Run6432soc101win11\Administrator +154100x80000000000000009045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:11.049{8223a6b9-135f-6902-0601-000000002b00}11632C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe-----"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" C:\Users\Administrator\AppData\Local\Programs\Ollama\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=FBAECDD9C03F463D316119BD776501E8,SHA256=10EE87D9C889E41B4226D6C7902C014DA745291DD96FA37A6F0915A2A62EFDB2,IMPHASH=381F0D9D17ED9707D58FDC0AC52A26E7{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +354300x80000000000000009046Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:09.712{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49771-false20.189.173.27-443https +534500x80000000000000009047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:11.556{8223a6b9-1359-6902-f700-000000002b00}728C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\FileCoAuth.exesoc101win11\Administrator +154100x80000000000000009048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:11.680{8223a6b9-135f-6902-0801-000000002b00}11760C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +22542200x80000000000000009049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:11.248{8223a6b9-135f-6902-0601-000000002b00}11632ollama.com0::ffff:34.36.133.15;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +154100x80000000000000009050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:12.202{8223a6b9-1360-6902-0901-000000002b00}11808C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Users\Administrator\AppData\Local\Ollama\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=AE8E14CF44F2D7A12B97EF4E54C4FBEF,SHA256=CB34C3137927BAFB17342B4F79F90332804A8C9FFEAF7058E0B4B40737A6D3FC,IMPHASH=5DAC5D4CADE852AD7594BAB358401F19{8223a6b9-135f-6902-0601-000000002b00}11632C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" soc101win11\Administrator +11241100x80000000000000009051Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:12.462{8223a6b9-1356-6902-f400-000000002b00}5692C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeC:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.205.9\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exe2025-10-29 13:15:12.460NT AUTHORITY\SYSTEM +354300x80000000000000009052Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:11.294{8223a6b9-135f-6902-0601-000000002b00}11632C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49785-false34.36.133.15-443https +13241300x80000000000000009053Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:13.234{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dataexchangehost|a7eea8ca9cc3eb5a\LowerCaseLongPathc:\windows\system32\dataexchangehost.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009054Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:13.234{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dataexchangehost|a7eea8ca9cc3eb5a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009055Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:13.234{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dataexchangehost|a7eea8ca9cc3eb5a\LinkDate04/16/2065 18:45:08NT AUTHORITY\SYSTEM +13241300x80000000000000009056Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:13.234{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dataexchangehost|a7eea8ca9cc3eb5a\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +154100x80000000000000009057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:13.247{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exe1.3.205.9Microsoft Edge Update SetupMicrosoft Edge UpdateMicrosoft CorporationMicrosoftEdgeUpdateSetup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exe" /update /sessionid "{5AE6621B-519F-4927-8A81-D8AAEA2C2B8B}"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.199.11\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=2376CC33F4311F249615A3821C7790CD,SHA256=367FC3648EE66E9171B34CE96EB4F3A474A69442328BC95910FCC2BE37D47305,IMPHASH=7899CB8BA886A0690BDC28D8B481BBD1{8223a6b9-1356-6902-f400-000000002b00}5692C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcNT AUTHORITY\SYSTEM +154100x80000000000000009058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:13.355{8223a6b9-1361-6902-0c01-000000002b00}11964C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTkuMTEiIHNoZWxsX3ZlcnNpb249IjEuMy4xODUuMjciIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NUFFNjYyMUItNTE5Ri00OTI3LThBODEtRDhBQUVBMkMyQjhCfSIgdXNlcmlkPSJ7QTJDNUU4Q0UtNzk1Qi00NDdGLThCRkYtOEJCNEYwNkFCNUI1fSIgaW5zdGFsbHNvdXJjZT0iY29yZSIgcmVxdWVzdGlkPSJ7OTM2MDA5QTMtMDgyMS00NERGLTg1NzItOEY3Mjk4MkZEQzNFfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjQiIHBoeXNtZW1vcnk9IjIwIiBkaXNrX3R5cGU9IjIiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjYxMDAuNDk0NiIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjE2MiIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iVk13YXJlLCBJbmMuIiBwcm9kdWN0X25hbWU9IlZNd2FyZTIwLDEiLz48ZXhwIGV0YWc9IiZxdW90O2hVcDV6L1RVM0NiMy9vcUR4NXNPaG9lSUFjemdlcVF0MnIvUzJHakVLaG89JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xOTkuMTEiIG5leHR2ZXJzaW9uPSIxLjMuMjA1LjkiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIzNTEiIGNvaG9ydD0icnJmQDAuNzYiPjx1cGRhdGVjaGVjay8-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-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9Ijg2MDYzNTUwMyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxwaW5nIHI9IjQxIiByZD0iNjgzNSIgcGluZ19mcmVzaG5lc3M9InsyNUIwOTdBRS1DMkU3LTRBOTQtQkNFQy0yQjRBMzc1OUQzMDZ9Ii8-PC9hcHA-PGFwcCBhcHBpZD0iezU2RUIxOEY4LUIwMDgtNENCRC1CNkQyLThDOTdGRTdFOTA2Mn0iIHZlcnNpb249IjE0MC4wLjM0ODUuNjYiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iMzUxIiBjb2hvcnQ9InJyZkAwLjMxIiBvb2JlX2luc3RhbGxfdGltZT0iMTMzNzU4MTM1NzczMjExMTcwIiB1cGRhdGVfY291bnQ9IjQiIGlzX3Bpbm5lZF9zeXN0ZW09InRydWUiIGxhc3RfbGF1bmNoX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzQwMjcwMTM4NTI0NDAzMTAiIGZpcnN0X2ZyZV9zZWVuX3RpbWU9IjEzNDAxMzgzNTQyODY0OTMxMCIgZmlyc3RfZnJlX3NlZW5fdmVyc2lvbj0iMTM5LjAuMzQwNS4xMjUiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSI0MSIgcj0iNDEiIGFkPSI2ODM1IiByZD0iNjgzNSIgcGluZ19mcmVzaG5lc3M9Ins0Q0YyNjU2Mi01NjY5LTQ4Q0QtOTlGOC04ODlCOUIzNEZDQkJ9Ii8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjE0MC4wLjM0ODUuNjYiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iMzUxIiBjb2hvcnQ9InJyZkAwLjU4IiB1cGRhdGVfY291bnQ9IjMiIGxhc3RfbGF1bmNoX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzQwMjcwNjcyODI1NzM5ODAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSI0MSIgcj0iNDEiIGFkPSI2ODM1IiByZD0iNjgzNSIgcGluZ19mcmVzaG5lc3M9Ins2QTA5NkNCRC0wQjQxLTQ1MEYtQjc5Ny1ERTA0NEEyQjAzQzF9Ii8-PC9hcHA-PC9yZXF1ZXN0PgC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.199.11\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1356-6902-f400-000000002b00}5692C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcNT AUTHORITY\SYSTEM +11241100x80000000000000009059Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:13.594{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe2025-10-29 13:15:13.594NT AUTHORITY\SYSTEM +11241100x80000000000000009060Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.596{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdate.dll2025-10-29 13:15:13.596NT AUTHORITY\SYSTEM +11241100x80000000000000009061Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:13.602{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdateBroker.exe2025-10-29 13:15:13.602NT AUTHORITY\SYSTEM +11241100x80000000000000009062Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:13.604{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdateOnDemand.exe2025-10-29 13:15:13.604NT AUTHORITY\SYSTEM +11241100x80000000000000009063Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:13.604{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe2025-10-29 13:15:13.604NT AUTHORITY\SYSTEM +11241100x80000000000000009064Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:13.606{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeComRegisterShellARM64.exe2025-10-29 13:15:13.606NT AUTHORITY\SYSTEM +11241100x80000000000000009065Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.608{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\psmachine.dll2025-10-29 13:15:13.608NT AUTHORITY\SYSTEM +11241100x80000000000000009066Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.610{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\psmachine_64.dll2025-10-29 13:15:13.610NT AUTHORITY\SYSTEM +11241100x80000000000000009067Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.614{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\psmachine_arm64.dll2025-10-29 13:15:13.614NT AUTHORITY\SYSTEM +11241100x80000000000000009068Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.616{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\psuser.dll2025-10-29 13:15:13.616NT AUTHORITY\SYSTEM +11241100x80000000000000009069Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.618{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\psuser_64.dll2025-10-29 13:15:13.618NT AUTHORITY\SYSTEM +11241100x80000000000000009070Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.620{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\psuser_arm64.dll2025-10-29 13:15:13.620NT AUTHORITY\SYSTEM +11241100x80000000000000009071Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:13.624{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdateCore.exe2025-10-29 13:15:13.624NT AUTHORITY\SYSTEM +11241100x80000000000000009072Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.626{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_am.dll2025-10-29 13:15:13.626NT AUTHORITY\SYSTEM +11241100x80000000000000009073Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.628{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ar.dll2025-10-29 13:15:13.628NT AUTHORITY\SYSTEM +11241100x80000000000000009074Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.630{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_bg.dll2025-10-29 13:15:13.630NT AUTHORITY\SYSTEM +11241100x80000000000000009075Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.632{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_bn.dll2025-10-29 13:15:13.632NT AUTHORITY\SYSTEM +11241100x80000000000000009076Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.634{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ca.dll2025-10-29 13:15:13.634NT AUTHORITY\SYSTEM +11241100x80000000000000009077Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.636{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_cs.dll2025-10-29 13:15:13.636NT AUTHORITY\SYSTEM +11241100x80000000000000009078Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.638{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_da.dll2025-10-29 13:15:13.636NT AUTHORITY\SYSTEM +11241100x80000000000000009079Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.640{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_de.dll2025-10-29 13:15:13.638NT AUTHORITY\SYSTEM +11241100x80000000000000009080Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.640{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_el.dll2025-10-29 13:15:13.640NT AUTHORITY\SYSTEM +11241100x80000000000000009081Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.642{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_en.dll2025-10-29 13:15:13.642NT AUTHORITY\SYSTEM +11241100x80000000000000009082Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.644{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_en-GB.dll2025-10-29 13:15:13.644NT AUTHORITY\SYSTEM +11241100x80000000000000009083Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.646{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_es.dll2025-10-29 13:15:13.646NT AUTHORITY\SYSTEM +11241100x80000000000000009084Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.647{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_es-419.dll2025-10-29 13:15:13.647NT AUTHORITY\SYSTEM +11241100x80000000000000009085Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.651{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_et.dll2025-10-29 13:15:13.649NT AUTHORITY\SYSTEM +11241100x80000000000000009086Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.651{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_fa.dll2025-10-29 13:15:13.651NT AUTHORITY\SYSTEM +11241100x80000000000000009087Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.653{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_fi.dll2025-10-29 13:15:13.653NT AUTHORITY\SYSTEM +11241100x80000000000000009088Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.656{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_fil.dll2025-10-29 13:15:13.656NT AUTHORITY\SYSTEM +11241100x80000000000000009089Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.658{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_fr.dll2025-10-29 13:15:13.658NT AUTHORITY\SYSTEM +11241100x80000000000000009090Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.660{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_gu.dll2025-10-29 13:15:13.660NT AUTHORITY\SYSTEM +11241100x80000000000000009091Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.660{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_hi.dll2025-10-29 13:15:13.660NT AUTHORITY\SYSTEM +11241100x80000000000000009092Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.662{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_hr.dll2025-10-29 13:15:13.662NT AUTHORITY\SYSTEM +11241100x80000000000000009093Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.665{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_hu.dll2025-10-29 13:15:13.665NT AUTHORITY\SYSTEM +11241100x80000000000000009094Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.669{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_id.dll2025-10-29 13:15:13.667NT AUTHORITY\SYSTEM +11241100x80000000000000009095Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.671{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_is.dll2025-10-29 13:15:13.671NT AUTHORITY\SYSTEM +11241100x80000000000000009096Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.671{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_it.dll2025-10-29 13:15:13.671NT AUTHORITY\SYSTEM +11241100x80000000000000009097Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.673{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_iw.dll2025-10-29 13:15:13.673NT AUTHORITY\SYSTEM +11241100x80000000000000009098Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.675{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ja.dll2025-10-29 13:15:13.675NT AUTHORITY\SYSTEM +11241100x80000000000000009099Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.677{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_kn.dll2025-10-29 13:15:13.677NT AUTHORITY\SYSTEM +11241100x80000000000000009100Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.677{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ko.dll2025-10-29 13:15:13.677NT AUTHORITY\SYSTEM +11241100x80000000000000009101Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.681{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_lt.dll2025-10-29 13:15:13.679NT AUTHORITY\SYSTEM +11241100x80000000000000009102Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.681{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_lv.dll2025-10-29 13:15:13.681NT AUTHORITY\SYSTEM +11241100x80000000000000009103Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.683{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ml.dll2025-10-29 13:15:13.683NT AUTHORITY\SYSTEM +11241100x80000000000000009104Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.687{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_mr.dll2025-10-29 13:15:13.685NT AUTHORITY\SYSTEM +11241100x80000000000000009105Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.689{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ms.dll2025-10-29 13:15:13.689NT AUTHORITY\SYSTEM +11241100x80000000000000009106Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.691{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_nb.dll2025-10-29 13:15:13.691NT AUTHORITY\SYSTEM +11241100x80000000000000009107Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.694{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_nl.dll2025-10-29 13:15:13.694NT AUTHORITY\SYSTEM +11241100x80000000000000009108Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.695{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_pl.dll2025-10-29 13:15:13.695NT AUTHORITY\SYSTEM +11241100x80000000000000009109Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.697{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_pt-BR.dll2025-10-29 13:15:13.697NT AUTHORITY\SYSTEM +11241100x80000000000000009110Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.699{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_pt-PT.dll2025-10-29 13:15:13.699NT AUTHORITY\SYSTEM +11241100x80000000000000009111Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.701{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ro.dll2025-10-29 13:15:13.701NT AUTHORITY\SYSTEM +11241100x80000000000000009112Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.703{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ru.dll2025-10-29 13:15:13.703NT AUTHORITY\SYSTEM +11241100x80000000000000009113Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.705{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_sk.dll2025-10-29 13:15:13.705NT AUTHORITY\SYSTEM +11241100x80000000000000009114Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.708{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_sl.dll2025-10-29 13:15:13.708NT AUTHORITY\SYSTEM +11241100x80000000000000009115Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.711{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_sr.dll2025-10-29 13:15:13.710NT AUTHORITY\SYSTEM +11241100x80000000000000009116Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.713{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_sv.dll2025-10-29 13:15:13.711NT AUTHORITY\SYSTEM +11241100x80000000000000009117Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.715{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ta.dll2025-10-29 13:15:13.715NT AUTHORITY\SYSTEM +11241100x80000000000000009118Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.717{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_te.dll2025-10-29 13:15:13.717NT AUTHORITY\SYSTEM +11241100x80000000000000009119Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.719{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_th.dll2025-10-29 13:15:13.719NT AUTHORITY\SYSTEM +11241100x80000000000000009120Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.721{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_tr.dll2025-10-29 13:15:13.719NT AUTHORITY\SYSTEM +11241100x80000000000000009121Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.721{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_uk.dll2025-10-29 13:15:13.721NT AUTHORITY\SYSTEM +11241100x80000000000000009122Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.723{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ur.dll2025-10-29 13:15:13.723NT AUTHORITY\SYSTEM +11241100x80000000000000009123Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.725{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_vi.dll2025-10-29 13:15:13.725NT AUTHORITY\SYSTEM +11241100x80000000000000009124Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.727{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_zh-CN.dll2025-10-29 13:15:13.727NT AUTHORITY\SYSTEM +11241100x80000000000000009125Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.729{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_zh-TW.dll2025-10-29 13:15:13.729NT AUTHORITY\SYSTEM +11241100x80000000000000009126Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.731{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_af.dll2025-10-29 13:15:13.729NT AUTHORITY\SYSTEM +11241100x80000000000000009127Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.731{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_as.dll2025-10-29 13:15:13.731NT AUTHORITY\SYSTEM +11241100x80000000000000009128Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.733{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_az.dll2025-10-29 13:15:13.733NT AUTHORITY\SYSTEM +11241100x80000000000000009129Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.735{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_bn-IN.dll2025-10-29 13:15:13.735NT AUTHORITY\SYSTEM +11241100x80000000000000009130Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.737{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_bs.dll2025-10-29 13:15:13.735NT AUTHORITY\SYSTEM +11241100x80000000000000009131Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.737{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ca-Es-VALENCIA.dll2025-10-29 13:15:13.737NT AUTHORITY\SYSTEM +11241100x80000000000000009132Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.739{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_cy.dll2025-10-29 13:15:13.739NT AUTHORITY\SYSTEM +11241100x80000000000000009133Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.741{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_eu.dll2025-10-29 13:15:13.741NT AUTHORITY\SYSTEM +11241100x80000000000000009134Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.743{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_fr-CA.dll2025-10-29 13:15:13.743NT AUTHORITY\SYSTEM +11241100x80000000000000009135Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.745{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ga.dll2025-10-29 13:15:13.745NT AUTHORITY\SYSTEM +11241100x80000000000000009136Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.747{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_gd.dll2025-10-29 13:15:13.747NT AUTHORITY\SYSTEM +11241100x80000000000000009137Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.749{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_gl.dll2025-10-29 13:15:13.749NT AUTHORITY\SYSTEM +11241100x80000000000000009138Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.749{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ka.dll2025-10-29 13:15:13.749NT AUTHORITY\SYSTEM +11241100x80000000000000009139Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.751{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_kk.dll2025-10-29 13:15:13.751NT AUTHORITY\SYSTEM +11241100x80000000000000009140Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.753{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_km.dll2025-10-29 13:15:13.753NT AUTHORITY\SYSTEM +11241100x80000000000000009141Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.755{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_kok.dll2025-10-29 13:15:13.755NT AUTHORITY\SYSTEM +11241100x80000000000000009142Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.759{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_lb.dll2025-10-29 13:15:13.757NT AUTHORITY\SYSTEM +11241100x80000000000000009143Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.761{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_lo.dll2025-10-29 13:15:13.759NT AUTHORITY\SYSTEM +11241100x80000000000000009144Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.763{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_mi.dll2025-10-29 13:15:13.763NT AUTHORITY\SYSTEM +11241100x80000000000000009145Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.765{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_mk.dll2025-10-29 13:15:13.765NT AUTHORITY\SYSTEM +11241100x80000000000000009146Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.767{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_mt.dll2025-10-29 13:15:13.767NT AUTHORITY\SYSTEM +11241100x80000000000000009147Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.769{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ne.dll2025-10-29 13:15:13.769NT AUTHORITY\SYSTEM +11241100x80000000000000009148Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.769{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_nn.dll2025-10-29 13:15:13.769NT AUTHORITY\SYSTEM +11241100x80000000000000009149Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.771{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_or.dll2025-10-29 13:15:13.771NT AUTHORITY\SYSTEM +11241100x80000000000000009150Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.773{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_pa.dll2025-10-29 13:15:13.773NT AUTHORITY\SYSTEM +11241100x80000000000000009151Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.775{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_quz.dll2025-10-29 13:15:13.775NT AUTHORITY\SYSTEM +11241100x80000000000000009152Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.777{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_sq.dll2025-10-29 13:15:13.777NT AUTHORITY\SYSTEM +11241100x80000000000000009153Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.779{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_sr-Cyrl-BA.dll2025-10-29 13:15:13.779NT AUTHORITY\SYSTEM +11241100x80000000000000009154Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.781{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_sr-Cyrl-RS.dll2025-10-29 13:15:13.781NT AUTHORITY\SYSTEM +11241100x80000000000000009155Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.785{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_sr-Latn-RS.dll2025-10-29 13:15:13.783NT AUTHORITY\SYSTEM +11241100x80000000000000009156Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.785{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_tt.dll2025-10-29 13:15:13.785NT AUTHORITY\SYSTEM +11241100x80000000000000009157Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:13.789{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\msedgeupdateres_ug.dll2025-10-29 13:15:13.787NT AUTHORITY\SYSTEM +11241100x80000000000000009158Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:13.793{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exeC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdateSetup.exe2025-10-29 13:15:13.793NT AUTHORITY\SYSTEM +154100x80000000000000009159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:13.857{8223a6b9-1361-6902-0d01-000000002b00}12036C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe1.3.205.9Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{5AE6621B-519F-4927-8A81-D8AAEA2C2B8B}"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.199.11\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5F05B17D22A78436FACD57719D38DC5D,SHA256=9A41AD630CC919A742CF0B764D0E34EA9BB8558D1FA803A0E5DFFF00C4E8410B,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1361-6902-0b01-000000002b00}11940C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{99822E8A-05C1-4F8F-9726-C228B86D2F1C}\MicrosoftEdgeUpdateSetup_X86_1.3.205.9.exe" /update /sessionid "{5AE6621B-519F-4927-8A81-D8AAEA2C2B8B}"NT AUTHORITY\SYSTEM +13241300x80000000000000009160Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:14.443{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|9134d7ae24cae7a1\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\install\{99822e8a-05c1-4f8f-9726-c228b86d2f1c}\microsoftedgeupdatesetup_x86_1.3.205.9.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009161Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:14.443{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|9134d7ae24cae7a1\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009162Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:14.443{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|9134d7ae24cae7a1\LinkDate10/20/2025 17:59:17NT AUTHORITY\SYSTEM +13241300x80000000000000009163Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:14.443{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|9134d7ae24cae7a1\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +13241300x80000000000000009164Microsoft-Windows-Sysmon/Operationalsoc101win11T1183,IFEOSetValue2025-10-29 13:15:14.749{8223a6b9-1361-6902-0d01-000000002b00}12036C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidationDWORD (0x00000000)NT AUTHORITY\SYSTEM +154100x80000000000000009165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:14.780{8223a6b9-1362-6902-0e01-000000002b00}12076C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvcC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1361-6902-0d01-000000002b00}12036C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{5AE6621B-519F-4927-8A81-D8AAEA2C2B8B}"NT AUTHORITY\SYSTEM +154100x80000000000000009166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:15.337{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserverC:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1361-6902-0d01-000000002b00}12036C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{5AE6621B-519F-4927-8A81-D8AAEA2C2B8B}"NT AUTHORITY\SYSTEM +154100x80000000000000009167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:15.588{8223a6b9-1363-6902-1001-000000002b00}12148C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exe1.3.205.9Microsoft Edge Update COM Registration HelperMicrosoft Edge UpdateMicrosoft CorporationMicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=2F395730E8B4B3699A82E363A5DC6DAB,SHA256=15FB17B738E1A1F8F5020D36D54C04EE5E6CC0C1F491DB8389BBA88CE2A5BB92,IMPHASH=9AF6910BC05E23C793BC38F5603DF9F1{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserverNT AUTHORITY\SYSTEM +13241300x80000000000000009168Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:15.781{8223a6b9-1363-6902-1001-000000002b00}12148C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009169Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:15.781{8223a6b9-1363-6902-1001-000000002b00}12148C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009170Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:15.781{8223a6b9-1363-6902-1001-000000002b00}12148C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{7808D8CD-FEB3-4EA0-88FE-FC6909634FC2}\InProcServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009171Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:15.953{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009172Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:15.956{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009173Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:15.956{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{7808D8CD-FEB3-4EA0-88FE-FC6909634FC2}\InProcServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +154100x80000000000000009174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:15.968{8223a6b9-1363-6902-1101-000000002b00}12172C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exe1.3.205.9Microsoft Edge Update COM Registration HelperMicrosoft Edge UpdateMicrosoft CorporationMicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=2F395730E8B4B3699A82E363A5DC6DAB,SHA256=15FB17B738E1A1F8F5020D36D54C04EE5E6CC0C1F491DB8389BBA88CE2A5BB92,IMPHASH=9AF6910BC05E23C793BC38F5603DF9F1{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserverNT AUTHORITY\SYSTEM +13241300x80000000000000009175Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:16.079{8223a6b9-1363-6902-1101-000000002b00}12172C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009176Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:16.079{8223a6b9-1363-6902-1101-000000002b00}12172C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009177Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:16.079{8223a6b9-1363-6902-1101-000000002b00}12172C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{7808D8CD-FEB3-4EA0-88FE-FC6909634FC2}\InProcServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009178Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:16.407{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009179Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:16.732{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009180Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:16.882{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{7808D8CD-FEB3-4EA0-88FE-FC6909634FC2}\InProcServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +22542200x80000000000000009181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:15.461{8223a6b9-135c-6902-0101-000000002b00}3492wpad1460-C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +22542200x80000000000000009182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:15.901{8223a6b9-135f-6902-0601-000000002b00}11632github.com0::ffff:140.82.114.3;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +154100x80000000000000009183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:17.315{8223a6b9-1365-6902-1201-000000002b00}12200C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exe1.3.205.9Microsoft Edge Update COM Registration HelperMicrosoft Edge UpdateMicrosoft CorporationMicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=2F395730E8B4B3699A82E363A5DC6DAB,SHA256=15FB17B738E1A1F8F5020D36D54C04EE5E6CC0C1F491DB8389BBA88CE2A5BB92,IMPHASH=9AF6910BC05E23C793BC38F5603DF9F1{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserverNT AUTHORITY\SYSTEM +13241300x80000000000000009184Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:17.421{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|585925c6db26e948\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\1.3.205.9\microsoftedgeupdatecomregistershell64.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009185Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:17.421{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|585925c6db26e948\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009186Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:17.421{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|585925c6db26e948\LinkDate10/20/2025 17:57:04NT AUTHORITY\SYSTEM +13241300x80000000000000009187Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:17.421{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|585925c6db26e948\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +354300x80000000000000009188Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:16.029{8223a6b9-135f-6902-0601-000000002b00}11632C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49798-false140.82.114.3lb-140-82-114-3-iad.github.com443https +154100x80000000000000009189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:17.504{8223a6b9-1365-6902-1301-000000002b00}12224C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe $(Arg0)C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +13241300x80000000000000009190Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:17.756{8223a6b9-1365-6902-1201-000000002b00}12200C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009191Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:17.756{8223a6b9-1365-6902-1201-000000002b00}12200C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009192Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:17.756{8223a6b9-1365-6902-1201-000000002b00}12200C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\MicrosoftEdgeUpdateComRegisterShell64.exeHKCR\CLSID\{7808D8CD-FEB3-4EA0-88FE-FC6909634FC2}\InProcServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009193Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:17.804{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009194Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:17.806{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009195Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:17.806{8223a6b9-1363-6902-0f01-000000002b00}12124C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeHKCR\WOW6432Node\CLSID\{7808D8CD-FEB3-4EA0-88FE-FC6909634FC2}\InProcServer32\(Default)C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\psmachine.dllNT AUTHORITY\SYSTEM +154100x80000000000000009196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:18.476{8223a6b9-1366-6902-1401-000000002b00}7244C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4yMDUuOSIgc2hlbGxfdmVyc2lvbj0iMS4zLjE4NS4yNyIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9Ins1QUU2NjIxQi01MTlGLTQ5MjctOEE4MS1EOEFBRUEyQzJCOEJ9IiB1c2VyaWQ9IntBMkM1RThDRS03OTVCLTQ0N0YtOEJGRi04QkI0RjA2QUI1QjV9IiBpbnN0YWxsc291cmNlPSJzZWxmdXBkYXRlIiByZXF1ZXN0aWQ9InsyNTY4NEEzMC0yMzhELTQ3MEQtOURDQy04MzUwNzlFQ0Q5QzJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-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-C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1361-6902-0d01-000000002b00}12036C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\Temp\EU50DA.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{5AE6621B-519F-4927-8A81-D8AAEA2C2B8B}"NT AUTHORITY\SYSTEM +354300x80000000000000009197Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:17.671{8223a6b9-135f-6902-0601-000000002b00}11632C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49799-false185.199.108.133-443https +22542200x80000000000000009198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:17.588{8223a6b9-135f-6902-0601-000000002b00}11632release-assets.githubusercontent.com0::ffff:185.199.108.133;::ffff:185.199.109.133;::ffff:185.199.111.133;::ffff:185.199.110.133;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +22542200x80000000000000009199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:25.108{8223a6b9-135c-6902-0101-000000002b00}3492res.public.onecdn.static.microsoft1460-C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +11241100x80000000000000009200Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:25.702{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe2025-10-29 13:15:25.702soc101win11\Administrator +22542200x80000000000000009201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:25.156{8223a6b9-135c-6902-0101-000000002b00}3492portal.office.com1460-C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +22542200x80000000000000009202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:25.156{8223a6b9-135c-6902-0101-000000002b00}3492outlook.office.com1460-C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +154100x80000000000000009203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:29.396{8223a6b9-1371-6902-1501-000000002b00}11832C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe25.189.0928.0002Microsoft OneDrive (64 bit) SetupMicrosoft OneDriveMicrosoft CorporationOneDriveSetup.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" /update /restart /updateSource:ODU C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=53B18DFEF72D5EA11038FE17165C6EB4,SHA256=33457526F3275E838638342C106E875B987C5968C6FE0F60873F5556B29CA2CA,IMPHASH=F17F9C2316EA64278FDE2D0FD2FBC657{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /backgroundsoc101win11\Administrator +154100x80000000000000009204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:29.735{8223a6b9-1371-6902-1601-000000002b00}11820C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +12241200x80000000000000009205Microsoft-Windows-Sysmon/Operationalsoc101win11InvDBDeleteValue2025-10-29 13:15:29.804{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009206Microsoft-Windows-Sysmon/Operationalsoc101win11InvDBSetValue2025-10-29 13:15:29.814{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeBinary DataNT AUTHORITY\SYSTEM +154100x80000000000000009207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:30.998{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe25.189.0928.0002Microsoft OneDrive (64 bit) SetupMicrosoft OneDriveMicrosoft CorporationOneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /updateSource:ODU /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode /installWebView2 /SetPerProcessSystemDPIForceOffKey /EnableNucleusAutoStartFix /RegisterOneDriveLauncherAutoStartTask /EnableOneDriveLauncherRampDownloads /EnableDeltaBuildToTelemetryFeatureSet /ReLaunchOD4AppHarness /ArgPerformNucleusLocalAccessRepair /PerformEdgeNucleusRepair /PerformChromeNucleusRepairC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=53B18DFEF72D5EA11038FE17165C6EB4,SHA256=33457526F3275E838638342C106E875B987C5968C6FE0F60873F5556B29CA2CA,IMPHASH=F17F9C2316EA64278FDE2D0FD2FBC657{8223a6b9-1371-6902-1501-000000002b00}11832C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" /update /restart /updateSource:ODU soc101win11\Administrator +22542200x80000000000000009208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:30.404{8223a6b9-1371-6902-1501-000000002b00}11832ecs.office.com0type: 5 ecs.office.trafficmanager.net;type: 5 dual-s-0005-office.config.skype.com;type: 5 ecs-office.s-0005.dual-s-msedge.net;type: 5 s-0005.dual-s-msedge.net;::ffff:52.123.128.14;::ffff:52.123.129.14;C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exesoc101win11\Administrator +354300x80000000000000009209Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:30.475{8223a6b9-1371-6902-1501-000000002b00}11832C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49806-false52.123.128.14-443https +13241300x80000000000000009210Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:31.991{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|d3f263bd663e4335\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\update\onedrivesetup.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009211Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:31.991{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|d3f263bd663e4335\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009212Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:31.991{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|d3f263bd663e4335\LinkDate11/28/2034 23:04:51NT AUTHORITY\SYSTEM +13241300x80000000000000009213Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:31.991{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|d3f263bd663e4335\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +11241100x80000000000000009214Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.281{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\adal.dll2025-10-29 13:15:32.279soc101win11\Administrator +22542200x80000000000000009215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:30.486{8223a6b9-135c-6902-0101-000000002b00}3492res.public.onecdn.static.microsoft0type: 5 res-ocdi-public.trafficmanager.net;type: 5 res-1.public.onecdn.static.microsoft;type: 5 res-ocdi-stls-prod.edgesuite.net;type: 5 a434.dscd.akamai.net;23.219.155.169;23.219.155.181;23.219.155.177;23.219.155.159;23.219.155.162;23.219.155.183;23.219.155.179;23.219.155.173;23.219.155.165;C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +11241100x80000000000000009216Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.455{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-console-l1-1-0.dll2025-10-29 13:15:32.453soc101win11\Administrator +11241100x80000000000000009217Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.457{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-console-l1-2-0.dll2025-10-29 13:15:32.457soc101win11\Administrator +11241100x80000000000000009218Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.460{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-datetime-l1-1-0.dll2025-10-29 13:15:32.460soc101win11\Administrator +11241100x80000000000000009219Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.466{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-debug-l1-1-0.dll2025-10-29 13:15:32.465soc101win11\Administrator +11241100x80000000000000009220Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.468{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-errorhandling-l1-1-0.dll2025-10-29 13:15:32.468soc101win11\Administrator +11241100x80000000000000009221Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.472{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-fibers-l1-1-0.dll2025-10-29 13:15:32.472soc101win11\Administrator +11241100x80000000000000009222Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.474{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-file-l1-1-0.dll2025-10-29 13:15:32.474soc101win11\Administrator +11241100x80000000000000009223Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.478{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-file-l1-2-0.dll2025-10-29 13:15:32.478soc101win11\Administrator +11241100x80000000000000009224Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.483{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-file-l2-1-0.dll2025-10-29 13:15:32.481soc101win11\Administrator +11241100x80000000000000009225Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.485{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-handle-l1-1-0.dll2025-10-29 13:15:32.485soc101win11\Administrator +154100x80000000000000009226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:32.483{8223a6b9-1374-6902-1901-000000002b00}6952C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe1407.2506.11012.0Windows UpdateMicrosoft® Windows® Operating SystemMicrosoft Corporationwuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 5b07b36c-3860-4cc9-bef4-a699ac1018cf /RunHandlerComServerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=EA98A3ECEF7902605B361FC16D3D8081,SHA256=9C685412986F3939E7A84E62B09E319F4FA5B5C2B7006DE3441F6D4BB0CAC02D,IMPHASH=5FB5459A8931EA77DFAA79FC37CD9756{8223a6b9-1317-6902-3f00-000000002b00}3008C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauservNT AUTHORITY\SYSTEM +11241100x80000000000000009227Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.488{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-heap-l1-1-0.dll2025-10-29 13:15:32.488soc101win11\Administrator +11241100x80000000000000009228Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.491{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-interlocked-l1-1-0.dll2025-10-29 13:15:32.491soc101win11\Administrator +11241100x80000000000000009229Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.496{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-libraryloader-l1-1-0.dll2025-10-29 13:15:32.495soc101win11\Administrator +11241100x80000000000000009230Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.500{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-localization-l1-2-0.dll2025-10-29 13:15:32.500soc101win11\Administrator +11241100x80000000000000009231Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.505{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-memory-l1-1-0.dll2025-10-29 13:15:32.503soc101win11\Administrator +11241100x80000000000000009232Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.510{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-namedpipe-l1-1-0.dll2025-10-29 13:15:32.510soc101win11\Administrator +11241100x80000000000000009233Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.514{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-processenvironment-l1-1-0.dll2025-10-29 13:15:32.514soc101win11\Administrator +11241100x80000000000000009234Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.518{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-processthreads-l1-1-0.dll2025-10-29 13:15:32.518soc101win11\Administrator +11241100x80000000000000009235Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.521{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-processthreads-l1-1-1.dll2025-10-29 13:15:32.521soc101win11\Administrator +11241100x80000000000000009236Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.527{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-profile-l1-1-0.dll2025-10-29 13:15:32.524soc101win11\Administrator +11241100x80000000000000009237Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.533{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-rtlsupport-l1-1-0.dll2025-10-29 13:15:32.530soc101win11\Administrator +11241100x80000000000000009238Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.535{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-string-l1-1-0.dll2025-10-29 13:15:32.535soc101win11\Administrator +11241100x80000000000000009239Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.539{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-synch-l1-1-0.dll2025-10-29 13:15:32.539soc101win11\Administrator +11241100x80000000000000009240Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.544{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-synch-l1-2-0.dll2025-10-29 13:15:32.543soc101win11\Administrator +11241100x80000000000000009241Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.549{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-sysinfo-l1-1-0.dll2025-10-29 13:15:32.549soc101win11\Administrator +11241100x80000000000000009242Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.553{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-timezone-l1-1-0.dll2025-10-29 13:15:32.551soc101win11\Administrator +11241100x80000000000000009243Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:32.553{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\Install\AM_Engine_Patch_1.1.25080.5.exe2025-10-29 13:15:32.553NT AUTHORITY\SYSTEM +11241100x80000000000000009244Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.556{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-core-util-l1-1-0.dll2025-10-29 13:15:32.555soc101win11\Administrator +11241100x80000000000000009245Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.570{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-conio-l1-1-0.dll2025-10-29 13:15:32.569soc101win11\Administrator +11241100x80000000000000009246Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.573{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-convert-l1-1-0.dll2025-10-29 13:15:32.573soc101win11\Administrator +11241100x80000000000000009247Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.575{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-environment-l1-1-0.dll2025-10-29 13:15:32.575soc101win11\Administrator +11241100x80000000000000009248Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.579{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-filesystem-l1-1-0.dll2025-10-29 13:15:32.577soc101win11\Administrator +11241100x80000000000000009249Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.581{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-heap-l1-1-0.dll2025-10-29 13:15:32.581soc101win11\Administrator +11241100x80000000000000009250Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.583{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-locale-l1-1-0.dll2025-10-29 13:15:32.583soc101win11\Administrator +11241100x80000000000000009251Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.585{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-math-l1-1-0.dll2025-10-29 13:15:32.585soc101win11\Administrator +11241100x80000000000000009252Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.587{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-multibyte-l1-1-0.dll2025-10-29 13:15:32.587soc101win11\Administrator +11241100x80000000000000009253Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.590{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-private-l1-1-0.dll2025-10-29 13:15:32.590soc101win11\Administrator +11241100x80000000000000009254Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.593{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-process-l1-1-0.dll2025-10-29 13:15:32.593soc101win11\Administrator +11241100x80000000000000009255Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.598{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-runtime-l1-1-0.dll2025-10-29 13:15:32.598soc101win11\Administrator +11241100x80000000000000009256Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.601{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-stdio-l1-1-0.dll2025-10-29 13:15:32.601soc101win11\Administrator +11241100x80000000000000009257Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.603{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-string-l1-1-0.dll2025-10-29 13:15:32.603soc101win11\Administrator +11241100x80000000000000009258Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.605{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-time-l1-1-0.dll2025-10-29 13:15:32.605soc101win11\Administrator +11241100x80000000000000009259Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.607{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\api-ms-win-crt-utility-l1-1-0.dll2025-10-29 13:15:32.607soc101win11\Administrator +11241100x80000000000000009260Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.635{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\CheckboxWindows.dll2025-10-29 13:15:32.635soc101win11\Administrator +11241100x80000000000000009261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:32.643{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\CollectSyncLogs.bat2025-10-29 13:15:32.643soc101win11\Administrator +11241100x80000000000000009262Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.651{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\concrt140.dll2025-10-29 13:15:32.651soc101win11\Administrator +11241100x80000000000000009263Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.660{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\concrt140_app.dll2025-10-29 13:15:32.660soc101win11\Administrator +11241100x80000000000000009264Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.674{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\ETWlog.dll2025-10-29 13:15:32.674soc101win11\Administrator +11241100x80000000000000009265Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:32.676{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exe2025-10-29 13:15:32.676soc101win11\Administrator +154100x80000000000000009266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:32.689{8223a6b9-1374-6902-1a01-000000002b00}7392C:\Windows\SoftwareDistribution\Download\Install\AM_Engine_Patch_1.1.25080.5.exe1.1.25090.3001AntiMalware Definition UpdateMicrosoft Malware ProtectionMicrosoft CorporationAM_Engine_Patch_1.1.25080.5.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Engine_Patch_1.1.25080.5.exe" C:\WINDOWS\SoftwareDistribution\Download\Install\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=2A37370C5C7FD3C8F00B0FB28DEAC89D,SHA256=52874F035D0D83FAC3409CBEE543B24A1B08F318384BAFFE7D53CADD73461B55,IMPHASH=52CEE9C1BC4BDA1F4F98A36E5EF61615{8223a6b9-1374-6902-1901-000000002b00}6952C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 5b07b36c-3860-4cc9-bef4-a699ac1018cf /RunHandlerComServerNT AUTHORITY\SYSTEM +11241100x80000000000000009267Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.722{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuthLib64.dll2025-10-29 13:15:32.720soc101win11\Administrator +11241100x80000000000000009268Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.732{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSync.LocalizedResources.dll2025-10-29 13:15:32.730soc101win11\Administrator +11241100x80000000000000009269Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.742{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSync.Resources.dll2025-10-29 13:15:32.742soc101win11\Administrator +11241100x80000000000000009270Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:32.805{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncClient.dll2025-10-29 13:15:32.805soc101win11\Administrator +154100x80000000000000009271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:32.816{8223a6b9-1374-6902-1b01-000000002b00}12188C:\Windows\System32\MpSigStub.exe1.1.24010.2001 (7122f19e8a45ed98fbe41ea0bdadf251e45717f9)Microsoft Malware Protection Signature Update StubMicrosoft Malware ProtectionMicrosoft CorporationMpSigStub.exeC:\WINDOWS\system32\MpSigStub.exe /stub 1.1.24010.2001 /payload 1.1.25090.3001 /MpWUStub /program C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Engine_Patch_1.1.25080.5.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=71CF589293424C4389202C7F1752FB2D,SHA256=071B0D3A08503A8B88AEEDA1D20F371A563377028F6E252DC66CCE60AB8F823E,IMPHASH=73D10F665B566678AC1DDF9942FDAEA0{8223a6b9-1374-6902-1901-000000002b00}6952C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 5b07b36c-3860-4cc9-bef4-a699ac1018cf /RunHandlerComServerNT AUTHORITY\SYSTEM +11241100x80000000000000009272Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:33.055{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncConfig.exe2025-10-29 13:15:33.053soc101win11\Administrator +11241100x80000000000000009273Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.075{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncCxP.dll2025-10-29 13:15:33.075soc101win11\Administrator +11241100x80000000000000009274Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.088{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncCxPImpl.dll2025-10-29 13:15:33.088soc101win11\Administrator +11241100x80000000000000009275Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.108{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncEvents.dll2025-10-29 13:15:33.107soc101win11\Administrator +11241100x80000000000000009276Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.114{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncFAL.dll2025-10-29 13:15:33.114soc101win11\Administrator +11241100x80000000000000009277Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.124{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncFALWB.dll2025-10-29 13:15:33.124soc101win11\Administrator +11241100x80000000000000009278Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.137{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncFS.dll2025-10-29 13:15:33.137soc101win11\Administrator +11241100x80000000000000009279Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.157{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncFSCache.dll2025-10-29 13:15:33.155soc101win11\Administrator +11241100x80000000000000009280Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.167{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncFSDbfs.dll2025-10-29 13:15:33.167soc101win11\Administrator +11241100x80000000000000009281Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.188{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncFSDbfsWB.dll2025-10-29 13:15:33.188soc101win11\Administrator +11241100x80000000000000009282Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.195{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncFSNtfs.dll2025-10-29 13:15:33.195soc101win11\Administrator +11241100x80000000000000009283Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.213{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncFSNtfsWB.dll2025-10-29 13:15:33.213soc101win11\Administrator +11241100x80000000000000009284Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:33.227{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncHelper.exe2025-10-29 13:15:33.227soc101win11\Administrator +11241100x80000000000000009285Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.301{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncHost.dll2025-10-29 13:15:33.301soc101win11\Administrator +11241100x80000000000000009286Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.313{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncRNWin32Lib.dll2025-10-29 13:15:33.313soc101win11\Administrator +11241100x80000000000000009287Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.323{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncSessions.dll2025-10-29 13:15:33.323soc101win11\Administrator +13241300x80000000000000009288Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:33.399{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\am_engine_patch_|e6a10fb4f251356a\LowerCaseLongPathc:\windows\softwaredistribution\download\install\am_engine_patch_1.1.25080.5.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009289Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:33.399{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\am_engine_patch_|e6a10fb4f251356a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009290Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:33.399{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\am_engine_patch_|e6a10fb4f251356a\LinkDate09/09/2025 23:27:27NT AUTHORITY\SYSTEM +13241300x80000000000000009291Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:33.399{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\am_engine_patch_|e6a10fb4f251356a\BinProductVersion1.1.25090.3001NT AUTHORITY\SYSTEM +11241100x80000000000000009292Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.451{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dll2025-10-29 13:15:33.451soc101win11\Administrator +11241100x80000000000000009293Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.485{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncSqlite3.dll2025-10-29 13:15:33.485soc101win11\Administrator +11241100x80000000000000009294Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.513{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncTelemetryExtensions.dll2025-10-29 13:15:33.513soc101win11\Administrator +11241100x80000000000000009295Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.529{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncViews.dll2025-10-29 13:15:33.529soc101win11\Administrator +11241100x80000000000000009296Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.596{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\hermes.dll2025-10-29 13:15:33.596soc101win11\Administrator +11241100x80000000000000009297Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.724{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\ipcfile.dll2025-10-29 13:15:33.724soc101win11\Administrator +11241100x80000000000000009298Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.744{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\ipcsecproc.dll2025-10-29 13:15:33.744soc101win11\Administrator +11241100x80000000000000009299Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.776{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libbz2-1.dll2025-10-29 13:15:33.776soc101win11\Administrator +11241100x80000000000000009300Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.782{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libcrypto-3-x64.dll2025-10-29 13:15:33.782soc101win11\Administrator +11241100x80000000000000009301Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.899{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libEGL.dll2025-10-29 13:15:33.899soc101win11\Administrator +11241100x80000000000000009302Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.901{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libffi-8.dll2025-10-29 13:15:33.901soc101win11\Administrator +11241100x80000000000000009303Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.905{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libgcc_s_seh-1.dll2025-10-29 13:15:33.905soc101win11\Administrator +11241100x80000000000000009304Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.915{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libgio-2.0-0.dll2025-10-29 13:15:33.913soc101win11\Administrator +11241100x80000000000000009305Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:33.979{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libGLESv2.dll2025-10-29 13:15:33.979soc101win11\Administrator +11241100x80000000000000009306Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.074{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libglib-2.0-0.dll2025-10-29 13:15:34.074soc101win11\Administrator +11241100x80000000000000009307Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:34.082{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\Install\AM_Base_Patch1.exe2025-10-29 13:15:34.082NT AUTHORITY\SYSTEM +11241100x80000000000000009308Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.110{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libgmodule-2.0-0.dll2025-10-29 13:15:34.110soc101win11\Administrator +11241100x80000000000000009309Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.114{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libgobject-2.0-0.dll2025-10-29 13:15:34.114soc101win11\Administrator +11241100x80000000000000009310Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.140{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libgsf-1-114.dll2025-10-29 13:15:34.140soc101win11\Administrator +11241100x80000000000000009311Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.182{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libiconv-2.dll2025-10-29 13:15:34.182soc101win11\Administrator +11241100x80000000000000009312Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.204{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libintl-8.dll2025-10-29 13:15:34.203soc101win11\Administrator +11241100x80000000000000009313Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.210{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\liblzma-5.dll2025-10-29 13:15:34.208soc101win11\Administrator +11241100x80000000000000009314Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.216{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libpcre2-8-0.dll2025-10-29 13:15:34.216soc101win11\Administrator +11241100x80000000000000009315Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.239{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libssl-3-x64.dll2025-10-29 13:15:34.239soc101win11\Administrator +11241100x80000000000000009316Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.291{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libwinpthread-1.dll2025-10-29 13:15:34.291soc101win11\Administrator +11241100x80000000000000009317Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.295{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\libxml2-2.dll2025-10-29 13:15:34.295soc101win11\Administrator +11241100x80000000000000009318Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.337{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\LoggingPlatform.dll2025-10-29 13:15:34.337soc101win11\Administrator +11241100x80000000000000009319Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.347{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\LogUploader.dll2025-10-29 13:15:34.347soc101win11\Administrator +11241100x80000000000000009320Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.433{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Microsoft.ReactNative.dll2025-10-29 13:15:34.431soc101win11\Administrator +11241100x80000000000000009321Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.514{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Microsoft.SharePoint.Calc.dll2025-10-29 13:15:34.514soc101win11\Administrator +11241100x80000000000000009322Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:34.532{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Microsoft.SharePoint.NativeMessagingClient.exe2025-10-29 13:15:34.532soc101win11\Administrator +11241100x80000000000000009323Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.534{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Microsoft.Toolkit.Win32.UI.XamlHost.dll2025-10-29 13:15:34.534soc101win11\Administrator +11241100x80000000000000009324Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.538{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Microsoft.UI.Xaml.dll2025-10-29 13:15:34.538soc101win11\Administrator +154100x80000000000000009325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:34.521{8223a6b9-1376-6902-1c01-000000002b00}7680C:\Windows\SoftwareDistribution\Download\Install\AM_Base_Patch1.exe1.439.0.0AntiMalware Definition UpdateMicrosoft Malware ProtectionMicrosoft CorporationAM_Base_Patch1.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Base_Patch1.exe" C:\WINDOWS\SoftwareDistribution\Download\Install\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=B4A1BA812F9B6EEEB382D078F7666F1D,SHA256=75C90EBDE68F663D12DE609217416057A7A4CD64C51FB50BA6B7DEFB62D63675,IMPHASH=52CEE9C1BC4BDA1F4F98A36E5EF61615{8223a6b9-1374-6902-1901-000000002b00}6952C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 5b07b36c-3860-4cc9-bef4-a699ac1018cf /RunHandlerComServerNT AUTHORITY\SYSTEM +11241100x80000000000000009326Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.807{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\minizip.dll2025-10-29 13:15:34.805soc101win11\Administrator +11241100x80000000000000009327Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.815{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\mip_ClientTelemetry.dll2025-10-29 13:15:34.813soc101win11\Administrator +11241100x80000000000000009328Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.898{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\mip_core.dll2025-10-29 13:15:34.898soc101win11\Administrator +11241100x80000000000000009329Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:34.925{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe2025-10-29 13:15:34.925NT AUTHORITY\SYSTEM +11241100x80000000000000009330Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:34.986{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\mip_file_sdk.dll2025-10-29 13:15:34.986soc101win11\Administrator +11241100x80000000000000009331Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.181{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\mip_protection_sdk.dll2025-10-29 13:15:35.180soc101win11\Administrator +11241100x80000000000000009332Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.218{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\mip_upe_sdk.dll2025-10-29 13:15:35.218soc101win11\Administrator +11241100x80000000000000009333Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.242{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\msipc.dll2025-10-29 13:15:35.242soc101win11\Administrator +154100x80000000000000009334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:35.228{8223a6b9-1377-6902-1d01-000000002b00}12108C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe1.439.539.0AntiMalware Definition UpdateMicrosoft Malware ProtectionMicrosoft CorporationAM_Delta.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /qC:\WINDOWS\SoftwareDistribution\Download\Install\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=01038B13DE7210A0C57107FB21E99C93,SHA256=149D490710188CCD9987730C467F5653A6114C3165766CA37EEC93B10039F1E9,IMPHASH=52CEE9C1BC4BDA1F4F98A36E5EF61615{8223a6b9-1374-6902-1901-000000002b00}6952C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 5b07b36c-3860-4cc9-bef4-a699ac1018cf /RunHandlerComServerNT AUTHORITY\SYSTEM +11241100x80000000000000009335Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.298{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\msvcp140.dll2025-10-29 13:15:35.296soc101win11\Administrator +11241100x80000000000000009336Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.308{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\msvcp140_1.dll2025-10-29 13:15:35.306soc101win11\Administrator +11241100x80000000000000009337Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.310{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\msvcp140_1_app.dll2025-10-29 13:15:35.310soc101win11\Administrator +11241100x80000000000000009338Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.315{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\msvcp140_2_app.dll2025-10-29 13:15:35.315soc101win11\Administrator +11241100x80000000000000009339Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.318{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\msvcp140_app.dll2025-10-29 13:15:35.318soc101win11\Administrator +11241100x80000000000000009340Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.324{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\msvcp140_atomic_wait.dll2025-10-29 13:15:35.324soc101win11\Administrator +11241100x80000000000000009341Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.326{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\nh.dll2025-10-29 13:15:35.326soc101win11\Administrator +11241100x80000000000000009342Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.363{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.App.dll2025-10-29 13:15:35.362soc101win11\Administrator +11241100x80000000000000009343Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.477{8223a6b9-1374-6902-1b01-000000002b00}12188C:\WINDOWS\system32\MpSigStub.exeC:\Windows\Temp\4F9F0B2D-48D1-4BEE-9024-77BD3E89EB992f9c.1dc48d61b0abea4\mpengine.dll2025-10-29 13:15:35.477NT AUTHORITY\SYSTEM +11241100x80000000000000009344Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:35.482{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.App.exe2025-10-29 13:15:35.482soc101win11\Administrator +11241100x80000000000000009345Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:35.499{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.exe2025-10-29 13:15:35.499soc101win11\Administrator +11241100x80000000000000009346Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:35.550{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.dll2025-10-29 13:15:35.550soc101win11\Administrator +11241100x80000000000000009347Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:36.104{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exe2025-10-29 13:15:36.104soc101win11\Administrator +11241100x80000000000000009348Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:36.120{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.HttpSvr.dll2025-10-29 13:15:36.120soc101win11\Administrator +11241100x80000000000000009349Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:36.142{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.WebSocketClient.dll2025-10-29 13:15:36.140soc101win11\Administrator +11241100x80000000000000009350Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:36.162{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveActionHelper.exe2025-10-29 13:15:36.162soc101win11\Administrator +11241100x80000000000000009351Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:36.172{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveFileLauncher.exe2025-10-29 13:15:36.172soc101win11\Administrator +11241100x80000000000000009352Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:36.182{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveLauncher.exe2025-10-29 13:15:36.182soc101win11\Administrator +11241100x80000000000000009353Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:36.197{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrivePatcher.exe2025-10-29 13:15:36.197soc101win11\Administrator +11241100x80000000000000009354Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:36.272{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveStandaloneUpdater.exe2025-10-29 13:15:36.272soc101win11\Administrator +11241100x80000000000000009355Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:36.596{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveTelemetryExperimental.dll2025-10-29 13:15:36.596soc101win11\Administrator +11241100x80000000000000009356Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:36.636{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveTelemetryStable.dll2025-10-29 13:15:36.636soc101win11\Administrator +11241100x80000000000000009357Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:36.673{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveUpdaterService.exe2025-10-29 13:15:36.673soc101win11\Administrator +11241100x80000000000000009358Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:36.737{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5Core.dll2025-10-29 13:15:36.735soc101win11\Administrator +11241100x80000000000000009359Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:36.868{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5DBus.dll2025-10-29 13:15:36.868soc101win11\Administrator +11241100x80000000000000009360Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:36.883{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5Gui.dll2025-10-29 13:15:36.883soc101win11\Administrator +11241100x80000000000000009361Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.000{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5Network.dll2025-10-29 13:15:37.000soc101win11\Administrator +11241100x80000000000000009362Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.026{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5PrintSupport.dll2025-10-29 13:15:37.024soc101win11\Administrator +11241100x80000000000000009363Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.032{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5Qml.dll2025-10-29 13:15:37.032soc101win11\Administrator +11241100x80000000000000009364Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.089{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5QmlModels.dll2025-10-29 13:15:37.089soc101win11\Administrator +11241100x80000000000000009365Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.101{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5QmlWorkerScript.dll2025-10-29 13:15:37.101soc101win11\Administrator +11241100x80000000000000009366Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.105{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5Quick.dll2025-10-29 13:15:37.105soc101win11\Administrator +11241100x80000000000000009367Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.168{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5QuickControls2.dll2025-10-29 13:15:37.166soc101win11\Administrator +11241100x80000000000000009368Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.172{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5QuickTemplates2.dll2025-10-29 13:15:37.172soc101win11\Administrator +11241100x80000000000000009369Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.196{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5Svg.dll2025-10-29 13:15:37.196soc101win11\Administrator +11241100x80000000000000009370Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.204{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5Widgets.dll2025-10-29 13:15:37.204soc101win11\Administrator +11241100x80000000000000009371Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.297{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Qt5WinExtras.dll2025-10-29 13:15:37.297soc101win11\Administrator +11241100x80000000000000009372Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.311{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\ReactNativePicker.dll2025-10-29 13:15:37.311soc101win11\Administrator +11241100x80000000000000009373Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.316{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\RNSVG.dll2025-10-29 13:15:37.316soc101win11\Administrator +11241100x80000000000000009374Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.335{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\SyncEngine.dll2025-10-29 13:15:37.335soc101win11\Administrator +11241100x80000000000000009375Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.537{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\Telemetry.dll2025-10-29 13:15:37.537soc101win11\Administrator +11241100x80000000000000009376Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.584{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\ucrtbase.dll2025-10-29 13:15:37.584soc101win11\Administrator +11241100x80000000000000009377Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.609{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\UpdateRingSettings.dll2025-10-29 13:15:37.609soc101win11\Administrator +11241100x80000000000000009378Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.628{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\vcamp140_app.dll2025-10-29 13:15:37.628soc101win11\Administrator +11241100x80000000000000009379Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.643{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\vccorlib140_app.dll2025-10-29 13:15:37.641soc101win11\Administrator +11241100x80000000000000009380Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.650{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\vcomp140_app.dll2025-10-29 13:15:37.650soc101win11\Administrator +11241100x80000000000000009381Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.656{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\vcruntime140.dll2025-10-29 13:15:37.654soc101win11\Administrator +11241100x80000000000000009382Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.661{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\vcruntime140_1.dll2025-10-29 13:15:37.661soc101win11\Administrator +11241100x80000000000000009383Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.665{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\vcruntime140_1_app.dll2025-10-29 13:15:37.663soc101win11\Administrator +11241100x80000000000000009384Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.667{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\vcruntime140_app.dll2025-10-29 13:15:37.667soc101win11\Administrator +11241100x80000000000000009385Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.672{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\WebView2Loader.dll2025-10-29 13:15:37.672soc101win11\Administrator +11241100x80000000000000009386Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.678{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\WnsClientApi.dll2025-10-29 13:15:37.678soc101win11\Administrator +11241100x80000000000000009387Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:37.695{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\zlib1.dll2025-10-29 13:15:37.695soc101win11\Administrator +11241100x80000000000000009388Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.292{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileCoAuthLib.dll2025-10-29 13:15:38.290soc101win11\Administrator +11241100x80000000000000009389Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dll2025-10-29 13:15:38.302soc101win11\Administrator +11241100x80000000000000009390Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.354{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\imageformats\qgif.dll2025-10-29 13:15:38.354soc101win11\Administrator +11241100x80000000000000009391Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.358{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\imageformats\qjpeg.dll2025-10-29 13:15:38.358soc101win11\Administrator +11241100x80000000000000009392Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.369{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\imageformats\qsvg.dll2025-10-29 13:15:38.369soc101win11\Administrator +11241100x80000000000000009393Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.371{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\imageformats\qwebp.dll2025-10-29 13:15:38.371soc101win11\Administrator +11241100x80000000000000009394Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.385{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\IRMProtectors\microsoft.aip.pdfprotector.dll2025-10-29 13:15:38.385soc101win11\Administrator +11241100x80000000000000009395Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.405{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\IRMProtectors\Microsoft.Office.Irm.MsoProtector.dll2025-10-29 13:15:38.403soc101win11\Administrator +11241100x80000000000000009396Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:38.410{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\IRMProtectors\Microsoft.Office.Irm.OfcProtector.dll2025-10-29 13:15:38.408soc101win11\Administrator +11241100x80000000000000009397Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:39.035{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OD4\zlib1.dll2025-10-29 13:15:39.035soc101win11\Administrator +154100x80000000000000009398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:39.053{8223a6b9-137b-6902-1f01-000000002b00}11500C:\Windows\System32\dmclient.exe10.0.26100.3624 (WinBuild.160101.0800)Microsoft Feedback SIUF Deployment Manager ClientMicrosoft® Windows® Operating SystemMicrosoft Corporationdmclient.exe"C:\WINDOWS\system32\dmclient.exe" utcwnfC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ADE2D804514A7ADC1793FDE0DB3E2D7B,SHA256=B7E299313494360EA4A147FEAD786939E443850B0910421DA7F1A2F186A37445,IMPHASH=BE4CDFB4F5176337C6B65F6C57146EC5{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x80000000000000009399Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:39.321{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\platforms\qwindows.dll2025-10-29 13:15:39.321soc101win11\Administrator +11241100x80000000000000009400Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.166{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQml\qmlplugin.dll2025-10-29 13:15:41.166soc101win11\Administrator +11241100x80000000000000009401Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.180{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQuick.2\qtquick2plugin.dll2025-10-29 13:15:41.178soc101win11\Administrator +11241100x80000000000000009402Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.647{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQml\Models.2\modelsplugin.dll2025-10-29 13:15:41.647soc101win11\Administrator +11241100x80000000000000009403Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.666{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQuick\Controls\qtquickcontrolsplugin.dll2025-10-29 13:15:41.664soc101win11\Administrator +11241100x80000000000000009404Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.709{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQuick\Controls.2\qtquickcontrols2plugin.dll2025-10-29 13:15:41.709soc101win11\Administrator +11241100x80000000000000009405Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.725{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQuick\Extras\qtquickextrasplugin.dll2025-10-29 13:15:41.725soc101win11\Administrator +11241100x80000000000000009406Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.733{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQuick\Layouts\qquicklayoutsplugin.dll2025-10-29 13:15:41.733soc101win11\Administrator +11241100x80000000000000009407Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.743{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQuick\Templates.2\qtquicktemplates2plugin.dll2025-10-29 13:15:41.743soc101win11\Administrator +11241100x80000000000000009408Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.755{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQuick\Window.2\windowplugin.dll2025-10-29 13:15:41.755soc101win11\Administrator +11241100x80000000000000009409Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:15:41.928{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\qml\QtQuick\Controls\Styles\Flat\qtquickextrasflatplugin.dll2025-10-29 13:15:41.928soc101win11\Administrator +11241100x80000000000000009410Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:42.852{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveSetup.exe2025-10-29 13:15:42.778soc101win11\Administrator +534500x80000000000000009411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:43.372{8223a6b9-1358-6902-f600-000000002b00}10944C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administrator +11241100x80000000000000009412Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:43.501{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\{1DDD16BB-AFF5-414D-BCF9-82C00E204A02}_OneDrive.exe2025-10-29 13:15:43.499soc101win11\Administrator +11241100x80000000000000009413Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:43.537{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe2025-09-03 13:55:57.279soc101win11\Administrator +11241100x80000000000000009414Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:43.842{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003\{CBD159C6-2FDA-4627-9908-C11C3A6EA6D0}_OneDriveStandaloneUpdater.exe2025-10-29 13:15:43.842soc101win11\Administrator +11241100x80000000000000009415Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:43.891{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe2025-09-03 13:55:57.802soc101win11\Administrator +11241100x80000000000000009416Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:15:43.927{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.App.exe2025-09-03 13:56:23.831soc101win11\Administrator +11241100x80000000000000009417Microsoft-Windows-Sysmon/Operationalsoc101win11T10232025-10-29 13:15:44.052{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk2025-09-03 13:55:58.369soc101win11\Administrator +154100x80000000000000009418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:44.176{8223a6b9-1380-6902-2401-000000002b00}5048C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncConfig.exe25.189.0928.0002Microsoft OneDrive Configuration ApplicationMicrosoft OneDriveMicrosoft CorporationFileSyncConfig.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncConfig.exe" C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=134C3745881BAFAF920D5D43840691B2,SHA256=6E81822B471E3B65CF2A57E2505738C0226A515E943ABB15CD31450895C31CE2,IMPHASH=762765E8B430012ED5B6FBDC137D2A18{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /updateSource:ODU /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode /installWebView2 /SetPerProcessSystemDPIForceOffKey /EnableNucleusAutoStartFix /RegisterOneDriveLauncherAutoStartTask /EnableOneDriveLauncherRampDownloads /EnableDeltaBuildToTelemetryFeatureSet /ReLaunchOD4AppHarness /ArgPerformNucleusLocalAccessRepair /PerformEdgeNucleusRepair /PerformChromeNucleusRepairsoc101win11\Administrator +13241300x80000000000000009419Microsoft-Windows-Sysmon/Operationalsoc101win11InvDBSetValue2025-10-29 13:15:44.199{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncConfig.exeBinary DataNT AUTHORITY\SYSTEM +534500x80000000000000009420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:44.605{8223a6b9-1380-6902-2401-000000002b00}5048C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncConfig.exesoc101win11\Administrator +13241300x80000000000000009421Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:45.094{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\filesyncconfig.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009422Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:45.094{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009423Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:45.094{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\LinkDate05/17/2076 18:38:07NT AUTHORITY\SYSTEM +13241300x80000000000000009424Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:45.094{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x80000000000000009425Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.195{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\OneDrive.CameraRoll.Import\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"odopen://cameraRoll"soc101win11\Administrator +12241200x80000000000000009426Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteValue2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\*\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009427Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\*\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009428Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteValue2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009429Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009430Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteValue2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009431Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009432Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteValue2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009433Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009434Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteValue2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +12241200x80000000000000009435Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:15:45.232{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncExsoc101win11\Administrator +13241300x80000000000000009436Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.292{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009437Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.292{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009438Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.292{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009439Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.292{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009440Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.292{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009441Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.294{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009442Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.294{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009443Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.294{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009444Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.294{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009445Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.294{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009446Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.296{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009447Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.296{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009448Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.298{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009449Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.298{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009450Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.298{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009451Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.298{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009452Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.298{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009453Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.298{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009454Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.300{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009455Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.300{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009456Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009457Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009458Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009459Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009460Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\*\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009461Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\*\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009462Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009463Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.302{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009464Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.304{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009465Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.304{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009466Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.304{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009467Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.304{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009468Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.304{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009469Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.304{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009470Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.324{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileCoAuthLib.dllsoc101win11\Administrator +13241300x80000000000000009471Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:45.342{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuthLib64.dllsoc101win11\Administrator +13241300x80000000000000009472Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.353{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\msonedrivesyncserviceclient\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exe" /protocol:"%%1"soc101win11\Administrator +13241300x80000000000000009473Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.353{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\msonedrivesyncserviceclient\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exe" /protocol:"%%1"soc101win11\Administrator +13241300x80000000000000009474Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.353{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\.fluid\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveFileLauncher.exe" "%%1"soc101win11\Administrator +13241300x80000000000000009475Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.353{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\.note\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveFileLauncher.exe" "%%1"soc101win11\Administrator +13241300x80000000000000009476Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.353{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\.whiteboard\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveFileLauncher.exe" "%%1"soc101win11\Administrator +13241300x80000000000000009477Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.353{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\.loop\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveFileLauncher.exe" "%%1"soc101win11\Administrator +13241300x80000000000000009478Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.353{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\.copilot\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveFileLauncher.exe" "%%1"soc101win11\Administrator +13241300x80000000000000009479Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.353{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\.agent\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveFileLauncher.exe" "%%1"soc101win11\Administrator +13241300x80000000000000009480Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.357{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\odopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009481Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.357{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\odopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009482Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.357{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009483Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:45.357{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +11241100x80000000000000009484Microsoft-Windows-Sysmon/Operationalsoc101win11T10232025-10-29 13:15:45.392{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk2025-09-03 13:55:58.369soc101win11\Administrator +13241300x80000000000000009485Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:45.400{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe\PublisherMicrosoft Corporationsoc101win11\Administrator +13241300x80000000000000009486Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:45.400{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe\UrlUpdateInfohttps://go.microsoft.com/fwlink/?LinkID=223554soc101win11\Administrator +11241100x80000000000000009487Microsoft-Windows-Sysmon/Operationalsoc101win11T10532025-10-29 13:15:45.410{8223a6b9-1316-6902-1c00-000000002b00}1588C:\WINDOWS\system32\svchost.exeC:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4051859043-1187413090-3677023548-5002025-09-03 13:55:58.383NT AUTHORITY\SYSTEM +13241300x80000000000000009488Microsoft-Windows-Sysmon/Operationalsoc101win11T1060,RunKeySetValue2025-10-29 13:15:45.526{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\RunOnce\Delete Cached Update BinaryC:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"soc101win11\Administrator +13241300x80000000000000009489Microsoft-Windows-Sysmon/Operationalsoc101win11T1060,RunKeySetValue2025-10-29 13:15:45.528{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\RunOnce\Delete Cached Standalone Update BinaryC:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"soc101win11\Administrator +154100x80000000000000009490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:45.701{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe25.189.0928.0002Microsoft OneDriveMicrosoft OneDriveMicrosoft CorporationOneDrive.exe /updateInstalled /backgroundC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=205D89848B002DB9D818E67BEEFB7FDB,SHA256=A27042CBBFC67B731A4300C60D37CE6510F8ABCF2F449A472003A73436ADC482,IMPHASH=9B64999A42FEBC0CB20DB21F6621FC6F{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /updateSource:ODU /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode /installWebView2 /SetPerProcessSystemDPIForceOffKey /EnableNucleusAutoStartFix /RegisterOneDriveLauncherAutoStartTask /EnableOneDriveLauncherRampDownloads /EnableDeltaBuildToTelemetryFeatureSet /ReLaunchOD4AppHarness /ArgPerformNucleusLocalAccessRepair /PerformEdgeNucleusRepair /PerformChromeNucleusRepairsoc101win11\Administrator +154100x80000000000000009491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:41.257{8223a6b9-137d-6902-2101-000000002b00}8940C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exe0.11.11 Ollama Setup Ollama Ollama C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exe /CLOSEAPPLICATIONS /LOG=upgrade.log /FORCECLOSEAPPLICATIONS /SP /NOCANCEL /SILENT /VERYSILENT /SUPPRESSMSGBOXESC:\Users\Administrator\AppData\Local\Ollama\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=EF97CE9B7DC3DB673ED0DC4AFF845D2C,SHA256=199347A9170CBA5ECC0B6E2FD0E6ECAD28C9FC0B9512F93185307610839E0B45,IMPHASH=40AB50289F7EF5FAE60801F88D4541FC{8223a6b9-135f-6902-0601-000000002b00}11632C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" soc101win11\Administrator +534500x80000000000000009492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:46.308{8223a6b9-135f-6902-0601-000000002b00}11632C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +22542200x80000000000000009493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:44.795{8223a6b9-1372-6902-1801-000000002b00}12012oneclient.sfx.ms0type: 5 oneclient.sfx.ms.edgesuite.net;type: 5 a124.dscd.akamai.net;::ffff:23.221.212.219;::ffff:23.221.212.215;::ffff:23.221.212.198;::ffff:23.221.212.206;::ffff:23.221.212.207;::ffff:23.221.212.203;::ffff:23.221.212.196;C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exesoc101win11\Administrator +354300x80000000000000009494Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:44.411{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49824-false23.197.210.94-80http +354300x80000000000000009495Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:44.851{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49825-false23.221.212.219-443https +354300x80000000000000009496Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:45.195{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49826-false13.107.213.41-443https +154100x80000000000000009497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:47.111{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmp51.1052.0.0Setup/UninstallOllama Ollama "C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmp" /SL5="$3035C,1181414460,796160,C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exe" /CLOSEAPPLICATIONS /LOG=upgrade.log /FORCECLOSEAPPLICATIONS /SP /NOCANCEL /SILENT /VERYSILENT /SUPPRESSMSGBOXESC:\Users\Administrator\AppData\Local\Ollama\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=DF0459F3692A4296D71017906796C660,SHA256=FFF9E988F6B6C2A7E45AEFB307F9435771D7C9F24A72EB9B8902CC44717F8E23,IMPHASH=759C48933C0C1DBCBBE95436A5F5C2B6{8223a6b9-137d-6902-2101-000000002b00}8940C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exeC:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exe /CLOSEAPPLICATIONS /LOG=upgrade.log /FORCECLOSEAPPLICATIONS /SP /NOCANCEL /SILENT /VERYSILENT /SUPPRESSMSGBOXESsoc101win11\Administrator +13241300x80000000000000009498Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.150{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009499Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.150{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009500Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.150{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009501Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.150{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009502Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009503Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009504Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009505Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009506Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009507Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009508Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009509Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009510Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009511Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009512Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009513Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.152{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009514Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009515Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009516Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009517Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009518Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009519Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009520Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileSyncShell64.dllsoc101win11\Administrator +13241300x80000000000000009521Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileSyncShell.dllsoc101win11\Administrator +13241300x80000000000000009522Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\*\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009523Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\*\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009524Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009525Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009526Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009527Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\Directory\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009528Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.154{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009529Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.156{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009530Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.156{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009531Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:15:47.156{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\(Default){CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}soc101win11\Administrator +13241300x80000000000000009532Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.162{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\i386\FileCoAuthLib.dllsoc101win11\Administrator +13241300x80000000000000009533Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:15:47.168{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\(Default)C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuthLib64.dllsoc101win11\Administrator +13241300x80000000000000009534Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:47.168{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\odopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009535Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:47.168{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\odopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009536Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:47.168{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009537Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:47.168{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +154100x80000000000000009538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:47.890{8223a6b9-1383-6902-2701-000000002b00}11124C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exe25.189.0928.0002Microsoft OneDriveFile Co-Authoring ExecutableMicrosoft OneDriveMicrosoft CorporationFileCoAuth.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=2E043FAFFD4F8931BC1A842F9E4FA32F,SHA256=236A8DB7FD45AC294EF9AA9BAFE1F9FC70ECDB598B27410DE41B9E57A070DE96,IMPHASH=21DEF170CFADB4655DEEFF3322622D63{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x80000000000000009539Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:48.330{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +13241300x80000000000000009540Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:48.330{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\grvopen\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"%%1"soc101win11\Administrator +534500x80000000000000009541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:49.145{8223a6b9-1360-6902-0901-000000002b00}11808C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +154100x80000000000000009542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:49.352{8223a6b9-1385-6902-2801-000000002b00}4888C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exe25.189.0928.0002Microsoft OneDrive Sync ServiceMicrosoft OneDrive Sync ServiceMicrosoft CorporationOneDrive.Sync.Service.exe/silentConfigC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=95AD31664C2178A0982E3B9CBF790034,SHA256=E93808788912CF211F052BDA1269404B8464232F8FB2CD02AB87D3F2CA5CF3A1,IMPHASH=DEC74AAC420D912D7A9518BB2BA28F50{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /updateSource:ODU /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode /installWebView2 /SetPerProcessSystemDPIForceOffKey /EnableNucleusAutoStartFix /RegisterOneDriveLauncherAutoStartTask /EnableOneDriveLauncherRampDownloads /EnableDeltaBuildToTelemetryFeatureSet /ReLaunchOD4AppHarness /ArgPerformNucleusLocalAccessRepair /PerformEdgeNucleusRepair /PerformChromeNucleusRepairsoc101win11\Administrator +354300x80000000000000009543Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:47.856{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49828-false13.107.213.41-443https +354300x80000000000000009544Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:47.856{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49829-false52.123.129.14-443https +154100x80000000000000009545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:49.564{8223a6b9-1385-6902-2901-000000002b00}10668C:\Windows\System32\taskkill.exe10.0.26100.1 (WinBuild.160101.0800)Terminates ProcessesMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskkill.exe"taskkill.exe" /f /im "ollama app.exe"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CBF904BC6835B56A4BD5AC4141F8D131,SHA256=1249717315FC8F4D2DF17D5DB9DA0444795FDB9FB83DFB1F763C3F39282244F7,IMPHASH=FFE513AF7F8477FE56A2B3C63BE2D148{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmp"C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmp" /SL5="$3035C,1181414460,796160,C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exe" /CLOSEAPPLICATIONS /LOG=upgrade.log /FORCECLOSEAPPLICATIONS /SP /NOCANCEL /SILENT /VERYSILENT /SUPPRESSMSGBOXESsoc101win11\Administrator +22542200x80000000000000009546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:47.766{8223a6b9-1381-6902-2501-000000002b00}9736ecs.office.com0type: 5 ecs.office.trafficmanager.net;type: 5 dual-s-0005-office.config.skype.com;type: 5 ecs-office.s-0005.dual-s-msedge.net;type: 5 s-0005.dual-s-msedge.net;::ffff:52.123.129.14;::ffff:52.123.128.14;C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administrator +13241300x80000000000000009547Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:15:50.367{8223a6b9-1385-6902-2801-000000002b00}4888C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\msonedrivesyncserviceclient\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exe" /protocol:"%%1"soc101win11\Administrator +354300x80000000000000009548Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:48.855{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49832-false23.221.212.219a23-221-212-219.deploy.static.akamaitechnologies.com443https +22542200x80000000000000009549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:48.671{8223a6b9-1381-6902-2501-000000002b00}9736oneclient.sfx.ms0type: 5 oneclient.sfx.ms.edgesuite.net;type: 5 a124.dscd.akamai.net;::ffff:23.221.212.219;::ffff:23.221.212.215;::ffff:23.221.212.198;::ffff:23.221.212.206;::ffff:23.221.212.207;::ffff:23.221.212.203;::ffff:23.221.212.196;C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administrator +13241300x80000000000000009550Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:50.642{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollamasetup.exe|3986c48f1e320d4a\LowerCaseLongPathc:\users\administrator\appdata\local\ollama\ollamasetup.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009551Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:50.642{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollamasetup.exe|3986c48f1e320d4a\Publisherollama NT AUTHORITY\SYSTEM +13241300x80000000000000009552Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:50.642{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollamasetup.exe|3986c48f1e320d4a\LinkDate01/08/2025 15:36:35NT AUTHORITY\SYSTEM +13241300x80000000000000009553Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:50.642{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollamasetup.exe|3986c48f1e320d4a\BinProductVersion0.11.11.0NT AUTHORITY\SYSTEM +13241300x80000000000000009554Microsoft-Windows-Sysmon/Operationalsoc101win11T1060,RunKeySetValue2025-10-29 13:15:50.646{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\RunOnce\Uninstall 25.159.0817.0003C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.159.0817.0003"soc101win11\Administrator +534500x80000000000000009555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:50.659{8223a6b9-1372-6902-1801-000000002b00}12012C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exesoc101win11\Administrator +534500x80000000000000009556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:50.695{8223a6b9-1371-6902-1501-000000002b00}11832C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exesoc101win11\Administrator +154100x80000000000000009557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:50.698{8223a6b9-1386-6902-2c01-000000002b00}12220C:\Windows\System32\taskkill.exe10.0.26100.1 (WinBuild.160101.0800)Terminates ProcessesMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskkill.exe"taskkill.exe" /f /im "ollama.exe"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CBF904BC6835B56A4BD5AC4141F8D131,SHA256=1249717315FC8F4D2DF17D5DB9DA0444795FDB9FB83DFB1F763C3F39282244F7,IMPHASH=FFE513AF7F8477FE56A2B3C63BE2D148{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmp"C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmp" /SL5="$3035C,1181414460,796160,C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exe" /CLOSEAPPLICATIONS /LOG=upgrade.log /FORCECLOSEAPPLICATIONS /SP /NOCANCEL /SILENT /VERYSILENT /SUPPRESSMSGBOXESsoc101win11\Administrator +13241300x80000000000000009558Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:50.814{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedrive.sync.service.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009559Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:50.814{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009560Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:50.816{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\LinkDate06/22/2006 02:04:35NT AUTHORITY\SYSTEM +13241300x80000000000000009561Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:50.816{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +354300x80000000000000009562Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:15:51.678{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49833-false20.44.10.122-443https +534500x80000000000000009563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:54.294{8223a6b9-1383-6902-2701-000000002b00}11124C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exesoc101win11\Administrator +13241300x80000000000000009564Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:15:54.917{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\filecoauth.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009565Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:15:54.917{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009566Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:15:54.917{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\LinkDate10/08/2061 11:05:30NT AUTHORITY\SYSTEM +13241300x80000000000000009567Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:15:54.919{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +22542200x80000000000000009568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:56.039{8223a6b9-132e-6902-c800-000000002b00}9780oneclient.sfx.ms0type: 5 oneclient.sfx.ms.edgesuite.net;type: 5 a124.dscd.akamai.net;::ffff:23.221.212.206;::ffff:23.221.212.219;::ffff:23.221.212.198;::ffff:23.221.212.215;::ffff:23.221.212.207;::ffff:23.221.212.196;::ffff:23.221.212.203;C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +154100x80000000000000009569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:15:58.324{8223a6b9-138e-6902-2e01-000000002b00}1308C:\Windows\System32\appidpolicyconverter.exe10.0.26100.3037 (WinBuild.160101.0800)AppID Policy Converter TaskMicrosoft® Windows® Operating SystemMicrosoft CorporationAppIDPolicyConverter.exe"C:\WINDOWS\system32\appidpolicyconverter.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0FFBB4FEACA5ECFE63ABDA89E4590357,SHA256=6DDF58B70300A3AC7A20493C1AB2A728967FB7ACE55C1D1C68A75E4765E46D78,IMPHASH=EE6363D2375CFB1A505C3D494F2EA076{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x80000000000000009570Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:16:01.974{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8C69434C-3C88-412A-90BA-F12DCD44A1CD}\mpengine.dll2025-10-29 13:16:01.974NT AUTHORITY\SYSTEM +154100x80000000000000009571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:03.048{8223a6b9-1393-6902-3001-000000002b00}1288C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:03.101{8223a6b9-1393-6902-3101-000000002b00}6812C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /cC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1393-6902-3001-000000002b00}1288C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcNT AUTHORITY\SYSTEM +11241100x80000000000000009573Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:16:03.141{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll2024-11-11 18:43:45.708NT AUTHORITY\SYSTEM +154100x80000000000000009574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:03.224{8223a6b9-1393-6902-3201-000000002b00}11668C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k InvSvcGroup -p -s InventorySvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:03.309{8223a6b9-1393-6902-3301-000000002b00}11504C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest C:\WINDOWS\SystemTemp\81F39551-C330-2C0D-1FC8-FABDD8A31108.manC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +354300x80000000000000009576Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:16:02.281{8223a6b9-1385-6902-2801-000000002b00}4888C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49844-false13.107.137.11-443https +154100x80000000000000009577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:03.796{8223a6b9-1393-6902-3701-000000002b00}10676C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest C:\WINDOWS\SystemTemp\81F39551-C330-2C0D-1FC8-FABDD8A31108.man "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Definition Updates\StableEngineEtwLocation\mpengine_etw.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x80000000000000009578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:03.893{8223a6b9-1393-6902-3901-000000002b00}10328C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:04.560{8223a6b9-1394-6902-3b01-000000002b00}10424C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe1450.2506.28022.0MoUSO Core Worker ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationMoUSOCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E048EE9A14933FFA4A9C9FC7A8A7F83B,SHA256=B4A080E7ABAC28ADCBB172B53060508457C9CEC25BC339F3DFA0A031CD881737,IMPHASH=D3DBFEDBF38C961BD70D128454E64766{8223a6b9-1393-6902-3901-000000002b00}10328C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvcNT AUTHORITY\SYSTEM +154100x80000000000000009580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:04.719{8223a6b9-1394-6902-3d01-000000002b00}10252C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k whesvc -p -s whesvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:05.275{8223a6b9-1395-6902-4101-000000002b00}10320C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s wscsvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:06.283{8223a6b9-1396-6902-4301-000000002b00}8120C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /ClearActiveNotifications /CV mHXMr069HE2xwQwh.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-1394-6902-3b01-000000002b00}10424C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +154100x80000000000000009583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:13.162{8223a6b9-139d-6902-4401-000000002b00}11992C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --ssd-no-pressure-read-main-dll --metrics-shmem-handle=5044,i,8414648281922931543,2705281995567965640,524288 --field-trial-handle=1824,i,16309926270948425934,13846169497689979656,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,msAggressiveCacheTrimming,msCustomDataPartition,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2NoTabForScreenShare,msWindowsTaskManager --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEnhancedTrackingPreventionEnabled,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccC:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +13241300x80000000000000009584Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:16:15.208{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpsigstub.exe|bd458e9ca46fdf51\LowerCaseLongPathc:\windows\system32\mpsigstub.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009585Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:16:15.208{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpsigstub.exe|bd458e9ca46fdf51\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009586Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:16:15.208{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpsigstub.exe|bd458e9ca46fdf51\LinkDate03/07/2001 16:32:57NT AUTHORITY\SYSTEM +13241300x80000000000000009587Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:16:15.208{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpsigstub.exe|bd458e9ca46fdf51\BinProductVersion1.1.24010.2001NT AUTHORITY\SYSTEM +13241300x80000000000000009588Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:16:15.285{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\am_delta.exe|9025d818d4db6f5e\LowerCaseLongPathc:\windows\softwaredistribution\download\install\am_delta.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009589Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:16:15.285{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\am_delta.exe|9025d818d4db6f5e\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009590Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:16:15.285{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\am_delta.exe|9025d818d4db6f5e\LinkDate10/29/2025 06:23:25NT AUTHORITY\SYSTEM +13241300x80000000000000009591Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:16:15.285{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\am_delta.exe|9025d818d4db6f5e\BinProductVersion1.439.539.0NT AUTHORITY\SYSTEM +154100x80000000000000009592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:21.522{8223a6b9-13a5-6902-4601-000000002b00}8824C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=5072,i,9667693591809035105,5146696851879612825,524288 --field-trial-handle=1824,i,16309926270948425934,13846169497689979656,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,msAggressiveCacheTrimming,msCustomDataPartition,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2NoTabForScreenShare,msWindowsTaskManager --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEnhancedTrackingPreventionEnabled,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccC:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +154100x80000000000000009593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:34.019{8223a6b9-13b2-6902-4901-000000002b00}3336C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=5096,i,5245181844892731086,16243305796155401489,524288 --field-trial-handle=1824,i,16309926270948425934,13846169497689979656,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,msAggressiveCacheTrimming,msCustomDataPartition,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2NoTabForScreenShare,msWindowsTaskManager --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEnhancedTrackingPreventionEnabled,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:14 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccC:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +154100x80000000000000009594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:58.993{8223a6b9-13ca-6902-4a01-000000002b00}3408C:\Windows\System32\wermgr.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Problem ReportingMicrosoft® Windows® Operating SystemMicrosoft CorporationWerMgr"C:\WINDOWS\system32\wermgr.exe" -uploadC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ABE1D752643419A8252520AABF75C29D,SHA256=1707CB793B8F64B65CA5C2FEEB05CB7198349354E9E67ADE0671EEC3647F351B,IMPHASH=2FEAC3143808B4542A16622000CCFCAE{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:16:58.993{8223a6b9-13ca-6902-4b01-000000002b00}2096C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:08.158{8223a6b9-13d4-6902-4c01-000000002b00}3160C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe140.0.3485.66Microsoft Edge WebView2Microsoft Edge WebView2Microsoft Corporationmsedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5549 --gpu-device-id=1029 --gpu-sub-system-id=67442093 --gpu-revision=0 --gpu-driver-version=9.17.7.4 --noerrdialogs --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --ssd-no-pressure-read-main-dll --metrics-shmem-handle=5116,i,15231734165333697324,3853858971374777882,262144 --field-trial-handle=1824,i,16309926270948425934,13846169497689979656,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,msAggressiveCacheTrimming,msCustomDataPartition,msSingleSignOnOSForPrimaryAccountIsShared,msWebView2NoTabForScreenShare,msWindowsTaskManager --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEnhancedTrackingPreventionEnabled,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:10 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccC:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BE9BDE9E62C9312D4CBD457BCBCD7DBB,SHA256=3E69D3BDEEF96EF731F491A27EC5C79A17D038F626AB246801B89486E67A9C55,IMPHASH=9ACEBDFAC77931C2B0DFBBEA2D494BA9{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=WebViewHost.exe --webview-exe-version=19.2509.42011.0 --user-data-dir="C:\Users\Administrator\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=msSingleSignOnOSForPrimaryAccountIsShared --mojo-named-platform-channel-pipe=9528.4564.12231744914887873383 /pfhostedapp:e830ad23bfc36491c9d262fefe59af8254ffd0ccsoc101win11\Administrator +11241100x80000000000000009597Microsoft-Windows-Sysmon/Operationalsoc101win11T10232025-10-29 13:17:22.053{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmpC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ollama\Ollama.lnk2025-09-03 13:59:01.792soc101win11\Administrator +11241100x80000000000000009598Microsoft-Windows-Sysmon/Operationalsoc101win11T10232025-10-29 13:17:22.085{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmpC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ollama.lnk2025-09-03 13:59:01.821soc101win11\Administrator +13241300x80000000000000009599Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:17:22.100{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmpHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\ollama\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" "%%1"soc101win11\Administrator +13241300x80000000000000009600Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:17:22.113{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmpHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\{44E83376-CE68-45EB-8FC1-393500EB558C}_is1\PublisherOllamasoc101win11\Administrator +13241300x80000000000000009601Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:17:22.113{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmpHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\{44E83376-CE68-45EB-8FC1-393500EB558C}_is1\URLUpdateInfohttps://ollama.com/soc101win11\Administrator +154100x80000000000000009602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:22.151{8223a6b9-13e2-6902-4d01-000000002b00}10680C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.Exe"C:\WINDOWS\system32\cmd.exe" /C set PATH=C:\Users\Administrator\AppData\Local\Programs\Ollama;%%PATH%% & "C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmp"C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmp" /SL5="$3035C,1181414460,796160,C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exe" /CLOSEAPPLICATIONS /LOG=upgrade.log /FORCECLOSEAPPLICATIONS /SP /NOCANCEL /SILENT /VERYSILENT /SUPPRESSMSGBOXESsoc101win11\Administrator +534500x80000000000000009603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:22.184{8223a6b9-1383-6902-2601-000000002b00}2400C:\Users\ADMINI~1\AppData\Local\Temp\is-PUA0L.tmp\OllamaSetup.tmpsoc101win11\Administrator +534500x80000000000000009604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:22.192{8223a6b9-137d-6902-2101-000000002b00}8940C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exesoc101win11\Administrator +154100x80000000000000009605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:23.342{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe-----"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=391155D58E7E4F35803FB28B6DA2BEF0,SHA256=6F05DE8F2C245CCC75DE1849453DE5BB1E9B36E249FA7685F91EFF7176367F26,IMPHASH=381F0D9D17ED9707D58FDC0AC52A26E7{8223a6b9-13e2-6902-4d01-000000002b00}10680C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" /C set PATH=C:\Users\Administrator\AppData\Local\Programs\Ollama;%PATH% & "C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:23.582{8223a6b9-13e3-6902-5001-000000002b00}12020C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:23.914{8223a6b9-13e3-6902-5201-000000002b00}3080C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009608Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:17:23.975{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netsh.exe|9100f7b33e3fe591\LowerCaseLongPathc:\windows\system32\netsh.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009609Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:17:23.975{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netsh.exe|9100f7b33e3fe591\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009610Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:17:23.975{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netsh.exe|9100f7b33e3fe591\LinkDate09/15/2042 12:37:17NT AUTHORITY\SYSTEM +13241300x80000000000000009611Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:17:23.975{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netsh.exe|9100f7b33e3fe591\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +154100x80000000000000009612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:23.983{8223a6b9-13e3-6902-5301-000000002b00}11112C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:24.881{8223a6b9-13e4-6902-5501-000000002b00}7020C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=9793C9EFD0D48CA763F2883A2C2D8C4D,SHA256=A9F9F07C38F90275DE99D3C28B105D7EA18DAD02D024D32D8A919E372363E9EF,IMPHASH=5DAC5D4CADE852AD7594BAB358401F19{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +354300x80000000000000009614Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:17:23.621{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49856-false34.36.133.15-443https +22542200x80000000000000009615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:23.567{8223a6b9-13e3-6902-4f01-000000002b00}2736ollama.com0::ffff:34.36.133.15;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +154100x80000000000000009616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:27.752{8223a6b9-13e7-6902-5801-000000002b00}2756C:\Windows\System32\backgroundTaskHost.exe10.0.26100.1 (WinBuild.160101.0800)Background Task HostMicrosoft® Windows® Operating SystemMicrosoft CorporationbackgroundTaskHost.exe"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXapskvk16gk8da8kch5g4qxh42vxccved.mcaC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25082.136.0_x64__8wekyb3d8bbwe\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=8BDE0AE40012BD639FC60E494CC32356,SHA256=B7D2C17E0038945AA4B72AE7A89E54D29B04CCC0FEB62DF5C9B7B67DE43C2530,IMPHASH=DC601E2593053A84A6989DE251407AA7{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000009617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:28.543{8223a6b9-13e8-6902-5c01-000000002b00}3596C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:28.667{8223a6b9-13e8-6902-5e01-000000002b00}4288C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:28.899{8223a6b9-13e8-6902-5f01-000000002b00}6140C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.26.430.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe-----"C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.26.430.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=35A23608AAB2B4BB50199885F4ABD944,SHA256=A087F60648C19CB5F7B0B279AE0211208E37158345284E9F99CC798C0F4EBE70,IMPHASH=641FD972DDBA885472113AECA5399D21{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +354300x80000000000000009620Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:17:27.374{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49857-false140.82.113.3-443https +354300x80000000000000009621Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:17:27.738{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49858-false185.199.110.133-443https +22542200x80000000000000009622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:27.182{8223a6b9-13e3-6902-4f01-000000002b00}2736github.com0::ffff:140.82.113.3;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +154100x80000000000000009623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:29.336{8223a6b9-13e9-6902-6001-000000002b00}12172C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25082.136.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe1.25082.136.0Microsoft Phone LinkMicrosoft Phone LinkMicrosoft CorporationPhoneExperienceHost.dll"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25082.136.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe" -ComServer:Background -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=2E2A1EA484534ADAA22C79F430D497D2,SHA256=D073F3995A41E8DDD33488E09FBC99FA2238B089E2BA5C873FB17B4F80E426E8,IMPHASH=7A8C872F8E13D32F36A675B52EDA1D6E{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +22542200x80000000000000009624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:27.695{8223a6b9-13e3-6902-4f01-000000002b00}2736release-assets.githubusercontent.com0::ffff:185.199.110.133;::ffff:185.199.108.133;::ffff:185.199.111.133;::ffff:185.199.109.133;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +154100x80000000000000009625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:30.312{8223a6b9-13ea-6902-6101-000000002b00}12156C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:32.379{8223a6b9-13ec-6902-6201-000000002b00}6384C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -pC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:33.549{8223a6b9-13ed-6902-6301-000000002b00}7060C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:33.693{8223a6b9-13ed-6902-6501-000000002b00}8472C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +22542200x80000000000000009629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:32.944{8223a6b9-13e9-6902-6001-000000002b00}12172default.exp-tas.com0type: 5 deault-exp-tas-com.e-0014.e-msedge.net;type: 5 e-0014.e-msedge.net;::ffff:13.107.5.93;C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25082.136.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exesoc101win11\Administrator +154100x80000000000000009630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:38.545{8223a6b9-13f2-6902-6601-000000002b00}3988C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:38.694{8223a6b9-13f2-6902-6801-000000002b00}3624C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:43.548{8223a6b9-13f7-6902-6901-000000002b00}8640C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:43.686{8223a6b9-13f7-6902-6b01-000000002b00}10224C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:48.544{8223a6b9-13fc-6902-6c01-000000002b00}11644C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:48.708{8223a6b9-13fc-6902-6e01-000000002b00}11352C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:53.549{8223a6b9-1401-6902-6f01-000000002b00}11920C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:53.690{8223a6b9-1401-6902-7101-000000002b00}3548C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:58.545{8223a6b9-1406-6902-7201-000000002b00}6468C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:17:58.765{8223a6b9-1406-6902-7401-000000002b00}10744C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:00.970{8223a6b9-1408-6902-7501-000000002b00}6436C:\Windows\System32\wbem\WMIADAP.exe10.0.26100.3624 (WinBuild.160101.0800)WMI Reverse Performance Adapter Maintenance UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwmicookr.dllwmiadap.exe /F /T /RC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=BB080EF9D3DDFAA656A8C9FB98F11966,SHA256=94B54A00415B3A162F3565CA8A7629358E5F8933C421B7CF24FA5748E956A84F,IMPHASH=FA5718BEB895243416970B6C1C85E7E3{8223a6b9-1318-6902-5200-000000002b00}4036C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WinmgmtNT AUTHORITY\SYSTEM +13241300x80000000000000009641Microsoft-Windows-Sysmon/Operationalsoc101win11Suspicious,ImageBeginWithBackslashSetValue2025-10-29 13:18:01.027{8223a6b9-1408-6902-7501-000000002b00}6436\\?\C:\WINDOWS\system32\wbem\WMIADAP.EXEHKLM\SOFTWARE\Microsoft\Wbem\PROVIDERS\Performance\Performance RefreshDWORD (0x00000001)NT AUTHORITY\SYSTEM +154100x80000000000000009642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:03.549{8223a6b9-140b-6902-7601-000000002b00}10644C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:03.693{8223a6b9-140b-6902-7801-000000002b00}3236C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:05.603{8223a6b9-140d-6902-7901-000000002b00}11384C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe10.0.27840.1000 (WinBuild.160101.0800)Windows Security Health HostMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=478FBFDA6A51CF9F0D5BFD50B72DFB08,SHA256=272896B88C6C30DD41E8D44FD54A676FDC6A675BE3F38AAA7434F51B98B822E0,IMPHASH=E8960CAF12CF621B3CA78988264C27F1{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x80000000000000009645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:08.544{8223a6b9-1410-6902-7a01-000000002b00}8616C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:08.675{8223a6b9-1410-6902-7c01-000000002b00}10304C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:13.545{8223a6b9-1415-6902-7d01-000000002b00}5540C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:13.687{8223a6b9-1415-6902-7f01-000000002b00}11912C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:18.547{8223a6b9-141a-6902-8001-000000002b00}2084C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:18.676{8223a6b9-141a-6902-8201-000000002b00}7948C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:21.019{8223a6b9-141d-6902-8301-000000002b00}2984C:\Windows\System32\Taskmgr.exe10.0.26100.4768 (WinBuild.160101.0800)Task ManagerMicrosoft® Windows® Operating SystemMicrosoft CorporationTaskmgr.exe"C:\WINDOWS\system32\taskmgr.exe" /4C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B04B647A27204DC3E7889C3D6C8CA0E2,SHA256=AE125A8D361A9B87921762EE3B8AD99E8413D30742D45507FCAE0B72491862E5,IMPHASH=AEB83FC85EAC652029966193AA3B1B20{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x80000000000000009652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:23.546{8223a6b9-141f-6902-8401-000000002b00}10288C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:23.684{8223a6b9-141f-6902-8601-000000002b00}11536C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:28.549{8223a6b9-1424-6902-8701-000000002b00}8120C:\Windows\System32\netsh.exe10.0.26100.4768 (WinBuild.160101.0800)Network Command ShellMicrosoft® Windows® Operating SystemMicrosoft Corporationnetsh.exenetsh interface show interfaceC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C67F4AB9346911DFA97C516925D2E4B1,SHA256=0C7735C2B29FD0799A1091FD22D13563D8835EE00371D076F69CC0FD283DF2A0,IMPHASH=73E5A0DA41255DDE6B0FE666ED3EA9E6{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x80000000000000009655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:28.679{8223a6b9-1424-6902-8901-000000002b00}11780C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +534500x80000000000000009656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:30.249{8223a6b9-13e4-6902-5501-000000002b00}7020C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +154100x80000000000000009657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:31.273{8223a6b9-1427-6902-8a01-000000002b00}1096C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Windows\System32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=9793C9EFD0D48CA763F2883A2C2D8C4D,SHA256=A9F9F07C38F90275DE99D3C28B105D7EA18DAD02D024D32D8A919E372363E9EF,IMPHASH=5DAC5D4CADE852AD7594BAB358401F19{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +534500x80000000000000009658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:32.494{8223a6b9-13e3-6902-4f01-000000002b00}2736C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x80000000000000009659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:35.949{8223a6b9-1427-6902-8a01-000000002b00}1096C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +154100x80000000000000009660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:43.365{8223a6b9-1433-6902-8c01-000000002b00}6584C:\Program Files\Google\Chrome\Application\chrome.exe131.0.6778.70Google ChromeGoogle ChromeGoogle LLCchrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" C:\Program Files\Google\Chrome\Application\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=967FFF176D86AC8701340B6DB7EAD66B,SHA256=450675F1A9C072DDA4C17A9F2C49CE858AFF4586D7A74FBC19AEB302669FEDC1,IMPHASH=5D59E18B03E66F630296FC0E9CF014A5{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x80000000000000009661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:43.928{8223a6b9-1433-6902-9101-000000002b00}12200C:\Program Files\Google\Chrome\Application\131.0.6778.70\elevation_service.exe131.0.6778.70Google ChromeGoogle ChromeGoogle LLCelevation_service.exe"C:\Program Files\Google\Chrome\Application\131.0.6778.70\elevation_service.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=55A3A2FB1B9C16AFF60DF1426F3548D7,SHA256=D610523029FB075F0C61917F4533908C16C60F581752EA1CCFA8F1510DAF3529,IMPHASH=1627C441EF466468A67FA8850D88302C{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:48.133{8223a6b9-1438-6902-9a01-000000002b00}724C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +22542200x80000000000000009663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:51.411{8223a6b9-1433-6902-8f01-000000002b00}6872wpad1460-C:\Program Files\Google\Chrome\Application\chrome.exesoc101win11\Administrator +154100x80000000000000009664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:18:58.973{8223a6b9-1442-6902-a701-000000002b00}10868C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x80000000000000009665Microsoft-Windows-Sysmon/Operationalsoc101win11Downloads2025-10-29 13:18:59.229{8223a6b9-1433-6902-8c01-000000002b00}6584C:\Program Files\Google\Chrome\Application\chrome.exeC:\Users\Administrator\Downloads\6a9edbe4-86d2-46b3-9251-38a1d91cde5d.tmp2025-10-29 13:18:59.228soc101win11\Administrator +154100x80000000000000009666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:19:15.787{8223a6b9-1453-6902-b201-000000002b00}10300C:\Windows\System32\sc.exe10.0.26100.4484 (WinBuild.160101.0800)Service Control Manager Configuration ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationsc.exe"C:\WINDOWS\system32\sc.exe" start pushtoinstall loginC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=C8F632A326219F85927B3F33A13F7C7D,SHA256=A452BFCB6000D03942DDFADDCDA5A7EB121447ED99B1BA090446B4A989F1F7AE,IMPHASH=42DADBD60BBC453DD1773FDC089E19B7{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:19:15.789{8223a6b9-1453-6902-b301-000000002b00}1584C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe LogonC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:19:15.834{8223a6b9-1453-6902-b501-000000002b00}4016C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s PushToInstallC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009669Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:19:30.787{8223a6b9-1327-6902-af00-000000002b00}7368C:\WINDOWS\Explorer.EXEHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids\exefileBinary Datasoc101win11\Administrator +22542200x80000000000000009670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:05.270{8223a6b9-132e-6902-c800-000000002b00}9780storage.googleapis.com0::ffff:142.250.64.155;::ffff:172.217.2.219;::ffff:192.178.50.59;::ffff:172.217.165.219;::ffff:142.250.64.251;::ffff:142.250.64.219;::ffff:142.250.217.219;::ffff:192.178.50.91;::ffff:142.250.217.187;::ffff:142.250.217.251;::ffff:172.217.15.219;::ffff:142.251.34.155;C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +154100x80000000000000009671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:10.817{8223a6b9-148a-6902-bc01-000000002b00}7784C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe2.8.431.10Java Update CheckerJava Platform SE Auto UpdaterOracle Corporationjucheck.exe"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -autoC:\WINDOWS\SysWOW64\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B343088820A96B2363740BD42684A1BF,SHA256=7000911446776DD7782CBDECBF90F3887C849B2A63A25C3964CD85F5A208ADC4,IMPHASH=77DDE1193FCD7DC3EEA722F26FBD15D6{8223a6b9-135e-6902-0501-000000002b00}11608C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" soc101win11\Administrator +154100x80000000000000009672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:11.200{8223a6b9-148b-6902-bd01-000000002b00}2164C:\Program Files (x86)\Java\jre1.8.0_431\bin\javaws.exe11.431.2.10Java(TM) Web Start LauncherJava(TM) Platform SE 8 U431Oracle Corporationjavaws.exe"C:\Program Files (x86)\Java\jre1.8.0_431\bin\javaws.exe" -J-Djdk.disableLastUsageTracking=true -SSVBaselineUpdateC:\WINDOWS\SysWOW64\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=DDC5988EB4B4CC5BEE5921C3D9425325,SHA256=9559835CEF3BEC420CA36E8CC420ED316EECF0E03ACE26C0FD4B94B3ED7C3E0A,IMPHASH=707CEB865C9D276F7F39A10EEFB9CB15{8223a6b9-148a-6902-bc01-000000002b00}7784C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -autosoc101win11\Administrator +154100x80000000000000009673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:11.255{8223a6b9-148b-6902-be01-000000002b00}4544C:\Program Files (x86)\Java\jre1.8.0_431\bin\jp2launcher.exe11.431.2.10Java(TM) Web LauncherJava(TM) Platform SE 8 U431Oracle Corporationjp2launcher.exe"C:\Program Files (x86)\Java\jre1.8.0_431\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files (x86)\Java\jre1.8.0_431" -vma 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 -ma LVNTVkJhc2VsaW5lVXBkYXRlAC1ub3RXZWJKYXZhC:\WINDOWS\SysWOW64\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=678559C8C576A72A6FC232222FC75E13,SHA256=37F0670C8B6CA4A0CEE949CD8512A5B1ED1452C9E227DFE173204B815CE6C5F8,IMPHASH=361B2A11E26AD96F9AFC34926D02C659{8223a6b9-148b-6902-bd01-000000002b00}2164C:\Program Files (x86)\Java\jre1.8.0_431\bin\javaws.exe"C:\Program Files (x86)\Java\jre1.8.0_431\bin\javaws.exe" -J-Djdk.disableLastUsageTracking=true -SSVBaselineUpdatesoc101win11\Administrator +22542200x80000000000000009674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:11.557{8223a6b9-148a-6902-bc01-000000002b00}7784javadl-esd-secure.oracle.com0type: 5 javadl-esd-secure.oracle.com.edgekey.net;type: 5 e13073.g.akamaiedge.net;::ffff:23.205.134.132;C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exesoc101win11\Administrator +154100x80000000000000009675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:15.347{8223a6b9-148f-6902-bf01-000000002b00}3956C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource schedulerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +22542200x80000000000000009676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:18.718{8223a6b9-148b-6902-be01-000000002b00}4544wpad1460-C:\Program Files (x86)\Java\jre1.8.0_431\bin\jp2launcher.exesoc101win11\Administrator +22542200x80000000000000009677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:19.371{8223a6b9-148b-6902-be01-000000002b00}4544javadl-esd-secure.oracle.com0type: 5 javadl-esd-secure.oracle.com.edgekey.net;type: 5 e13073.g.akamaiedge.net;::ffff:23.205.134.132;C:\Program Files (x86)\Java\jre1.8.0_431\bin\jp2launcher.exesoc101win11\Administrator +11241100x80000000000000009678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:39.243{8223a6b9-148b-6902-be01-000000002b00}4544C:\Program Files (x86)\Java\jre1.8.0_431\bin\jp2launcher.exeC:\Users\Administrator\AppData\LocalLow\Sun\Java\Deployment\security\securitypack.jar2025-09-03 14:01:12.109soc101win11\Administrator +154100x80000000000000009679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:51.271{8223a6b9-14b3-6902-c501-000000002b00}3340C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:20:55.404{8223a6b9-14b7-6902-ca01-000000002b00}11824C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +11241100x80000000000000009681Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:07.178{8223a6b9-14b3-6902-c501-000000002b00}3340C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeC:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\141.0.3537.99\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe2025-10-29 13:21:07.178NT AUTHORITY\SYSTEM +154100x80000000000000009682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:10.197{8223a6b9-14c6-6902-cb01-000000002b00}11296C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationmini_installer.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stableC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=CBC4497AC4C23457F0CAC7642579B4ED,SHA256=4A9BF0D8F69259F18CB0AD75F8EB8849FDD190CB313CDD95165831A3E1956D7E,IMPHASH=BDE7ED863CD6A372CFC7499C55606DDC{8223a6b9-14b3-6902-c501-000000002b00}3340C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcNT AUTHORITY\SYSTEM +11241100x80000000000000009683Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:10.387{8223a6b9-14c6-6902-cb01-000000002b00}11296C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exeC:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe2025-10-29 13:21:10.387NT AUTHORITY\SYSTEM +154100x80000000000000009684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:10.581{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --previous-version="140.0.3485.66" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stableC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14c6-6902-cb01-000000002b00}11296C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stableNT AUTHORITY\SYSTEM +154100x80000000000000009685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:10.656{8223a6b9-14c6-6902-cd01-000000002b00}10572C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\WINDOWS\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=141.0.7390.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=141.0.3537.99 --initial-client-data=0x248,0x24c,0x250,0x1ec,0x254,0x7ff729c29568,0x7ff729c29574,0x7ff729c29580C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --previous-version="140.0.3485.66" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stableNT AUTHORITY\SYSTEM +13241300x80000000000000009686Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:21:11.229{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|bf58d33825109b07\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\install\{804b9088-ea66-45b6-bf36-ddb8dcb34152}\microsoftedge_x64_141.0.3537.99_140.0.3485.66.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009687Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:21:11.229{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|bf58d33825109b07\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009688Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:21:11.229{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|bf58d33825109b07\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009689Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:21:11.229{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|bf58d33825109b07\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009690Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:21:11.258{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|6e997736d5f9844b\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\install\{804b9088-ea66-45b6-bf36-ddb8dcb34152}\edgemitmp_b15d0.tmp\setup.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009691Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:21:11.258{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|6e997736d5f9844b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009692Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:21:11.258{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|6e997736d5f9844b\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009693Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:21:11.258{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|6e997736d5f9844b\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +11241100x80000000000000009694Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:29.785{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\BHO\ie_to_edge_bho.dll2025-10-29 13:21:29.785NT AUTHORITY\SYSTEM +11241100x80000000000000009695Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:29.791{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\BHO\ie_to_edge_bho_64.dll2025-10-29 13:21:29.791NT AUTHORITY\SYSTEM +11241100x80000000000000009696Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:29.813{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\BHO\ie_to_edge_stub.exe2025-10-29 13:21:29.811NT AUTHORITY\SYSTEM +11241100x80000000000000009697Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:29.824{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\concrt140.dll2025-10-29 13:21:29.824NT AUTHORITY\SYSTEM +11241100x80000000000000009698Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:29.838{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\cookie_exporter.exe2025-10-29 13:21:29.838NT AUTHORITY\SYSTEM +11241100x80000000000000009699Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:29.848{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\d3dcompiler_47.dll2025-10-29 13:21:29.848NT AUTHORITY\SYSTEM +11241100x80000000000000009700Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:29.905{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\dual_engine_adapter_x64.dll2025-10-29 13:21:29.905NT AUTHORITY\SYSTEM +11241100x80000000000000009701Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:29.934{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\dxcompiler.dll2025-10-29 13:21:29.934NT AUTHORITY\SYSTEM +11241100x80000000000000009702Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:30.116{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\dxil.dll2025-10-29 13:21:30.116NT AUTHORITY\SYSTEM +11241100x80000000000000009703Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:30.148{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\EBWebView\x64\EmbeddedBrowserWebView.dll2025-10-29 13:21:30.148NT AUTHORITY\SYSTEM +11241100x80000000000000009704Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:30.196{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\EBWebView\x86\EmbeddedBrowserWebView.dll2025-10-29 13:21:30.196NT AUTHORITY\SYSTEM +11241100x80000000000000009705Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:30.243{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\elevated_tracing_service.exe2025-10-29 13:21:30.243NT AUTHORITY\SYSTEM +11241100x80000000000000009706Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:30.296{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\elevation_service.exe2025-10-29 13:21:30.296NT AUTHORITY\SYSTEM +11241100x80000000000000009707Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:30.322{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\eventlog_provider.dll2025-10-29 13:21:30.322NT AUTHORITY\SYSTEM +11241100x80000000000000009708Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:30.322{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\ffmpeg.dll2025-10-29 13:21:30.322NT AUTHORITY\SYSTEM +11241100x80000000000000009709Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:30.417{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\identity_helper.exe2025-10-29 13:21:30.417NT AUTHORITY\SYSTEM +11241100x80000000000000009710Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:30.480{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\learning_tools.dll2025-10-29 13:21:30.480NT AUTHORITY\SYSTEM +11241100x80000000000000009711Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:30.496{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\libEGL.dll2025-10-29 13:21:30.496NT AUTHORITY\SYSTEM +11241100x80000000000000009712Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:30.516{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\libGLESv2.dll2025-10-29 13:21:30.516NT AUTHORITY\SYSTEM +11241100x80000000000000009713Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:31.506{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\microsoft_shell_integration.dll2025-10-29 13:21:31.506NT AUTHORITY\SYSTEM +11241100x80000000000000009714Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:31.521{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\mip_core.dll2025-10-29 13:21:31.521NT AUTHORITY\SYSTEM +11241100x80000000000000009715Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:31.582{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\mip_core_gn.dll2025-10-29 13:21:31.582NT AUTHORITY\SYSTEM +11241100x80000000000000009716Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:31.681{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\mip_protection_sdk.dll2025-10-29 13:21:31.681NT AUTHORITY\SYSTEM +11241100x80000000000000009717Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:31.709{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msedge.dll2025-10-29 13:21:31.709NT AUTHORITY\SYSTEM +11241100x80000000000000009718Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:36.670{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msedge.exe2025-10-29 13:21:36.670NT AUTHORITY\SYSTEM +11241100x80000000000000009719Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:36.712{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msedgewebview2.exe2025-10-29 13:21:36.712NT AUTHORITY\SYSTEM +11241100x80000000000000009720Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:36.775{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msedge_elf.dll2025-10-29 13:21:36.775NT AUTHORITY\SYSTEM +11241100x80000000000000009721Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:36.807{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msedge_proxy.exe2025-10-29 13:21:36.807NT AUTHORITY\SYSTEM +11241100x80000000000000009722Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:36.839{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msedge_pwa_launcher.exe2025-10-29 13:21:36.839NT AUTHORITY\SYSTEM +11241100x80000000000000009723Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:36.855{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msedge_wer.dll2025-10-29 13:21:36.855NT AUTHORITY\SYSTEM +11241100x80000000000000009724Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:36.871{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\mspdf.dll2025-10-29 13:21:36.871NT AUTHORITY\SYSTEM +11241100x80000000000000009725Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.029{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msvcp140.dll2025-10-29 13:21:37.029NT AUTHORITY\SYSTEM +11241100x80000000000000009726Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.045{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\msvcp140_codecvt_ids.dll2025-10-29 13:21:37.045NT AUTHORITY\SYSTEM +11241100x80000000000000009727Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:37.053{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\notification_helper.exe2025-10-29 13:21:37.053NT AUTHORITY\SYSTEM +11241100x80000000000000009728Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.079{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\oneauth.dll2025-10-29 13:21:37.077NT AUTHORITY\SYSTEM +11241100x80000000000000009729Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.124{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\oneds.dll2025-10-29 13:21:37.124NT AUTHORITY\SYSTEM +11241100x80000000000000009730Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.181{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\onnxruntime.dll2025-10-29 13:21:37.164NT AUTHORITY\SYSTEM +11241100x80000000000000009731Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.213{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\onramp.dll2025-10-29 13:21:37.213NT AUTHORITY\SYSTEM +11241100x80000000000000009732Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.229{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\PdfPreview\PdfPreviewHandler.dll2025-10-29 13:21:37.229NT AUTHORITY\SYSTEM +11241100x80000000000000009733Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.235{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\prefs_enclave_x64.dll2025-10-29 13:21:37.235NT AUTHORITY\SYSTEM +11241100x80000000000000009734Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:37.245{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\pwahelper.exe2025-10-29 13:21:37.245NT AUTHORITY\SYSTEM +11241100x80000000000000009735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:37.484{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\show_third_party_software_licenses.bat2025-10-29 13:21:37.484NT AUTHORITY\SYSTEM +11241100x80000000000000009736Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.484{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\telclient.dll2025-10-29 13:21:37.484NT AUTHORITY\SYSTEM +11241100x80000000000000009737Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.562{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\vccorlib140.dll2025-10-29 13:21:37.562NT AUTHORITY\SYSTEM +11241100x80000000000000009738Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.578{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\vcruntime140.dll2025-10-29 13:21:37.578NT AUTHORITY\SYSTEM +11241100x80000000000000009739Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.594{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\vcruntime140_1.dll2025-10-29 13:21:37.594NT AUTHORITY\SYSTEM +11241100x80000000000000009740Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.626{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\vk_swiftshader.dll2025-10-29 13:21:37.626NT AUTHORITY\SYSTEM +11241100x80000000000000009741Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.693{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\vulkan-1.dll2025-10-29 13:21:37.693NT AUTHORITY\SYSTEM +11241100x80000000000000009742Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.705{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\wdag.dll2025-10-29 13:21:37.705NT AUTHORITY\SYSTEM +11241100x80000000000000009743Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.721{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\webview2_integration.dll2025-10-29 13:21:37.721NT AUTHORITY\SYSTEM +11241100x80000000000000009744Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.721{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll2025-10-29 13:21:37.721NT AUTHORITY\SYSTEM +11241100x80000000000000009745Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:21:37.946{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\wns_push_client.dll2025-10-29 13:21:37.946NT AUTHORITY\SYSTEM +11241100x80000000000000009746Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:37.958{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\EdgeCore\141.0.3537.99\Installer\setup.exe2025-10-29 13:21:37.958NT AUTHORITY\SYSTEM +11241100x80000000000000009747Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:38.274{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe2024-03-25 22:24:27.213NT AUTHORITY\SYSTEM +13241300x80000000000000009748Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:21:38.441{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge\PublisherMicrosoft CorporationNT AUTHORITY\SYSTEM +13241300x80000000000000009749Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:21:38.590{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MicrosoftEdgeElevationService\ImagePath"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\elevation_service.exe"NT AUTHORITY\SYSTEM +13241300x80000000000000009750Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:21:38.606{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\BHO\ie_to_edge_bho_64.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009751Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:21:38.606{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\BHO\ie_to_edge_bho.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009752Microsoft-Windows-Sysmon/Operationalsoc101win11T1176SetValue2025-10-29 13:21:38.622{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\(Default)IEToEdge BHONT AUTHORITY\SYSTEM +13241300x80000000000000009753Microsoft-Windows-Sysmon/Operationalsoc101win11T1176SetValue2025-10-29 13:21:38.622{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\(Default)IEToEdge BHONT AUTHORITY\SYSTEM +13241300x80000000000000009754Microsoft-Windows-Sysmon/Operationalsoc101win11T1176SetValue2025-10-29 13:21:38.622{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer1NT AUTHORITY\SYSTEM +13241300x80000000000000009755Microsoft-Windows-Sysmon/Operationalsoc101win11T1176SetValue2025-10-29 13:21:38.622{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer1NT AUTHORITY\SYSTEM +13241300x80000000000000009756Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:21:38.622{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\(Default)C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\PdfPreview\PdfPreviewHandler.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009757Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:21:38.622{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\WOW6432Node\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\(Default)C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\PdfPreview\PdfPreviewHandler.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009758Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:21:38.642{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\(Default)C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\EBWebView\x64\EmbeddedBrowserWebView.dllNT AUTHORITY\SYSTEM +13241300x80000000000000009759Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.642{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\http\shell\open\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" "%%1"NT AUTHORITY\SYSTEM +13241300x80000000000000009760Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.642{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\https\shell\open\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" "%%1"NT AUTHORITY\SYSTEM +11241100x80000000000000009761Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:38.654{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe2024-03-25 22:24:27.213NT AUTHORITY\SYSTEM +11241100x80000000000000009762Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:38.670{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe2024-03-25 22:24:27.213NT AUTHORITY\SYSTEM +154100x80000000000000009763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:38.737{8223a6b9-14e2-6902-ce01-000000002b00}11536C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --previous-version="140.0.3485.66" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stableNT AUTHORITY\SYSTEM +154100x80000000000000009764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:38.773{8223a6b9-14e2-6902-cf01-000000002b00}10876C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\WINDOWS\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=141.0.7390.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=141.0.3537.99 --initial-client-data=0x248,0x24c,0x250,0x224,0x254,0x7ff729c29568,0x7ff729c29574,0x7ff729c29580C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14e2-6902-ce01-000000002b00}11536C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1NT AUTHORITY\SYSTEM +11241100x80000000000000009765Microsoft-Windows-Sysmon/Operationalsoc101win11T10232025-10-29 13:21:38.953{8223a6b9-14e2-6902-ce01-000000002b00}11536C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk2024-11-11 18:43:55.121NT AUTHORITY\SYSTEM +13241300x80000000000000009766Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.969{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\microsoft-edge\shell\open\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" "%%1"NT AUTHORITY\SYSTEM +13241300x80000000000000009767Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.969{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\MSEdgeHTM\shell\open\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument %%1NT AUTHORITY\SYSTEM +13241300x80000000000000009768Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.969{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\MSEdgeHTM\shell\runas\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --do-not-de-elevate --single-argument %%1NT AUTHORITY\SYSTEM +13241300x80000000000000009769Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.969{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\MSEdgePDF\shell\open\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument %%1NT AUTHORITY\SYSTEM +13241300x80000000000000009770Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.969{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\MSEdgePDF\shell\runas\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --do-not-de-elevate --single-argument %%1NT AUTHORITY\SYSTEM +13241300x80000000000000009771Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.985{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\MSEdgeMHT\shell\open\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument %%1NT AUTHORITY\SYSTEM +13241300x80000000000000009772Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:38.985{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKCR\MSEdgeMHT\shell\runas\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --do-not-de-elevate --single-argument %%1NT AUTHORITY\SYSTEM +13241300x80000000000000009773Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:21:38.985{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\msedge.exe\(Default)C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009774Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:21:38.985{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\msedge.exe\PathC:\Program Files (x86)\Microsoft\Edge\ApplicationNT AUTHORITY\SYSTEM +13241300x80000000000000009775Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:21:38.985{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\msedge.exe\SupportedProtocols\http(Empty)NT AUTHORITY\SYSTEM +13241300x80000000000000009776Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:21:38.985{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\msedge.exe\SupportedProtocols\https(Empty)NT AUTHORITY\SYSTEM +13241300x80000000000000009777Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:21:39.000{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exeHKLM\SOFTWARE\Clients\StartMenuInternet\Microsoft Edge\shell\open\command\(Default)"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"NT AUTHORITY\SYSTEM +154100x80000000000000009778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:39.084{8223a6b9-14e3-6902-d001-000000002b00}7220C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe" --msedge --channel=stable --register-package-identity --verbose-logging --system-levelC:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --previous-version="140.0.3485.66" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stableNT AUTHORITY\SYSTEM +154100x80000000000000009779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:39.122{8223a6b9-14e3-6902-d101-000000002b00}6936C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe" --msedge --channel=stable --remove-deprecated-packages --verbose-logging --system-levelC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14c6-6902-cc01-000000002b00}2596C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\EDGEMITMP_B15D0.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{804B9088-EA66-45B6-BF36-DDB8DCB34152}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --previous-version="140.0.3485.66" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stableNT AUTHORITY\SYSTEM +154100x80000000000000009780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:39.147{8223a6b9-14e3-6902-d201-000000002b00}6908C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\WINDOWS\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=141.0.7390.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=141.0.3537.99 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ff741ec9568,0x7ff741ec9574,0x7ff741ec9580C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14e3-6902-d001-000000002b00}7220C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe" --msedge --channel=stable --register-package-identity --verbose-logging --system-levelNT AUTHORITY\SYSTEM +154100x80000000000000009781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:39.158{8223a6b9-14e3-6902-d301-000000002b00}6784C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\WINDOWS\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=141.0.7390.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=141.0.3537.99 --initial-client-data=0x248,0x24c,0x250,0x224,0x254,0x7ff741ec9568,0x7ff741ec9574,0x7ff741ec9580C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14e3-6902-d101-000000002b00}6936C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\Installer\setup.exe" --msedge --channel=stable --remove-deprecated-packages --verbose-logging --system-levelNT AUTHORITY\SYSTEM +13241300x80000000000000009782Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:21:39.380{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009783Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:21:39.380{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009784Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:21:39.380{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009785Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:21:39.380{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +154100x80000000000000009786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.083{8223a6b9-14ef-6902-d601-000000002b00}6304C:\Windows\System32\wermgr.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Problem ReportingMicrosoft® Windows® Operating SystemMicrosoft CorporationWerMgr"C:\WINDOWS\system32\wermgr.exe" -uploadC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ABE1D752643419A8252520AABF75C29D,SHA256=1707CB793B8F64B65CA5C2FEEB05CB7198349354E9E67ADE0671EEC3647F351B,IMPHASH=2FEAC3143808B4542A16622000CCFCAE{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.084{8223a6b9-14ef-6902-d701-000000002b00}9368C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe $(Arg0)C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.093{8223a6b9-14ef-6902-d801-000000002b00}4856C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.097{8223a6b9-14ef-6902-d901-000000002b00}852C:\Windows\System32\sc.exe10.0.26100.4484 (WinBuild.160101.0800)Service Control Manager Configuration ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationsc.exe"C:\WINDOWS\system32\sc.exe" start pushtoinstall registrationC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=C8F632A326219F85927B3F33A13F7C7D,SHA256=A452BFCB6000D03942DDFADDCDA5A7EB121447ED99B1BA090446B4A989F1F7AE,IMPHASH=42DADBD60BBC453DD1773FDC089E19B7{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.103{8223a6b9-14ef-6902-db01-000000002b00}4824C:\Windows\System32\sc.exe10.0.26100.4484 (WinBuild.160101.0800)Service Control Manager Configuration ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationsc.exe"C:\WINDOWS\system32\sc.exe" start InventorySvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=C8F632A326219F85927B3F33A13F7C7D,SHA256=A452BFCB6000D03942DDFADDCDA5A7EB121447ED99B1BA090446B4A989F1F7AE,IMPHASH=42DADBD60BBC453DD1773FDC089E19B7{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.103{8223a6b9-14ef-6902-da01-000000002b00}9904C:\Windows\System32\DeviceCensus.exe10.0.26100.4768 (WinBuild.160101.0800)Device CensusMicrosoft® Windows® Operating SystemMicrosoft CorporationDeviceCensus.exe"C:\WINDOWS\system32\devicecensus.exe" SystemCxtC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0373A144FE33787D388AD09696BF68C1,SHA256=7D39743380748C8CFB61F5C5227DBEF1BD14145AE49A51A7DB225BC4BB4FD4C6,IMPHASH=5505B520B281F5304AC8726CB6621184{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.115{8223a6b9-14ef-6902-dc01-000000002b00}6076C:\Windows\System32\UIEOrchestrator.exe-----"C:\WINDOWS\system32\UIEOrchestrator.exe" /SendHeartbeatC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=67EC4745AE66DB0F157BFFDF4DBED3EF,SHA256=0AC38DD6AC47808487B401BC87FA984AADDF558AC9118E9290C6A2A81C560EA8,IMPHASH=74AB2C7F85AC6BE882524A9D7D8063E9{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.117{8223a6b9-14ef-6902-dd01-000000002b00}6664C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXE"C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\PcaSvc.dll,PcaPatchSdbTaskC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.117{8223a6b9-14ef-6902-de01-000000002b00}2668C:\Windows\System32\wsqmcons.exe10.0.26100.1 (WinBuild.160101.0800)Windows SQM ConsolidatorMicrosoft® Windows® Operating SystemMicrosoft Corporationwsqmcons.exe"C:\WINDOWS\System32\wsqmcons.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E9D0427623E1DB95EEF5E9B30A2FD4D0,SHA256=76606F2540E958D1D4344A02EC9118D071CA3B62EDD8FC9FE0DC37EC15C70237,IMPHASH=BADE18FFC00BB7673C1A50C3D391F052{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.131{8223a6b9-14ef-6902-e001-000000002b00}7080C:\Windows\System32\UsoClient.exe10.0.26100.3037 (WinBuild.160101.0800)UsoClientMicrosoft® Windows® Operating SystemMicrosoft CorporationUsoClient"C:\WINDOWS\system32\usoclient.exe" StartScanC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0AFB6EB9D41AF833D65448734C47A4C2,SHA256=0A4C60CD2FBE6859B6C09F56C7051580F9582F106D1851750264733194B94DB3,IMPHASH=1BC6441172601AD7E84C0082681FF7D2{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.205{8223a6b9-14ef-6902-e101-000000002b00}7732C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.292{8223a6b9-14ef-6902-e301-000000002b00}11584C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe25.189.0928.0002Standalone UpdaterMicrosoft OneDriveMicrosoft CorporationOneDriveStandaloneUpdater.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe" /reportingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5E7499E58A3D2A15A08EFD8D4A5F8597,SHA256=378685419E4124BE02F4277A0B31EF638B5038C5471136B865CA745CF9424DC3,IMPHASH=3BF487005E1B1E1DE4C8941898CAE521{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.568{8223a6b9-14ef-6902-e501-000000002b00}11376C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe1450.2506.28022.0MoUSO Core Worker ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationMoUSOCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E048EE9A14933FFA4A9C9FC7A8A7F83B,SHA256=B4A080E7ABAC28ADCBB172B53060508457C9CEC25BC339F3DFA0A031CD881737,IMPHASH=D3DBFEDBF38C961BD70D128454E64766{8223a6b9-1393-6902-3901-000000002b00}10328C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvcNT AUTHORITY\SYSTEM +154100x80000000000000009799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.641{8223a6b9-14ef-6902-e601-000000002b00}892C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s PushToInstallC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009800Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:21:51.726{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wsqmcons.exe|dfcf1aefa7b90250\LowerCaseLongPathc:\windows\system32\wsqmcons.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009801Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:21:51.726{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wsqmcons.exe|dfcf1aefa7b90250\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009802Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:21:51.726{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wsqmcons.exe|dfcf1aefa7b90250\LinkDate09/25/2105 01:21:24NT AUTHORITY\SYSTEM +13241300x80000000000000009803Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:21:51.726{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wsqmcons.exe|dfcf1aefa7b90250\BinProductVersion10.0.26100.1NT AUTHORITY\SYSTEM +154100x80000000000000009804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:52.124{8223a6b9-14f0-6902-e901-000000002b00}3352C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k WbioSvcGroup -s WbioSrvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +22542200x80000000000000009805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:52.096{8223a6b9-132e-6902-c800-000000002b00}9780oneclient.sfx.ms0type: 5 oneclient.sfx.ms.edgesuite.net;type: 5 a124.dscd.akamai.net;::ffff:23.221.212.203;::ffff:23.221.212.196;::ffff:23.221.212.202;::ffff:23.221.212.214;::ffff:23.221.212.218;C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +354300x80000000000000009806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:51.730{8223a6b9-14ef-6902-dd01-000000002b00}6664C:\Windows\System32\rundll32.exeNT AUTHORITY\SYSTEMtcptruefalse172.16.143.133soc101win11.localdomain49943-false20.49.150.241-443https +22542200x80000000000000009807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:52.886{8223a6b9-14ef-6902-e301-000000002b00}11584ecs.office.com0type: 5 ecs.office.trafficmanager.net;type: 5 dual-s-0005-office.config.skype.com;type: 5 ecs-office.s-0005.dual-s-msedge.net;type: 5 s-0005.dual-s-msedge.net;::ffff:52.123.129.14;::ffff:52.123.128.14;C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exesoc101win11\Administrator +354300x80000000000000009808Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:21:52.969{8223a6b9-14ef-6902-e301-000000002b00}11584C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain49949-false52.123.129.14-443https +11241100x80000000000000009809Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:56.423{8223a6b9-14b3-6902-c501-000000002b00}3340C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeC:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\141.0.3537.99\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe2025-10-29 13:21:56.423NT AUTHORITY\SYSTEM +154100x80000000000000009810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:58.053{8223a6b9-14f6-6902-ec01-000000002b00}4436C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationmini_installer.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-levelC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=CBC4497AC4C23457F0CAC7642579B4ED,SHA256=4A9BF0D8F69259F18CB0AD75F8EB8849FDD190CB313CDD95165831A3E1956D7E,IMPHASH=BDE7ED863CD6A372CFC7499C55606DDC{8223a6b9-14b3-6902-c501-000000002b00}3340C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcNT AUTHORITY\SYSTEM +11241100x80000000000000009811Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:21:58.241{8223a6b9-14f6-6902-ec01-000000002b00}4436C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exeC:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe2025-10-29 13:21:58.241NT AUTHORITY\SYSTEM +154100x80000000000000009812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:58.413{8223a6b9-14f6-6902-ed01-000000002b00}3904C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --previous-version="140.0.3485.66" --msedgewebview --verbose-logging --do-not-launch-msedge --system-levelC:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14f6-6902-ec01-000000002b00}4436C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-levelNT AUTHORITY\SYSTEM +154100x80000000000000009813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:21:58.485{8223a6b9-14f6-6902-ee01-000000002b00}2104C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\WINDOWS\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=141.0.7390.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=141.0.3537.99 --initial-client-data=0x24c,0x250,0x254,0x248,0x258,0x7ff778e09568,0x7ff778e09574,0x7ff778e09580C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14f6-6902-ed01-000000002b00}3904C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --previous-version="140.0.3485.66" --msedgewebview --verbose-logging --do-not-launch-msedge --system-levelNT AUTHORITY\SYSTEM +13241300x80000000000000009814Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:21:59.114{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|2d57eb15df6c75a3\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\install\{60e5867b-1f8b-4608-949f-e4d05153d38e}\microsoftedge_x64_141.0.3537.99_140.0.3485.66.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009815Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:21:59.114{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|2d57eb15df6c75a3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009816Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:21:59.114{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|2d57eb15df6c75a3\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009817Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:21:59.114{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|2d57eb15df6c75a3\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009818Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:21:59.288{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|7c59c64e011a51a3\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\install\{60e5867b-1f8b-4608-949f-e4d05153d38e}\edgemitmp_fda10.tmp\setup.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009819Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:21:59.288{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|7c59c64e011a51a3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009820Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:21:59.288{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|7c59c64e011a51a3\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009821Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:21:59.288{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|7c59c64e011a51a3\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009822Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:22:00.222{8223a6b9-14f6-6902-ed01-000000002b00}3904C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exeHKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft EdgeWebView\PublisherMicrosoft CorporationNT AUTHORITY\SYSTEM +154100x80000000000000009823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:22:00.240{8223a6b9-14f8-6902-ef01-000000002b00}8788C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exe" --msedgewebview --delete-old-versions --system-level --verbose-loggingC:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14f6-6902-ed01-000000002b00}3904C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\EDGEMITMP_FDA10.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{60E5867B-1F8B-4608-949F-E4D05153D38E}\MicrosoftEdge_X64_141.0.3537.99_140.0.3485.66.exe" --previous-version="140.0.3485.66" --msedgewebview --verbose-logging --do-not-launch-msedge --system-levelNT AUTHORITY\SYSTEM +154100x80000000000000009824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:22:00.313{8223a6b9-14f8-6902-f001-000000002b00}8772C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exe141.0.3537.99Microsoft Edge InstallerMicrosoft Edge InstallerMicrosoft Corporationsetup.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\WINDOWS\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=141.0.7390.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=141.0.3537.99 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ff741ec9568,0x7ff741ec9574,0x7ff741ec9580C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=52A06F23215B48AF5CD33AA047609E71,SHA256=02AA85837EBBFF67329D77B3584231C3055DD7ECFA9196D5E8FA742A9B99F1AF,IMPHASH=FEAAA161935B3C215BB6530DC11DB019{8223a6b9-14f8-6902-ef01-000000002b00}8788C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exe" --msedgewebview --delete-old-versions --system-level --verbose-loggingNT AUTHORITY\SYSTEM +13241300x80000000000000009825Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:22:00.874{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009826Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:22:00.874{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009827Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:22:00.874{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009828Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:22:00.874{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +154100x80000000000000009829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:22:17.057{8223a6b9-1509-6902-f101-000000002b00}10836C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGV4cCBldGFnPSImcXVvdDtIQXJxczYzakpta3YxYlhWb05QcTh6QTYwVSt6TzBXaW1pNGt3SE9IZWRZPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMjA1LjkiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIzNTEiIGNvaG9ydD0icnJmQDAuNzYiPjx1cGRhdGVjaGVjay8-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-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSIxMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNDI2MTUzMDEzOCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI0MjYxNTgzOTgwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjQ0MTc2NzQzMTAiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImRvIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy8wOTNmODViOC1hNDc3LTQxMDYtYWY5MS05OGI0MGFkNDdjZTQ_UDE9MTc2MjM0ODg1MyZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1NNEtoSjRFNnZ4WWhabXA1SXpqV09KM2FDc1d6WmU5JTJiaGZwRFluakxNRmpnMVVEbHdBJTJmSjFmRzlVb094amFJUEhwMTJCN0olMmY3SGx1TW1JRWhzeklOUSUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IiIgY2RuX2NpZD0iLTEiIGNkbl9jY2M9IiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjU1Mjc1MTA0IiB0b3RhbD0iNTUyNzUxMDQiIGRvd25sb2FkX3RpbWVfbXM9IjEzOTQwIi8-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-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSIxMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNDI2MTU1NjgwNCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI0ODkwOTM3NTExIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PHBpbmcgYWN0aXZlPSIxIiBhZD0iNjg3NiIgcmQ9IjY4NzYiIHBpbmdfZnJlc2huZXNzPSJ7OTUyRUY2QUEtMzc4My00QzVGLUI1NjktOTAxREU4NjA5RjdCfSIvPjwvYXBwPjwvcmVxdWVzdD4C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.205.9\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-14b3-6902-c501-000000002b00}3340C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svcNT AUTHORITY\SYSTEM +534500x80000000000000009830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:03.279{8223a6b9-14ef-6902-e301-000000002b00}11584C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exesoc101win11\Administrator +154100x80000000000000009831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:09.513{8223a6b9-153d-6902-f201-000000002b00}6780C:\Windows\System32\directxdatabaseupdater.exe10.0.26100.3624 (WinBuild.160101.0800)DirectX Database UpdaterMicrosoft® Windows® Operating SystemMicrosoft CorporationDirectXDatabaseUpdater.exe"C:\WINDOWS\system32\directxdatabaseupdater.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=D2AAAEB94EA9E68B39410D240334F242,SHA256=49A3186F3EC106E8D1281DE9FC189CE3E606418371A8881D4876AD2A748FF6D5,IMPHASH=74B611F908F64357720ABBF5DAF48BF3{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x80000000000000009832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:11.360{8223a6b9-153f-6902-f401-000000002b00}12072C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wisvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:14.622{8223a6b9-1542-6902-f501-000000002b00}3764C:\Windows\servicing\TrustedInstaller.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Modules InstallerMicrosoft® Windows® Operating SystemMicrosoft CorporationTrustedInstaller.exeC:\WINDOWS\servicing\TrustedInstaller.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=23CF29D35F32448C19398B91E3C31186,SHA256=C037F1D455B27EF75391EECE7F25711CF3055006FA29C5D872DB4D54FEF0ADE8,IMPHASH=5E159CE7599ACD6CA7EC3122186D5DBC{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x80000000000000009834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:14.676{8223a6b9-1542-6902-f601-000000002b00}6140C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe10.0.26100.4933 (WinBuild.160101.0800)Windows Modules Installer WorkerMicrosoft® Windows® Operating SystemMicrosoft CorporationTiWorker.exeC:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=749679E003C18036BF998EB9BCE36A63,SHA256=3F42DBAF2BD7AD92577AFB6D47A8F3DC32DCB6A8E52BA7738FAEB31ED197ACDC,IMPHASH=0B85588480DF97BD963732E20722340E{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +15241500x80000000000000009835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:24.564{8223a6b9-1548-6902-f701-000000002b00}12156C:\Program Files\Google\Chrome\Application\chrome.exeC:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe2025-10-29 13:18:59.228MD5=3F3FB643A297CEAD99CE29679B368C51,SHA256=0E59B73EF9A2D702AA349D85B483C5FF493BE320EC4844DA581EA3627D44183E,IMPHASH=B34F154EC913D2D2C435CBD644E91687-soc101win11\Administrator +11241100x80000000000000009836Microsoft-Windows-Sysmon/Operationalsoc101win11Downloads2025-10-29 13:23:25.912{8223a6b9-1548-6902-f701-000000002b00}12156C:\Program Files\Google\Chrome\Application\chrome.exeC:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe:Zone.Identifier2025-10-29 13:18:59.228soc101win11\Administrator +15241500x80000000000000009837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:25.912{8223a6b9-1548-6902-f701-000000002b00}12156C:\Program Files\Google\Chrome\Application\chrome.exeC:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe:Zone.Identifier2025-10-29 13:18:59.228MD5=FBCCF14D504B7B2DBCB5A5BDA75BD93B,SHA256=EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913,IMPHASH=00000000000000000000000000000000[ZoneTransfer] ZoneId=3 soc101win11\Administrator +15241500x80000000000000009838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:25.912{8223a6b9-1548-6902-f701-000000002b00}12156C:\Program Files\Google\Chrome\Application\chrome.exeC:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe2025-10-29 13:18:59.228MD5=3F3FB643A297CEAD99CE29679B368C51,SHA256=0E59B73EF9A2D702AA349D85B483C5FF493BE320EC4844DA581EA3627D44183E,IMPHASH=B34F154EC913D2D2C435CBD644E91687-soc101win11\Administrator +15241500x80000000000000009839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:27.308{8223a6b9-1548-6902-f701-000000002b00}12156C:\Program Files\Google\Chrome\Application\chrome.exeC:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe:Zone.Identifier2025-10-29 13:18:59.228MD5=B6C15324DB8A38A8FC04A69810128993,SHA256=DF6A9658A6E64D3BB73662BBCA935552CD89116ADDFE785BA30988E5BE65B548,IMPHASH=00000000000000000000000000000000[ZoneTransfer] ZoneId=3 ReferrerUrl=https://lmstudio.ai/ soc101win11\Administrator +13241300x80000000000000009840Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:28.663{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00001898faf7f11810f3e9924b881c7379a800000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +15241500x80000000000000009841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:27.308{8223a6b9-1548-6902-f701-000000002b00}12156C:\Program Files\Google\Chrome\Application\chrome.exeC:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe2025-10-29 13:18:59.228MD5=3F3FB643A297CEAD99CE29679B368C51,SHA256=0E59B73EF9A2D702AA349D85B483C5FF493BE320EC4844DA581EA3627D44183E,IMPHASH=B34F154EC913D2D2C435CBD644E91687-soc101win11\Administrator +15241500x80000000000000009842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:28.788{8223a6b9-1548-6902-f701-000000002b00}12156C:\Program Files\Google\Chrome\Application\chrome.exeC:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe:Zone.Identifier2025-10-29 13:18:59.228MD5=4D52306740235D0B41B37B52AABCA928,SHA256=D71AA9909BCB0977CD7E757A9A532D87404DDA484DF2B9898B639130D99FB4DB,IMPHASH=00000000000000000000000000000000[ZoneTransfer] ZoneId=3 ReferrerUrl=https://lmstudio.ai/ HostUrl=https://installers.lmstudio.ai/win32/x64/0.3.30-2/LM-Studio-0.3.30-2-x64.exe soc101win11\Administrator +13241300x80000000000000009843Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:30.749{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00001137dfe0973a35d369698cb7e3e1b1f300000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009844Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:30.749{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\deploymentagent.|eaf9e0f0eec20da\LowerCaseLongPathc:\program files\windowsapps\microsoft.windowsappruntime.1.7_7000.617.2103.0_x86__8wekyb3d8bbwe\deploymentagent.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009845Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:30.749{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\deploymentagent.|eaf9e0f0eec20da\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009846Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:30.749{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\deploymentagent.|eaf9e0f0eec20da\LinkDate03/20/2014 10:13:34NT AUTHORITY\SYSTEM +13241300x80000000000000009847Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:30.751{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\deploymentagent.|eaf9e0f0eec20da\BinProductVersion1.7.0.0NT AUTHORITY\SYSTEM +13241300x80000000000000009848Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:30.751{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\restartagent.exe|8132b012edcf9831\LowerCaseLongPathc:\program files\windowsapps\microsoft.windowsappruntime.1.7_7000.617.2103.0_x86__8wekyb3d8bbwe\restartagent.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009849Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:30.751{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\restartagent.exe|8132b012edcf9831\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009850Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:30.751{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\restartagent.exe|8132b012edcf9831\LinkDate12/24/1989 13:18:40NT AUTHORITY\SYSTEM +13241300x80000000000000009851Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:30.751{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\restartagent.exe|8132b012edcf9831\BinProductVersion1.7.0.0NT AUTHORITY\SYSTEM +154100x80000000000000009852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:30.807{8223a6b9-1552-6902-f901-000000002b00}2452C:\Windows\System32\UCConfigTask.exe-----"C:\WINDOWS\system32\UCConfigTask.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=BA4296C76B62029E6A2F2DDF0A6BB46D,SHA256=2101694E6FF5C9DD56D5C1060E7C1C86E8E41771A232E473568170AD76B35B25,IMPHASH=75AF2A195BD7CBDCEB4EDB2C9DB099B8{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +13241300x80000000000000009853Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.076{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000091a2189776cb647370517d0a1b63ae8e00000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009854Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.076{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mspaint.exe|723501e00031a7ac\LowerCaseLongPathc:\program files\windowsapps\microsoft.paint_11.2507.371.0_x64__8wekyb3d8bbwe\paintapp\mspaint.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009855Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.076{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mspaint.exe|723501e00031a7ac\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009856Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.076{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mspaint.exe|723501e00031a7ac\LinkDate08/27/2025 15:57:15NT AUTHORITY\SYSTEM +13241300x80000000000000009857Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.076{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mspaint.exe|723501e00031a7ac\BinProductVersion11.2507.371.0NT AUTHORITY\SYSTEM +13241300x80000000000000009858Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000044ca90c0a87425537d444a6ac152119400000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009859Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|d841cb9496114e09\LowerCaseLongPathc:\program files\windowsapps\microsoft.yourphone_1.25082.136.0_x64__8wekyb3d8bbwe\createdump.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009860Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|d841cb9496114e09\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009861Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|d841cb9496114e09\LinkDate08/19/2025 22:12:52NT AUTHORITY\SYSTEM +13241300x80000000000000009862Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|d841cb9496114e09\BinProductVersion9.0.925.41916NT AUTHORITY\SYSTEM +13241300x80000000000000009863Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\phoneexperienceh|df5907bdaf7c435a\LowerCaseLongPathc:\program files\windowsapps\microsoft.yourphone_1.25082.136.0_x64__8wekyb3d8bbwe\phoneexperiencehost.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009864Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\phoneexperienceh|df5907bdaf7c435a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009865Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\phoneexperienceh|df5907bdaf7c435a\LinkDate08/19/2025 04:39:28NT AUTHORITY\SYSTEM +13241300x80000000000000009866Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\phoneexperienceh|df5907bdaf7c435a\BinProductVersion1.25082.136.0NT AUTHORITY\SYSTEM +13241300x80000000000000009867Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.181{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\yourphoneappprox|4e782c7d01720a24\LowerCaseLongPathc:\program files\windowsapps\microsoft.yourphone_1.25082.136.0_x64__8wekyb3d8bbwe\yourphoneappproxy.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009868Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.184{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\yourphoneappprox|4e782c7d01720a24\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009869Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.184{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\yourphoneappprox|4e782c7d01720a24\LinkDate08/19/2025 04:39:28NT AUTHORITY\SYSTEM +13241300x80000000000000009870Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.184{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\yourphoneappprox|4e782c7d01720a24\BinProductVersion1.25082.136.0NT AUTHORITY\SYSTEM +13241300x80000000000000009871Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.409{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000e92459596134a439ba50756e43e1d8e500000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009872Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.409{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\photos.autoplay.|3e0a74bf7a5a7905\LowerCaseLongPathc:\program files\windowsapps\microsoft.windows.photos_2025.11080.28001.0_x64__8wekyb3d8bbwe\photos.autoplay.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009873Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.409{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\photos.autoplay.|3e0a74bf7a5a7905\LinkDate08/28/2025 07:18:00NT AUTHORITY\SYSTEM +13241300x80000000000000009874Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.409{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\photos.exe|3ad4c704ac8d2f8c\LowerCaseLongPathc:\program files\windowsapps\microsoft.windows.photos_2025.11080.28001.0_x64__8wekyb3d8bbwe\photos.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009875Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.409{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\photos.exe|3ad4c704ac8d2f8c\LinkDate08/28/2025 07:42:46NT AUTHORITY\SYSTEM +13241300x80000000000000009876Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.425{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000012a37ac2fcade370a60ffba83e7ba53b00000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009877Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.425{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\storeexperienceh|c90c6b4fa357acd\LowerCaseLongPathc:\program files\windowsapps\microsoft.storepurchaseapp_22507.1401.8.0_x64__8wekyb3d8bbwe\storeexperiencehost.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009878Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.425{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\storeexperienceh|c90c6b4fa357acd\LinkDate09/09/2025 20:21:41NT AUTHORITY\SYSTEM +13241300x80000000000000009879Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.425{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\storeexperienceh|c90c6b4fa357acd\BinProductVersion0.0.0.0NT AUTHORITY\SYSTEM +13241300x80000000000000009880Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.464{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000079d8a2ffe8e33604e7d20381d7cb05600000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009881Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.464{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftstartfe|54aecbc47cf0b4b3\LowerCaseLongPathc:\program files\windowsapps\microsoft.startexperiencesapp_1.124.0.0_x64__8wekyb3d8bbwe\microsoftstartfeedprovider\microsoftstartfeedprovider.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009882Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.464{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftstartfe|54aecbc47cf0b4b3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009883Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.464{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftstartfe|54aecbc47cf0b4b3\LinkDate08/26/2025 07:13:02NT AUTHORITY\SYSTEM +13241300x80000000000000009884Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.464{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftstartfe|54aecbc47cf0b4b3\BinProductVersion1.124.0.0NT AUTHORITY\SYSTEM +13241300x80000000000000009885Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.553{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ucconfigtask.exe|952bd19eaba80568\LowerCaseLongPathc:\windows\system32\ucconfigtask.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009886Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.553{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ucconfigtask.exe|952bd19eaba80568\LinkDate10/27/2093 14:57:06NT AUTHORITY\SYSTEM +13241300x80000000000000009887Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00007f2be4685f7219cbd40c10bc3e341ace00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009888Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|46d9b92d14d618fc\LowerCaseLongPathc:\program files\windowsapps\microsoftwindows.crossdevice_1.25082.70.0_x64__cw5n1h2txyewy\createdump.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009889Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|46d9b92d14d618fc\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009890Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|46d9b92d14d618fc\LinkDate08/19/2025 22:12:52NT AUTHORITY\SYSTEM +13241300x80000000000000009891Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|46d9b92d14d618fc\BinProductVersion9.0.925.41916NT AUTHORITY\SYSTEM +13241300x80000000000000009892Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicefiles|8438f09b49fc08ac\LowerCaseLongPathc:\program files\windowsapps\microsoftwindows.crossdevice_1.25082.70.0_x64__cw5n1h2txyewy\crossdevicefileshost.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009893Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicefiles|8438f09b49fc08ac\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009894Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicefiles|8438f09b49fc08ac\LinkDate08/19/2025 04:39:28NT AUTHORITY\SYSTEM +13241300x80000000000000009895Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicefiles|8438f09b49fc08ac\BinProductVersion1.25082.70.0NT AUTHORITY\SYSTEM +13241300x80000000000000009896Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdeviceservi|ebb6c0cb0a2c8bd0\LowerCaseLongPathc:\program files\windowsapps\microsoftwindows.crossdevice_1.25082.70.0_x64__cw5n1h2txyewy\crossdeviceservice.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009897Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdeviceservi|ebb6c0cb0a2c8bd0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009898Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdeviceservi|ebb6c0cb0a2c8bd0\LinkDate08/19/2025 04:39:28NT AUTHORITY\SYSTEM +13241300x80000000000000009899Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdeviceservi|ebb6c0cb0a2c8bd0\BinProductVersion1.25082.70.0NT AUTHORITY\SYSTEM +13241300x80000000000000009900Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicesetti|27673d1892c992\LowerCaseLongPathc:\program files\windowsapps\microsoftwindows.crossdevice_1.25082.70.0_x64__cw5n1h2txyewy\crossdevicesettingshost.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009901Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicesetti|27673d1892c992\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009902Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicesetti|27673d1892c992\LinkDate08/19/2025 04:39:28NT AUTHORITY\SYSTEM +13241300x80000000000000009903Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicesetti|27673d1892c992\BinProductVersion1.25082.70.0NT AUTHORITY\SYSTEM +13241300x80000000000000009904Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicestrea|a51ba49c69cfdcc0\LowerCaseLongPathc:\program files\windowsapps\microsoftwindows.crossdevice_1.25082.70.0_x64__cw5n1h2txyewy\crossdevicestreaminghost.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009905Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicestrea|a51ba49c69cfdcc0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009906Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicestrea|a51ba49c69cfdcc0\LinkDate08/19/2025 04:39:28NT AUTHORITY\SYSTEM +13241300x80000000000000009907Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.569{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\crossdevicestrea|a51ba49c69cfdcc0\BinProductVersion1.25082.70.0NT AUTHORITY\SYSTEM +13241300x80000000000000009908Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00005aa9ecfb2365777989444f47138d55a500000908\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009909Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\agentproxy.exe|e509db705225c07b\LowerCaseLongPathc:\program files\windowsapps\microsoft.copilot_1.25091.124.0_x64__8wekyb3d8bbwe\agentisolationenvironment.agentproxy\agentproxy.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009910Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\agentproxy.exe|e509db705225c07b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009911Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\agentproxy.exe|e509db705225c07b\LinkDate08/30/2025 05:05:06NT AUTHORITY\SYSTEM +13241300x80000000000000009912Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\agentproxy.exe|e509db705225c07b\BinProductVersion2125.24201.0.2000NT AUTHORITY\SYSTEM +13241300x80000000000000009913Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\agentrelay.exe|32fe7372493d232d\LowerCaseLongPathc:\program files\windowsapps\microsoft.copilot_1.25091.124.0_x64__8wekyb3d8bbwe\agentisolationenvironment.agentrelay\agentrelay.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009914Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\agentrelay.exe|32fe7372493d232d\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009915Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\agentrelay.exe|32fe7372493d232d\LinkDate08/30/2025 05:04:20NT AUTHORITY\SYSTEM +13241300x80000000000000009916Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\agentrelay.exe|32fe7372493d232d\BinProductVersion2125.24201.0.2000NT AUTHORITY\SYSTEM +13241300x80000000000000009917Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\copilot.exe|a86a46355acf5494\LowerCaseLongPathc:\program files\windowsapps\microsoft.copilot_1.25091.124.0_x64__8wekyb3d8bbwe\copilot.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009918Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\copilot.exe|a86a46355acf5494\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009919Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\copilot.exe|a86a46355acf5494\LinkDate02/11/2025 07:45:04NT AUTHORITY\SYSTEM +13241300x80000000000000009920Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\copilot.exe|a86a46355acf5494\BinProductVersion1.25091.124.0NT AUTHORITY\SYSTEM +13241300x80000000000000009921Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|b0c370b2e1f8ac64\LowerCaseLongPathc:\program files\windowsapps\microsoft.copilot_1.25091.124.0_x64__8wekyb3d8bbwe\createdump.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009922Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|b0c370b2e1f8ac64\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009923Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|b0c370b2e1f8ac64\LinkDate02/11/2025 23:09:42NT AUTHORITY\SYSTEM +13241300x80000000000000009924Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:31.797{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\createdump.exe|b0c370b2e1f8ac64\BinProductVersion9.0.325.11113NT AUTHORITY\SYSTEM +13241300x80000000000000009925Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.828{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000f3edcca02b28fa6b6d9d886193d7eb9f00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009926Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.839{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000043f06e4606a5b0c90f145bdb54661d0000000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009927Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.855{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000f09fcf839436ef615329a18436d6aa2e00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009928Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.870{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000058c74b90854c6b3a83fc0cd662ac4be100000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009929Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.892{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00000df41590f3481bc998f901d143c291a400000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009930Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.902{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000569dfd1f6adc82a052cfeb27ef8c6b6500000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009931Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.918{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00002533c0dff4125d8fc07606d0a4b49d0200000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009932Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.953{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000cc270d2e4ef4706301e2213b1382de5400000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009933Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:31.982{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000039db4df8972173e2e0deada82651bed300000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009934Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.014{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00006963d9cfac7c245904b67305ad8368ac00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009935Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.029{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000e800eeac9188434fa52e713804c1fb5c00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009936Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.045{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000dd856eb319dd32b99d9876fea4c1c58b00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009937Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.077{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000060aee02a7225d270f3b317fb16974b8100000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009938Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.077{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000d17efb60f5d138ca7f8a6dae92cc17e000000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009939Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.262{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000dc311b89ca05b069701a29970a7a512f00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009940Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.300{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000a2aec90feb6b539db4194812ad27c1bb00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009941Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.356{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000e8e99392cff038618d746cc72420b70e00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009942Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.378{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000ec14a9b7fc41e90fa6633fc736ff678600000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009943Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.394{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00009173232e564a14ac7b645882045838d100000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009944Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.810{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00002d95c5cf28fcb603e20e86d44fd965dd00000904\PublisherCN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009945Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.826{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000068b962a8b5122674befacd0a81a6198400000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009946Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.886{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00009dc11adba88ba05ef8088e8572b094ab00000904\PublisherCN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USNT AUTHORITY\SYSTEM +13241300x80000000000000009947Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:32.886{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\m365copilot_auto|17a74268e2ad7c59\LowerCaseLongPathc:\program files\windowsapps\microsoft.microsoftofficehub_19.2509.42011.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009948Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:32.886{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\m365copilot_auto|17a74268e2ad7c59\LinkDate09/12/2025 08:00:01NT AUTHORITY\SYSTEM +13241300x80000000000000009949Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:32.886{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\webviewhost.exe|b22ed0c091271a9b\LowerCaseLongPathc:\program files\windowsapps\microsoft.microsoftofficehub_19.2509.42011.0_x64__8wekyb3d8bbwe\webviewhost.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009950Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:32.886{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\webviewhost.exe|b22ed0c091271a9b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009951Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:32.886{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\webviewhost.exe|b22ed0c091271a9b\LinkDate09/12/2025 08:02:59NT AUTHORITY\SYSTEM +13241300x80000000000000009952Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:32.886{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\webviewhost.exe|b22ed0c091271a9b\BinProductVersion19.2509.42011.0NT AUTHORITY\SYSTEM +13241300x80000000000000009953Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.125{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009954Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.125{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009955Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.125{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\LinkDate141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009956Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.125{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009957Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000112aaceed10be720d4ace1ca5200709d0000ffff\PublisherMicrosoft CorporationNT AUTHORITY\SYSTEM +13241300x80000000000000009958Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|53867648d9dc368b\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\cookie_exporter.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009959Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|53867648d9dc368b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009960Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|53867648d9dc368b\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009961Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|53867648d9dc368b\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009962Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|28978edf65eea7d3\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\elevated_tracing_service.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009963Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|28978edf65eea7d3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009964Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|28978edf65eea7d3\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009965Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|28978edf65eea7d3\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009966Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|3128a6298f3f6b35\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\elevation_service.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009967Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|3128a6298f3f6b35\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009968Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|3128a6298f3f6b35\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009969Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|3128a6298f3f6b35\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009970Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|7b3e819cf9c8fac6\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\identity_helper.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009971Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|7b3e819cf9c8fac6\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009972Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|7b3e819cf9c8fac6\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009973Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|7b3e819cf9c8fac6\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009974Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|f9ac0b84441b964a\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\bho\ie_to_edge_stub.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009975Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|f9ac0b84441b964a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009976Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|f9ac0b84441b964a\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009977Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|f9ac0b84441b964a\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009978Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|397072706b6e96c0\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\msedge.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009979Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|397072706b6e96c0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009980Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|397072706b6e96c0\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009981Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|397072706b6e96c0\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009982Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|f5eaddb50d509bdb\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\msedge_proxy.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009983Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|f5eaddb50d509bdb\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009984Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|f5eaddb50d509bdb\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009985Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|f5eaddb50d509bdb\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009986Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|d44f8514d7a214ce\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\msedge_pwa_launcher.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009987Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|d44f8514d7a214ce\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009988Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|d44f8514d7a214ce\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009989Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|d44f8514d7a214ce\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009990Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|4f731802fc11a414\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\msedgewebview2.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009991Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|4f731802fc11a414\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009992Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.161{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|4f731802fc11a414\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009993Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|4f731802fc11a414\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009994Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_cli|ba9a3277d189baa9\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\notification_click_helper.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009995Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_cli|ba9a3277d189baa9\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x80000000000000009996Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_cli|ba9a3277d189baa9\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x80000000000000009997Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_cli|ba9a3277d189baa9\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x80000000000000009998Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|6a375e38398c8585\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\notification_helper.exeNT AUTHORITY\SYSTEM +13241300x80000000000000009999Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|6a375e38398c8585\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010000Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|6a375e38398c8585\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010001Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|6a375e38398c8585\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010002Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|f2bd50cea6cdec63\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\pwahelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010003Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|f2bd50cea6cdec63\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010004Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|f2bd50cea6cdec63\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010005Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|f2bd50cea6cdec63\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010006Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\141.0.3537.99\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010007Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010008Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010009Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.177{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|1915d9d248cc8324\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010010Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.193{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|ab31671306fc9285\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010011Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.193{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|ab31671306fc9285\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010012Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.193{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|ab31671306fc9285\LinkDate140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010013Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.193{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|ab31671306fc9285\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010014Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.239{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|d7d47c01d8603af5\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\msedgewebview2.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010015Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.239{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|d7d47c01d8603af5\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010016Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.239{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|d7d47c01d8603af5\LinkDate140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010017Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.239{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|d7d47c01d8603af5\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010018Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.272{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010019Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.272{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010020Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.272{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\LinkDate141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010021Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.272{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010022Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.320{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\000022285551e18dfbea5107dc27ddcb2f190000ffff\PublisherMicrosoft CorporationNT AUTHORITY\SYSTEM +13241300x800000000000000010023Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.320{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|59bd29186f5de469\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\cookie_exporter.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010024Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.320{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|59bd29186f5de469\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010025Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.320{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|59bd29186f5de469\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010026Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.320{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|59bd29186f5de469\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010027Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|723d9e1dd2b52060\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\cookie_exporter.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010028Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|723d9e1dd2b52060\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010029Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|723d9e1dd2b52060\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010030Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|723d9e1dd2b52060\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010031Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|28333de23c7184d6\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\elevated_tracing_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010032Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|28333de23c7184d6\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010033Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|28333de23c7184d6\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010034Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|28333de23c7184d6\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010035Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|c980083d9c807a92\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\elevated_tracing_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010036Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|c980083d9c807a92\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010037Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|c980083d9c807a92\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010038Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|c980083d9c807a92\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010039Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|4fce3072ba1311c\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\elevation_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010040Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|4fce3072ba1311c\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010041Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|4fce3072ba1311c\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010042Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|4fce3072ba1311c\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010043Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|adba66d024e97241\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\elevation_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010044Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|adba66d024e97241\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010045Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|adba66d024e97241\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010046Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|adba66d024e97241\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010047Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.324{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|3203fa8f9c24b9ad\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\identity_helper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010048Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|3203fa8f9c24b9ad\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010049Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|3203fa8f9c24b9ad\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010050Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|3203fa8f9c24b9ad\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010051Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|58968d12637af4b5\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\identity_helper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010052Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|58968d12637af4b5\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010053Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|58968d12637af4b5\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010054Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|58968d12637af4b5\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010055Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|5a7619150ed80bc4\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\bho\ie_to_edge_stub.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010056Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|5a7619150ed80bc4\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010057Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|5a7619150ed80bc4\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010058Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|5a7619150ed80bc4\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010059Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|92f46338c62de03a\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\bho\ie_to_edge_stub.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010060Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|92f46338c62de03a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010061Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|92f46338c62de03a\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010062Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|92f46338c62de03a\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010063Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|6c06d9080e581f62\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\msedge.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010064Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|6c06d9080e581f62\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010065Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|6c06d9080e581f62\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010066Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|6c06d9080e581f62\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010067Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|706431e322c0a298\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\msedge.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010068Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|706431e322c0a298\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010069Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|706431e322c0a298\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010070Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|706431e322c0a298\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010071Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.326{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|14fe4ae20fada540\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\msedge_proxy.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010072Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|14fe4ae20fada540\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010073Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|14fe4ae20fada540\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010074Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|14fe4ae20fada540\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010075Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|ebad7d0b78340a85\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\msedge_proxy.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010076Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|ebad7d0b78340a85\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010077Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|ebad7d0b78340a85\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010078Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|ebad7d0b78340a85\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010079Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|1c26b3aa04a81858\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\msedge_pwa_launcher.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010080Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|1c26b3aa04a81858\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010081Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|1c26b3aa04a81858\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010082Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|1c26b3aa04a81858\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010083Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|b658d357214c2291\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\msedge_pwa_launcher.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010084Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|b658d357214c2291\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010085Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|b658d357214c2291\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010086Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|b658d357214c2291\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010087Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|1abc869faf5353f4\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\msedgewebview2.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010088Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|1abc869faf5353f4\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010089Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|1abc869faf5353f4\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010090Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|1abc869faf5353f4\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010091Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|d7d47c01d8603af5\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\msedgewebview2.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010092Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|d7d47c01d8603af5\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010093Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|d7d47c01d8603af5\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010094Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|d7d47c01d8603af5\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010095Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|20457060ad0b9f79\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\notification_helper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010096Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|20457060ad0b9f79\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010097Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|20457060ad0b9f79\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010098Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|20457060ad0b9f79\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010099Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|fdaea5f4b591a6a4\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\notification_helper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010100Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|fdaea5f4b591a6a4\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010101Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|fdaea5f4b591a6a4\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010102Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|fdaea5f4b591a6a4\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010103Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|3f1d1eede729e83b\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\pwahelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010104Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|3f1d1eede729e83b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010105Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|3f1d1eede729e83b\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010106Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|3f1d1eede729e83b\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010107Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|f0ff9d1872bc8f70\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\pwahelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010108Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|f0ff9d1872bc8f70\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010109Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|f0ff9d1872bc8f70\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010110Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|f0ff9d1872bc8f70\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010111Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\141.0.3537.99\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010112Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010113Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010114Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|3338ebb40de4af6c\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010115Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|ab31671306fc9285\LowerCaseLongPathc:\program files (x86)\microsoft\edgewebview\application\140.0.3485.66\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010116Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|ab31671306fc9285\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010117Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|ab31671306fc9285\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010118Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.328{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|ab31671306fc9285\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010119Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.911{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\filecoauth.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010120Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.911{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010121Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.911{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\LinkDate25.189.0928.0002NT AUTHORITY\SYSTEM +13241300x800000000000000010122Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.911{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010123Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.911{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\filesyncconfig.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010124Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.911{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010125Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.911{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\LinkDate25.189.0928.0002NT AUTHORITY\SYSTEM +13241300x800000000000000010126Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.911{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010127Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:33.935{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedrive.sync.service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010128Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:33.935{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010129Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:33.935{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\LinkDate25.189.0928.0002NT AUTHORITY\SYSTEM +13241300x800000000000000010130Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:33.935{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010131Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\00005a7097cea0b2fa182cc8223f6b294bc30000ffff\PublisherMicrosoft CorporationNT AUTHORITY\SYSTEM +13241300x800000000000000010132Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\filecoauth.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010133Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010134Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\LinkDate10/08/2061 11:05:30NT AUTHORITY\SYSTEM +13241300x800000000000000010135Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filecoauth.exe|5f0b1f4756058f94\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010136Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\filesyncconfig.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010137Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010138Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\LinkDate05/17/2076 18:38:07NT AUTHORITY\SYSTEM +13241300x800000000000000010139Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesyncconfig.e|b2853778e6ee8154\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010140Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesynchelper.e|ea26329face44024\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\filesynchelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010141Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesynchelper.e|ea26329face44024\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010142Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesynchelper.e|ea26329face44024\LinkDate05/30/2092 12:56:26NT AUTHORITY\SYSTEM +13241300x800000000000000010143Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\filesynchelper.e|ea26329face44024\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010144Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoft.sharep|3747d2b58102875e\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\microsoft.sharepoint.nativemessagingclient.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010145Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoft.sharep|3747d2b58102875e\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010146Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoft.sharep|3747d2b58102875e\LinkDate11/24/2001 21:38:21NT AUTHORITY\SYSTEM +13241300x800000000000000010147Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoft.sharep|3747d2b58102875e\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010148Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedrive.sync.service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010149Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010150Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\LinkDate06/22/2006 02:04:35NT AUTHORITY\SYSTEM +13241300x800000000000000010151Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.010{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.sync.se|3653c6c06bfe42d7\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010152Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedriveactionhe|b1cd88fadc09ffdd\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedriveactionhelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010153Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedriveactionhe|b1cd88fadc09ffdd\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010154Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedriveactionhe|b1cd88fadc09ffdd\LinkDate06/02/1988 14:32:27NT AUTHORITY\SYSTEM +13241300x800000000000000010155Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedriveactionhe|b1cd88fadc09ffdd\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010156Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivefilelaun|cb622fc3f64a4519\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedrivefilelauncher.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010157Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivefilelaun|cb622fc3f64a4519\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010158Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivefilelaun|cb622fc3f64a4519\LinkDate06/01/2031 03:12:11NT AUTHORITY\SYSTEM +13241300x800000000000000010159Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivefilelaun|cb622fc3f64a4519\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010160Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivelauncher|f99f243c317f1f57\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedrivelauncher.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010161Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivelauncher|f99f243c317f1f57\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010162Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivelauncher|f99f243c317f1f57\LinkDate12/08/1972 16:28:20NT AUTHORITY\SYSTEM +13241300x800000000000000010163Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivelauncher|f99f243c317f1f57\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010164Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivepatcher.|9c9c196e5cac49fd\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedrivepatcher.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010165Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivepatcher.|9c9c196e5cac49fd\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010166Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivepatcher.|9c9c196e5cac49fd\LinkDate10/23/2034 03:50:25NT AUTHORITY\SYSTEM +13241300x800000000000000010167Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivepatcher.|9c9c196e5cac49fd\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010168Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|f253b398e0182f01\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedrivesetup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010169Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|f253b398e0182f01\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010170Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|f253b398e0182f01\LinkDate11/28/2034 23:04:51NT AUTHORITY\SYSTEM +13241300x800000000000000010171Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|f253b398e0182f01\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010172Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedriveupdaters|aa78feaff60c8b83\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\25.189.0928.0002\onedriveupdaterservice.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010173Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedriveupdaters|aa78feaff60c8b83\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010174Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedriveupdaters|aa78feaff60c8b83\LinkDate12/19/2086 04:11:22NT AUTHORITY\SYSTEM +13241300x800000000000000010175Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:34.012{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedriveupdaters|aa78feaff60c8b83\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010176Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:34.018{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplication\0000c9e25167b28e9201de9581a3277f77b60000ffff\PublisherOllamaNT AUTHORITY\SYSTEM +13241300x800000000000000010177Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.285{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|1acaf145e1abe71e\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\bho\ie_to_edge_stub.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010178Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.285{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|1acaf145e1abe71e\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010179Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.285{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|1acaf145e1abe71e\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010180Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.285{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|1acaf145e1abe71e\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010181Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.285{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|404fc78ba95cc1a0\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\cookie_exporter.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010182Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.285{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|404fc78ba95cc1a0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010183Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.285{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|404fc78ba95cc1a0\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010184Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.285{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|404fc78ba95cc1a0\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010185Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.295{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|8161afd9a053497f\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\elevated_tracing_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010186Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.295{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|8161afd9a053497f\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010187Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.295{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|8161afd9a053497f\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010188Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.295{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|8161afd9a053497f\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010189Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.299{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|e199190571ead391\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\elevation_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010190Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.299{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|e199190571ead391\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010191Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.299{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|e199190571ead391\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010192Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.301{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|e199190571ead391\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010193Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.303{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|cd1d678d615d9802\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\identity_helper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010194Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.303{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|cd1d678d615d9802\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010195Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.303{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|cd1d678d615d9802\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010196Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.303{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|cd1d678d615d9802\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010197Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.309{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|e099519a83047302\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010198Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.309{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|e099519a83047302\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010199Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.309{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|e099519a83047302\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010200Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.309{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|e099519a83047302\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010201Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.325{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|46fd910c0892a592\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\msedge.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010202Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.325{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|46fd910c0892a592\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010203Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.325{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|46fd910c0892a592\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010204Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.325{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|46fd910c0892a592\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010205Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.333{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|a63e21e9417c1a69\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\msedgewebview2.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010206Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.333{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|a63e21e9417c1a69\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010207Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.333{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|a63e21e9417c1a69\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010208Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.333{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|a63e21e9417c1a69\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010209Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.335{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|150d4ba8448897b1\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\msedge_proxy.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010210Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.337{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|150d4ba8448897b1\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010211Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.337{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|150d4ba8448897b1\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010212Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.337{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|150d4ba8448897b1\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010213Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.339{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|ffabf763a4c2d1c5\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\msedge_pwa_launcher.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010214Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.341{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|ffabf763a4c2d1c5\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010215Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.341{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|ffabf763a4c2d1c5\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010216Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.341{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|ffabf763a4c2d1c5\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010217Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.345{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|341a662cf50c0304\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\notification_helper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010218Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.345{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|341a662cf50c0304\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010219Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.345{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|341a662cf50c0304\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010220Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.345{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|341a662cf50c0304\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010221Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.347{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|53bda93ff593c6a0\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\140.0.3485.66\pwahelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010222Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.347{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|53bda93ff593c6a0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010223Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.347{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|53bda93ff593c6a0\LinkDate09/10/2025 23:48:58NT AUTHORITY\SYSTEM +13241300x800000000000000010224Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.347{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|53bda93ff593c6a0\BinProductVersion140.0.3485.66NT AUTHORITY\SYSTEM +13241300x800000000000000010225Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.349{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|17d43445aa3c078\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\bho\ie_to_edge_stub.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010226Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.349{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|17d43445aa3c078\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010227Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.349{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|17d43445aa3c078\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010228Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.349{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie_to_edge_stub.|17d43445aa3c078\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010229Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.351{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|9d66eed77bd00f42\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\cookie_exporter.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010230Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.351{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|9d66eed77bd00f42\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010231Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.351{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|9d66eed77bd00f42\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010232Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.351{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cookie_exporter.|9d66eed77bd00f42\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010233Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.359{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|8658cc24c4119f97\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\elevated_tracing_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010234Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.359{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|8658cc24c4119f97\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010235Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.359{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|8658cc24c4119f97\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010236Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.359{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevated_tracing|8658cc24c4119f97\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010237Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.363{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|f20992b98bb165c7\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\elevation_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010238Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.363{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|f20992b98bb165c7\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010239Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.363{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|f20992b98bb165c7\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010240Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.363{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|f20992b98bb165c7\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010241Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.367{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|99118bd8845656f0\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\identity_helper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010242Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.367{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|99118bd8845656f0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010243Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.367{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|99118bd8845656f0\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010244Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.367{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\identity_helper.|99118bd8845656f0\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010245Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.380{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|bcd7617720224c11\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\installer\setup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010246Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.380{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|bcd7617720224c11\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010247Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.380{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|bcd7617720224c11\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010248Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.380{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\setup.exe|bcd7617720224c11\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010249Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.388{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|6391ab2b5815f38d\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\msedge.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010250Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.388{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|6391ab2b5815f38d\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010251Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.388{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|6391ab2b5815f38d\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010252Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.388{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|6391ab2b5815f38d\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010253Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.397{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|65fe032a30e2148e\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\msedgewebview2.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010254Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.397{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|65fe032a30e2148e\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010255Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.397{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|65fe032a30e2148e\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010256Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.397{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedgewebview2.e|65fe032a30e2148e\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010257Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.399{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|1e00277a889e149a\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\msedge_proxy.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010258Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.399{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|1e00277a889e149a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010259Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.399{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|1e00277a889e149a\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010260Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.399{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|1e00277a889e149a\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010261Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.404{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|b31e024e30af393a\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\msedge_pwa_launcher.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010262Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.404{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|b31e024e30af393a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010263Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.404{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|b31e024e30af393a\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010264Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.404{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_pwa_launc|b31e024e30af393a\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010265Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.408{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|3123937865dac7e8\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\notification_helper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010266Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.408{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|3123937865dac7e8\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010267Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.408{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|3123937865dac7e8\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010268Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.408{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\notification_hel|3123937865dac7e8\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010269Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.410{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|958cf723367e4d5b\LowerCaseLongPathc:\program files (x86)\microsoft\edgecore\141.0.3537.99\pwahelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010270Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.410{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|958cf723367e4d5b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010271Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.410{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|958cf723367e4d5b\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010272Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.412{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|958cf723367e4d5b\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010273Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.412{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgecom|6f5011a9c5b71d1d\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\1.3.205.9\microsoftedgecomregistershellarm64.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010274Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.412{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgecom|6f5011a9c5b71d1d\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010275Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.412{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgecom|6f5011a9c5b71d1d\LinkDate10/20/2025 17:57:06NT AUTHORITY\SYSTEM +13241300x800000000000000010276Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.412{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgecom|6f5011a9c5b71d1d\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +13241300x800000000000000010277Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.414{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|9e123db33de3f9bc\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\1.3.205.9\microsoftedgeupdate.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010278Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.414{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|9e123db33de3f9bc\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010279Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.414{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|9e123db33de3f9bc\LinkDate10/20/2025 17:57:10NT AUTHORITY\SYSTEM +13241300x800000000000000010280Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.414{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|9e123db33de3f9bc\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +13241300x800000000000000010281Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.414{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|10fd265dc2069a15\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\1.3.205.9\microsoftedgeupdatebroker.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010282Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.414{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|10fd265dc2069a15\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010283Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.414{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|10fd265dc2069a15\LinkDate10/20/2025 17:56:53NT AUTHORITY\SYSTEM +13241300x800000000000000010284Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.414{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|10fd265dc2069a15\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +13241300x800000000000000010285Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.416{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|f70aec41efce2ace\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\1.3.205.9\microsoftedgeupdatecore.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010286Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.416{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|f70aec41efce2ace\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010287Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.416{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|f70aec41efce2ace\LinkDate10/20/2025 17:57:01NT AUTHORITY\SYSTEM +13241300x800000000000000010288Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.416{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|f70aec41efce2ace\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +13241300x800000000000000010289Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.416{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|31c60b0515a9ca16\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\1.3.205.9\microsoftedgeupdateondemand.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010290Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.418{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|31c60b0515a9ca16\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010291Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.418{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|31c60b0515a9ca16\LinkDate10/20/2025 17:56:51NT AUTHORITY\SYSTEM +13241300x800000000000000010292Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.418{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|31c60b0515a9ca16\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +13241300x800000000000000010293Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.422{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|2924a8d383ffa0fc\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\1.3.205.9\microsoftedgeupdatesetup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010294Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.422{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|2924a8d383ffa0fc\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010295Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.422{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|2924a8d383ffa0fc\LinkDate10/20/2025 17:59:17NT AUTHORITY\SYSTEM +13241300x800000000000000010296Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.422{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|2924a8d383ffa0fc\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +13241300x800000000000000010297Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.467{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|38bd14226e25a784\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\download\{56eb18f8-b008-4cbd-b6d2-8c97fe7e9062}\141.0.3537.99\microsoftedge_x64_141.0.3537.99_140.0.3485.66.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010298Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.467{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|38bd14226e25a784\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010299Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.467{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|38bd14226e25a784\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010300Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.467{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|38bd14226e25a784\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010301Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.531{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|48941f7759d95209\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\download\{f3017226-fe2a-4295-8bdf-00c3a9a7e4c5}\141.0.3537.99\microsoftedge_x64_141.0.3537.99_140.0.3485.66.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010302Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.531{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|48941f7759d95209\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010303Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.531{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|48941f7759d95209\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010304Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.531{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedge_x6|48941f7759d95209\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010305Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.536{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|b8156a9b962f7e67\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\download\{f3c4fe00-efd5-403b-9569-398a20f1ba4a}\1.3.205.9\microsoftedgeupdatesetup_x86_1.3.205.9.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010306Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.536{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|b8156a9b962f7e67\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010307Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.536{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|b8156a9b962f7e67\LinkDate10/20/2025 17:59:17NT AUTHORITY\SYSTEM +13241300x800000000000000010308Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.536{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|b8156a9b962f7e67\BinProductVersion1.3.205.9NT AUTHORITY\SYSTEM +13241300x800000000000000010309Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.947{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.app.exe|69f6721f74b53fa9\LowerCaseLongPathc:\users\research\appdata\local\microsoft\onedrive\onedrive.app.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010310Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.947{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.app.exe|69f6721f74b53fa9\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010311Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.947{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.app.exe|69f6721f74b53fa9\LinkDate05/22/2078 19:25:02NT AUTHORITY\SYSTEM +13241300x800000000000000010312Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.947{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.app.exe|69f6721f74b53fa9\BinProductVersion25.149.803.3NT AUTHORITY\SYSTEM +13241300x800000000000000010313Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:38.959{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivestandalo|965144bf68b790e0\LowerCaseLongPathc:\users\research\appdata\local\microsoft\onedrive\onedrivestandaloneupdater.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010314Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:38.959{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivestandalo|965144bf68b790e0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010315Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:38.959{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivestandalo|965144bf68b790e0\LinkDate04/22/2056 15:38:40NT AUTHORITY\SYSTEM +13241300x800000000000000010316Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:38.959{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivestandalo|965144bf68b790e0\BinProductVersion25.149.803.3NT AUTHORITY\SYSTEM +13241300x800000000000000010317Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:39.109{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|a62d662e21b3abe1\LowerCaseLongPathc:\users\research\appdata\local\microsoft\onedrive\standaloneupdater\onedrivesetup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010318Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:39.109{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|a62d662e21b3abe1\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010319Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:39.109{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|a62d662e21b3abe1\LinkDate08/03/2002 22:58:27NT AUTHORITY\SYSTEM +13241300x800000000000000010320Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:39.109{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|a62d662e21b3abe1\BinProductVersion25.149.803.3NT AUTHORITY\SYSTEM +13241300x800000000000000010321Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.740{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\aggregatorhost.e|2f15385328865347\LowerCaseLongPathc:\windows\system32\aggregatorhost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010322Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.740{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\aggregatorhost.e|2f15385328865347\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010323Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.740{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\aggregatorhost.e|2f15385328865347\LinkDate04/06/2090 19:15:20NT AUTHORITY\SYSTEM +13241300x800000000000000010324Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.740{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\aggregatorhost.e|2f15385328865347\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010325Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\appidcertstorech|dbcf03fbca94fe20\LowerCaseLongPathc:\windows\system32\appidcertstorecheck.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010326Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\appidcertstorech|dbcf03fbca94fe20\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010327Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\appidcertstorech|dbcf03fbca94fe20\LinkDate01/31/2001 14:20:32NT AUTHORITY\SYSTEM +13241300x800000000000000010328Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\appidcertstorech|dbcf03fbca94fe20\BinProductVersion10.0.26100.3037NT AUTHORITY\SYSTEM +13241300x800000000000000010329Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\appidpolicyconve|f05966cc1fbd40ed\LowerCaseLongPathc:\windows\system32\appidpolicyconverter.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010330Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\appidpolicyconve|f05966cc1fbd40ed\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010331Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\appidpolicyconve|f05966cc1fbd40ed\LinkDate08/21/2073 00:18:38NT AUTHORITY\SYSTEM +13241300x800000000000000010332Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\appidpolicyconve|f05966cc1fbd40ed\BinProductVersion10.0.26100.3037NT AUTHORITY\SYSTEM +13241300x800000000000000010333Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\applicationframe|7c5c9be1b612bbd\LowerCaseLongPathc:\windows\system32\applicationframehost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010334Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\applicationframe|7c5c9be1b612bbd\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010335Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\applicationframe|7c5c9be1b612bbd\LinkDate12/13/2008 13:36:13NT AUTHORITY\SYSTEM +13241300x800000000000000010336Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.746{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\applicationframe|7c5c9be1b612bbd\BinProductVersion10.0.26100.3912NT AUTHORITY\SYSTEM +13241300x800000000000000010337Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.755{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\auditpol.exe|f1ca5494fc506771\LowerCaseLongPathc:\windows\syswow64\auditpol.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010338Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.755{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\auditpol.exe|f1ca5494fc506771\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010339Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.755{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\auditpol.exe|f1ca5494fc506771\LinkDate06/16/2015 02:50:02NT AUTHORITY\SYSTEM +13241300x800000000000000010340Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.755{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\auditpol.exe|f1ca5494fc506771\BinProductVersion10.0.26100.3037NT AUTHORITY\SYSTEM +13241300x800000000000000010341Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.774{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\certutil.exe|ac23a913bfcd42f0\LowerCaseLongPathc:\windows\syswow64\certutil.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010342Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.774{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\certutil.exe|ac23a913bfcd42f0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010343Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.774{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\certutil.exe|ac23a913bfcd42f0\LinkDate08/22/1997 19:36:25NT AUTHORITY\SYSTEM +13241300x800000000000000010344Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.774{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\certutil.exe|ac23a913bfcd42f0\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010345Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.777{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\chrome.exe|84040b46ffb049b9\LowerCaseLongPathc:\program files\google\chrome\application\chrome.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010346Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.777{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\chrome.exe|84040b46ffb049b9\Publishergoogle llcNT AUTHORITY\SYSTEM +13241300x800000000000000010347Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.777{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\chrome.exe|84040b46ffb049b9\LinkDate11/11/2024 20:36:39NT AUTHORITY\SYSTEM +13241300x800000000000000010348Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.777{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\chrome.exe|84040b46ffb049b9\BinProductVersion131.0.6778.70NT AUTHORITY\SYSTEM +13241300x800000000000000010349Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.787{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cleanmgr.exe|42343e2ceb471480\LowerCaseLongPathc:\windows\system32\cleanmgr.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010350Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.787{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cleanmgr.exe|42343e2ceb471480\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010351Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.787{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cleanmgr.exe|42343e2ceb471480\LinkDate11/22/2090 09:21:20NT AUTHORITY\SYSTEM +13241300x800000000000000010352Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.787{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cleanmgr.exe|42343e2ceb471480\BinProductVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010353Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.787{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\clipup.exe|91e319793a480caa\LowerCaseLongPathc:\windows\system32\clipup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010354Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.787{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\clipup.exe|91e319793a480caa\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010355Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.787{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\clipup.exe|91e319793a480caa\LinkDate04/11/2082 13:12:21NT AUTHORITY\SYSTEM +13241300x800000000000000010356Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.787{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\clipup.exe|91e319793a480caa\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010357Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.798{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cmd.exe|5ce9ba8d0d54ad10\LowerCaseLongPathc:\windows\system32\cmd.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010358Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.798{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cmd.exe|5ce9ba8d0d54ad10\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010359Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.798{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cmd.exe|5ce9ba8d0d54ad10\LinkDate03/11/2103 17:39:08NT AUTHORITY\SYSTEM +13241300x800000000000000010360Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.798{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cmd.exe|5ce9ba8d0d54ad10\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010361Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.802{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cmd.exe|c8de35b73d56cdba\LowerCaseLongPathc:\windows\syswow64\cmd.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010362Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.802{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cmd.exe|c8de35b73d56cdba\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010363Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.802{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cmd.exe|c8de35b73d56cdba\LinkDate05/01/2056 20:22:00NT AUTHORITY\SYSTEM +13241300x800000000000000010364Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.802{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cmd.exe|c8de35b73d56cdba\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010365Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.805{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\compattelrunner.|732ad1627e12cb48\LowerCaseLongPathc:\windows\system32\compattelrunner.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010366Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.805{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\compattelrunner.|732ad1627e12cb48\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010367Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.805{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\compattelrunner.|732ad1627e12cb48\LinkDate02/27/2023 06:03:30NT AUTHORITY\SYSTEM +13241300x800000000000000010368Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.805{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\compattelrunner.|732ad1627e12cb48\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010369Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.807{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\conhost.exe|a73bcd1ef9353f3e\LowerCaseLongPathc:\windows\system32\conhost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010370Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.807{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\conhost.exe|a73bcd1ef9353f3e\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010371Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.807{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\conhost.exe|a73bcd1ef9353f3e\LinkDate04/20/2101 00:07:44NT AUTHORITY\SYSTEM +13241300x800000000000000010372Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.807{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\conhost.exe|a73bcd1ef9353f3e\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010373Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.807{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\consent.exe|808393f799959da6\LowerCaseLongPathc:\windows\system32\consent.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010374Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.807{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\consent.exe|808393f799959da6\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010375Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.807{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\consent.exe|808393f799959da6\LinkDate01/09/2049 05:57:50NT AUTHORITY\SYSTEM +13241300x800000000000000010376Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.807{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\consent.exe|808393f799959da6\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010377Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.818{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\control.exe|ad3e7d6cb5424ec4\LowerCaseLongPathc:\windows\system32\control.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010378Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.818{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\control.exe|ad3e7d6cb5424ec4\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010379Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.818{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\control.exe|ad3e7d6cb5424ec4\LinkDate07/05/2055 18:09:59NT AUTHORITY\SYSTEM +13241300x800000000000000010380Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.818{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\control.exe|ad3e7d6cb5424ec4\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010381Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\credentialuibrok|f2701fbf367d4b09\LowerCaseLongPathc:\windows\system32\credentialuibroker.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010382Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\credentialuibrok|f2701fbf367d4b09\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010383Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\credentialuibrok|f2701fbf367d4b09\LinkDate01/21/2100 00:15:50NT AUTHORITY\SYSTEM +13241300x800000000000000010384Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\credentialuibrok|f2701fbf367d4b09\BinProductVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010385Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cscript.exe|e9de8f8b8834a501\LowerCaseLongPathc:\windows\system32\cscript.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010386Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cscript.exe|e9de8f8b8834a501\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010387Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cscript.exe|e9de8f8b8834a501\LinkDate09/27/2094 20:01:30NT AUTHORITY\SYSTEM +13241300x800000000000000010388Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\cscript.exe|e9de8f8b8834a501\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010389Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ctfmon.exe|b5157a66388d511f\LowerCaseLongPathc:\windows\system32\ctfmon.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010390Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ctfmon.exe|b5157a66388d511f\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010391Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ctfmon.exe|b5157a66388d511f\LinkDate10/12/2033 08:19:25NT AUTHORITY\SYSTEM +13241300x800000000000000010392Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.834{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ctfmon.exe|b5157a66388d511f\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010393Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.850{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\defrag.exe|ebd85d04fc6a26d\LowerCaseLongPathc:\windows\system32\defrag.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010394Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.850{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\defrag.exe|ebd85d04fc6a26d\Publishermicrosoft corp.NT AUTHORITY\SYSTEM +13241300x800000000000000010395Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.850{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\defrag.exe|ebd85d04fc6a26d\LinkDate12/28/2046 02:39:46NT AUTHORITY\SYSTEM +13241300x800000000000000010396Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.850{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\defrag.exe|ebd85d04fc6a26d\BinProductVersion10.0.26100.1150NT AUTHORITY\SYSTEM +13241300x800000000000000010397Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\devicecensus.exe|26420fddf94319b3\LowerCaseLongPathc:\windows\system32\devicecensus.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010398Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\devicecensus.exe|26420fddf94319b3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010399Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\devicecensus.exe|26420fddf94319b3\LinkDate03/20/2091 05:57:48NT AUTHORITY\SYSTEM +13241300x800000000000000010400Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\devicecensus.exe|26420fddf94319b3\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010401Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dfrgui.exe|aa057181f3eefff\LowerCaseLongPathc:\windows\system32\dfrgui.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010402Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dfrgui.exe|aa057181f3eefff\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010403Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dfrgui.exe|aa057181f3eefff\LinkDate06/30/1984 13:52:48NT AUTHORITY\SYSTEM +13241300x800000000000000010404Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dfrgui.exe|aa057181f3eefff\BinProductVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010405Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\directxdatabaseu|6ebe7baa2801b4ff\LowerCaseLongPathc:\windows\system32\directxdatabaseupdater.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010406Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\directxdatabaseu|6ebe7baa2801b4ff\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010407Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\directxdatabaseu|6ebe7baa2801b4ff\LinkDate11/09/1988 16:18:45NT AUTHORITY\SYSTEM +13241300x800000000000000010408Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.858{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\directxdatabaseu|6ebe7baa2801b4ff\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010409Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dllhost.exe|5fa851ba539d9a3\LowerCaseLongPathc:\windows\system32\dllhost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010410Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dllhost.exe|5fa851ba539d9a3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010411Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dllhost.exe|5fa851ba539d9a3\LinkDate01/02/2064 08:07:22NT AUTHORITY\SYSTEM +13241300x800000000000000010412Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dllhost.exe|5fa851ba539d9a3\BinProductVersion10.0.26100.1150NT AUTHORITY\SYSTEM +13241300x800000000000000010413Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dmclient.exe|9723e031916d775c\LowerCaseLongPathc:\windows\system32\dmclient.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010414Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dmclient.exe|9723e031916d775c\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010415Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dmclient.exe|9723e031916d775c\LinkDate03/03/2070 05:07:06NT AUTHORITY\SYSTEM +13241300x800000000000000010416Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dmclient.exe|9723e031916d775c\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010417Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\drvinst.exe|aa32db6491e404e1\LowerCaseLongPathc:\windows\system32\drvinst.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010418Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\drvinst.exe|aa32db6491e404e1\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010419Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\drvinst.exe|aa32db6491e404e1\LinkDate11/14/2067 03:35:03NT AUTHORITY\SYSTEM +13241300x800000000000000010420Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.866{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\drvinst.exe|aa32db6491e404e1\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010421Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.881{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dwm.exe|f848a80c6540ffad\LowerCaseLongPathc:\windows\system32\dwm.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010422Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.881{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dwm.exe|f848a80c6540ffad\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010423Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.881{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dwm.exe|f848a80c6540ffad\LinkDate08/20/2068 21:01:52NT AUTHORITY\SYSTEM +13241300x800000000000000010424Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.881{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\dwm.exe|f848a80c6540ffad\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010425Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.881{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|9ec28976970817d4\LowerCaseLongPathc:\program files\google\chrome\application\131.0.6778.70\elevation_service.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010426Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.881{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|9ec28976970817d4\Publishergoogle llcNT AUTHORITY\SYSTEM +13241300x800000000000000010427Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.881{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|9ec28976970817d4\LinkDate11/11/2024 20:36:39NT AUTHORITY\SYSTEM +13241300x800000000000000010428Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.881{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\elevation_servic|9ec28976970817d4\BinProductVersion131.0.6778.70NT AUTHORITY\SYSTEM +13241300x800000000000000010429Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.897{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\explorer.exe|68e882542b88f3ee\LowerCaseLongPathc:\windows\explorer.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010430Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.897{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\explorer.exe|68e882542b88f3ee\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010431Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.897{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\explorer.exe|68e882542b88f3ee\LinkDate07/22/2070 20:59:49NT AUTHORITY\SYSTEM +13241300x800000000000000010432Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.897{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\explorer.exe|68e882542b88f3ee\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010433Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.928{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie4uinit.exe|874b2700383dd346\LowerCaseLongPathc:\windows\system32\ie4uinit.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010434Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.928{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie4uinit.exe|874b2700383dd346\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010435Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.928{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie4uinit.exe|874b2700383dd346\LinkDate12/31/2073 18:54:15NT AUTHORITY\SYSTEM +13241300x800000000000000010436Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.928{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ie4uinit.exe|874b2700383dd346\BinProductVersion11.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010437Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.933{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\javaws.exe|f967368f6d803cca\LowerCaseLongPathc:\program files (x86)\java\jre1.8.0_431\bin\javaws.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010438Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.933{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\javaws.exe|f967368f6d803cca\Publisheroracle corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010439Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.933{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\javaws.exe|f967368f6d803cca\LinkDate09/30/2024 08:20:31NT AUTHORITY\SYSTEM +13241300x800000000000000010440Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.933{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\javaws.exe|f967368f6d803cca\BinProductVersion8.0.4310.10NT AUTHORITY\SYSTEM +13241300x800000000000000010441Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.938{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jp2launcher.exe|172422e15416b5d9\LowerCaseLongPathc:\program files (x86)\java\jre1.8.0_431\bin\jp2launcher.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010442Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.938{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jp2launcher.exe|172422e15416b5d9\Publisheroracle corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010443Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.938{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jp2launcher.exe|172422e15416b5d9\LinkDate09/30/2024 08:22:34NT AUTHORITY\SYSTEM +13241300x800000000000000010444Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.938{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jp2launcher.exe|172422e15416b5d9\BinProductVersion8.0.4310.10NT AUTHORITY\SYSTEM +13241300x800000000000000010445Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.940{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jucheck.exe|374f57912ab1ba39\LowerCaseLongPathc:\program files (x86)\common files\java\java update\jucheck.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010446Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.940{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jucheck.exe|374f57912ab1ba39\Publisheroracle corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010447Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.940{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jucheck.exe|374f57912ab1ba39\LinkDate09/30/2024 08:47:48NT AUTHORITY\SYSTEM +13241300x800000000000000010448Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.940{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jucheck.exe|374f57912ab1ba39\BinProductVersion2.8.431.10NT AUTHORITY\SYSTEM +13241300x800000000000000010449Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.942{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jusched.exe|15b7407a86c6042f\LowerCaseLongPathc:\program files (x86)\common files\java\java update\jusched.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010450Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.942{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jusched.exe|15b7407a86c6042f\Publisheroracle corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010451Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.942{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jusched.exe|15b7407a86c6042f\LinkDate09/30/2024 08:47:57NT AUTHORITY\SYSTEM +13241300x800000000000000010452Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.942{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\jusched.exe|15b7407a86c6042f\BinProductVersion2.8.431.10NT AUTHORITY\SYSTEM +13241300x800000000000000010453Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.944{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\logonui.exe|abe25f7310ce82cc\LowerCaseLongPathc:\windows\system32\logonui.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010454Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.944{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\logonui.exe|abe25f7310ce82cc\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010455Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.944{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\logonui.exe|abe25f7310ce82cc\LinkDate04/26/2087 22:47:56NT AUTHORITY\SYSTEM +13241300x800000000000000010456Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.944{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\logonui.exe|abe25f7310ce82cc\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010457Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.944{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lpremove.exe|5b4b864d8514e716\LowerCaseLongPathc:\windows\system32\lpremove.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010458Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.944{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lpremove.exe|5b4b864d8514e716\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010459Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.944{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lpremove.exe|5b4b864d8514e716\LinkDate03/27/2085 03:42:05NT AUTHORITY\SYSTEM +13241300x800000000000000010460Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.944{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lpremove.exe|5b4b864d8514e716\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010461Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.961{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mcbuilder.exe|fa2995f98d7b162b\LowerCaseLongPathc:\windows\system32\mcbuilder.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010462Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.961{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mcbuilder.exe|fa2995f98d7b162b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010463Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.961{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mcbuilder.exe|fa2995f98d7b162b\LinkDate02/23/1973 10:27:17NT AUTHORITY\SYSTEM +13241300x800000000000000010464Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.961{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mcbuilder.exe|fa2995f98d7b162b\BinProductVersion10.0.26100.3037NT AUTHORITY\SYSTEM +13241300x800000000000000010465Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.963{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mdmdiagnosticsto|50a6376a93e56677\LowerCaseLongPathc:\windows\system32\mdmdiagnosticstool.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010466Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.963{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mdmdiagnosticsto|50a6376a93e56677\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010467Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.965{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mdmdiagnosticsto|50a6376a93e56677\LinkDate07/27/2092 13:07:57NT AUTHORITY\SYSTEM +13241300x800000000000000010468Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.965{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mdmdiagnosticsto|50a6376a93e56677\BinProductVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010469Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.969{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|84bcd64699b11da4\LowerCaseLongPathc:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010470Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.969{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|84bcd64699b11da4\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010471Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.969{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|84bcd64699b11da4\LinkDate03/21/2024 21:25:50NT AUTHORITY\SYSTEM +13241300x800000000000000010472Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.969{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\microsoftedgeupd|84bcd64699b11da4\BinProductVersion1.3.185.27NT AUTHORITY\SYSTEM +13241300x800000000000000010473Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.993{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mmc.exe|8471611706ce450b\LowerCaseLongPathc:\windows\system32\mmc.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010474Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.993{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mmc.exe|8471611706ce450b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010475Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.993{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mmc.exe|8471611706ce450b\LinkDate03/01/2037 03:26:12NT AUTHORITY\SYSTEM +13241300x800000000000000010476Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.993{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mmc.exe|8471611706ce450b\BinProductVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010477Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:40.995{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mofcomp.exe|862f05ca56b37f77\LowerCaseLongPathc:\windows\system32\wbem\mofcomp.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010478Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:40.995{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mofcomp.exe|862f05ca56b37f77\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010479Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:40.995{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mofcomp.exe|862f05ca56b37f77\LinkDate11/18/2092 14:42:35NT AUTHORITY\SYSTEM +13241300x800000000000000010480Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:40.995{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mofcomp.exe|862f05ca56b37f77\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010481Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.005{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\monotificationux|985a11634d51ae37\LowerCaseLongPathc:\windows\uus\amd64\monotificationux.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010482Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.005{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\monotificationux|985a11634d51ae37\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010483Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.005{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\monotificationux|985a11634d51ae37\LinkDate04/17/2006 00:32:18NT AUTHORITY\SYSTEM +13241300x800000000000000010484Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.005{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\monotificationux|985a11634d51ae37\BinProductVersion1350.2506.29012.0NT AUTHORITY\SYSTEM +13241300x800000000000000010485Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.015{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mousocoreworker.|a1b2c6de99d06de6\LowerCaseLongPathc:\windows\uus\amd64\mousocoreworker.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010486Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.015{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mousocoreworker.|a1b2c6de99d06de6\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010487Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.015{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mousocoreworker.|a1b2c6de99d06de6\LinkDate10/04/2046 14:29:17NT AUTHORITY\SYSTEM +13241300x800000000000000010488Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.015{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mousocoreworker.|a1b2c6de99d06de6\BinProductVersion1350.2506.29012.0NT AUTHORITY\SYSTEM +13241300x800000000000000010489Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.021{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpcmdrun.exe|2a14566f87e51e5\LowerCaseLongPathc:\programdata\microsoft\windows defender\platform\4.18.25080.5-0\mpcmdrun.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010490Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.021{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpcmdrun.exe|2a14566f87e51e5\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010491Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.021{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpcmdrun.exe|2a14566f87e51e5\LinkDate11/15/2043 18:59:39NT AUTHORITY\SYSTEM +13241300x800000000000000010492Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.021{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpcmdrun.exe|2a14566f87e51e5\BinProductVersion4.18.25080.5NT AUTHORITY\SYSTEM +13241300x800000000000000010493Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.027{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpdefendercorese|e169abd4e8e39d43\LowerCaseLongPathc:\programdata\microsoft\windows defender\platform\4.18.25080.5-0\mpdefendercoreservice.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010494Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.027{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpdefendercorese|e169abd4e8e39d43\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010495Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.027{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpdefendercorese|e169abd4e8e39d43\LinkDate04/26/2046 18:38:33NT AUTHORITY\SYSTEM +13241300x800000000000000010496Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.027{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpdefendercorese|e169abd4e8e39d43\BinProductVersion4.18.25080.5NT AUTHORITY\SYSTEM +13241300x800000000000000010497Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.043{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|d27b57360cd4a4cf\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\msedge.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010498Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.043{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|d27b57360cd4a4cf\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010499Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.043{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|d27b57360cd4a4cf\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010500Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.043{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|d27b57360cd4a4cf\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010501Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.045{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|d27b57360cd4a4cf\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\msedge.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010502Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.045{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|d27b57360cd4a4cf\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010503Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.045{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|d27b57360cd4a4cf\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010504Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.045{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge.exe|d27b57360cd4a4cf\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010505Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.054{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|4ee55cb70447a0c6\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\msedge_proxy.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010506Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.054{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|4ee55cb70447a0c6\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010507Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.054{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|4ee55cb70447a0c6\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010508Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.054{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|4ee55cb70447a0c6\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010509Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.055{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|4ee55cb70447a0c6\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\msedge_proxy.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010510Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.055{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|4ee55cb70447a0c6\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010511Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.055{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|4ee55cb70447a0c6\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010512Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.055{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msedge_proxy.exe|4ee55cb70447a0c6\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010513Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.063{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msmpeng.exe|2db839252ddacb8c\LowerCaseLongPathc:\programdata\microsoft\windows defender\platform\4.18.25080.5-0\msmpeng.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010514Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.063{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msmpeng.exe|2db839252ddacb8c\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010515Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.063{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msmpeng.exe|2db839252ddacb8c\LinkDate03/29/2074 23:58:28NT AUTHORITY\SYSTEM +13241300x800000000000000010516Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.063{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msmpeng.exe|2db839252ddacb8c\BinProductVersion4.18.25080.5NT AUTHORITY\SYSTEM +13241300x800000000000000010517Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msoobe.exe|d79e10f510d8bba1\LowerCaseLongPathc:\windows\system32\oobe\msoobe.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010518Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msoobe.exe|d79e10f510d8bba1\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010519Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msoobe.exe|d79e10f510d8bba1\LinkDate12/22/2031 20:31:15NT AUTHORITY\SYSTEM +13241300x800000000000000010520Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msoobe.exe|d79e10f510d8bba1\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010521Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\net.exe|67bf6d4cbb6a25ae\LowerCaseLongPathc:\windows\system32\net.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010522Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\net.exe|67bf6d4cbb6a25ae\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010523Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\net.exe|67bf6d4cbb6a25ae\LinkDate02/26/2031 05:10:39NT AUTHORITY\SYSTEM +13241300x800000000000000010524Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\net.exe|67bf6d4cbb6a25ae\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010525Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\net.exe|c8c8e31753eb69cb\LowerCaseLongPathc:\windows\syswow64\net.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010526Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\net.exe|c8c8e31753eb69cb\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010527Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\net.exe|c8c8e31753eb69cb\LinkDate11/23/2033 14:57:00NT AUTHORITY\SYSTEM +13241300x800000000000000010528Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.071{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\net.exe|c8c8e31753eb69cb\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010529Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.087{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netsh.exe|d999f403d2627a1d\LowerCaseLongPathc:\windows\syswow64\netsh.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010530Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.087{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netsh.exe|d999f403d2627a1d\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010531Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.087{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netsh.exe|d999f403d2627a1d\LinkDate10/08/2086 10:36:51NT AUTHORITY\SYSTEM +13241300x800000000000000010532Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.087{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netsh.exe|d999f403d2627a1d\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010533Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netstat.exe|ce8db1f5bbf4e72d\LowerCaseLongPathc:\windows\system32\netstat.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010534Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netstat.exe|ce8db1f5bbf4e72d\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010535Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netstat.exe|ce8db1f5bbf4e72d\LinkDate10/19/2037 22:49:14NT AUTHORITY\SYSTEM +13241300x800000000000000010536Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\netstat.exe|ce8db1f5bbf4e72d\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010537Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngen.exe|4653055c63a37b02\LowerCaseLongPathc:\windows\microsoft.net\framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010538Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngen.exe|4653055c63a37b02\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010539Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngen.exe|4653055c63a37b02\LinkDate06/08/2022 23:18:30NT AUTHORITY\SYSTEM +13241300x800000000000000010540Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngen.exe|4653055c63a37b02\BinProductVersion4.0.30319.0NT AUTHORITY\SYSTEM +13241300x800000000000000010541Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngen.exe|6737a0e56950a135\LowerCaseLongPathc:\windows\microsoft.net\framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010542Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngen.exe|6737a0e56950a135\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010543Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngen.exe|6737a0e56950a135\LinkDate06/08/2022 23:15:17NT AUTHORITY\SYSTEM +13241300x800000000000000010544Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.089{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngen.exe|6737a0e56950a135\BinProductVersion4.0.30319.0NT AUTHORITY\SYSTEM +13241300x800000000000000010545Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngentask.exe|5c7d7da84d53b8ea\LowerCaseLongPathc:\windows\microsoft.net\framework64\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010546Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngentask.exe|5c7d7da84d53b8ea\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010547Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngentask.exe|5c7d7da84d53b8ea\LinkDate04/08/2022 21:27:51NT AUTHORITY\SYSTEM +13241300x800000000000000010548Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngentask.exe|5c7d7da84d53b8ea\BinProductVersion4.0.30319.0NT AUTHORITY\SYSTEM +13241300x800000000000000010549Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngentask.exe|cc6494267adfb0bb\LowerCaseLongPathc:\windows\microsoft.net\framework\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010550Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngentask.exe|cc6494267adfb0bb\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010551Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngentask.exe|cc6494267adfb0bb\LinkDate04/08/2022 21:24:38NT AUTHORITY\SYSTEM +13241300x800000000000000010552Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ngentask.exe|cc6494267adfb0bb\BinProductVersion4.0.30319.0NT AUTHORITY\SYSTEM +13241300x800000000000000010553Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\nissrv.exe|e44817fc5f9bfd11\LowerCaseLongPathc:\programdata\microsoft\windows defender\platform\4.18.25080.5-0\nissrv.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010554Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\nissrv.exe|e44817fc5f9bfd11\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010555Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\nissrv.exe|e44817fc5f9bfd11\LinkDate09/07/2021 06:49:53NT AUTHORITY\SYSTEM +13241300x800000000000000010556Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.103{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\nissrv.exe|e44817fc5f9bfd11\BinProductVersion4.18.25080.5NT AUTHORITY\SYSTEM +13241300x800000000000000010557Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.149{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollama app.exe|2e2d731f79f6e479\LowerCaseLongPathc:\users\administrator\appdata\local\programs\ollama\ollama app.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010558Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.149{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollama app.exe|2e2d731f79f6e479\LinkDate01/01/1970 00:00:00NT AUTHORITY\SYSTEM +13241300x800000000000000010559Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.151{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollama app.exe|2e2d731f79f6e479\LowerCaseLongPathc:\users\administrator\appdata\local\programs\ollama\ollama app.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010560Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.151{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollama app.exe|2e2d731f79f6e479\LinkDate01/01/1970 00:00:00NT AUTHORITY\SYSTEM +13241300x800000000000000010561Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.204{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollama.exe|a249c2f0bb4acc5c\LowerCaseLongPathc:\users\administrator\appdata\local\programs\ollama\ollama.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010562Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.204{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollama.exe|a249c2f0bb4acc5c\LinkDate01/01/1970 00:00:00NT AUTHORITY\SYSTEM +13241300x800000000000000010563Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.208{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollama.exe|a249c2f0bb4acc5c\LowerCaseLongPathc:\users\administrator\appdata\local\programs\ollama\ollama.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010564Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.208{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ollama.exe|a249c2f0bb4acc5c\LinkDate01/01/1970 00:00:00NT AUTHORITY\SYSTEM +13241300x800000000000000010565Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.218{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.exe|f265da245d771f66\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\onedrive.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010566Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.218{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.exe|f265da245d771f66\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010567Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.218{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.exe|f265da245d771f66\LinkDate10/01/2042 17:33:15NT AUTHORITY\SYSTEM +13241300x800000000000000010568Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.218{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrive.exe|f265da245d771f66\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010569Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.264{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|d3f263bd663e4335\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\update\onedrivesetup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010570Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.264{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|d3f263bd663e4335\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010571Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.264{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|d3f263bd663e4335\LinkDate11/28/2034 23:04:51NT AUTHORITY\SYSTEM +13241300x800000000000000010572Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.264{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivesetup.ex|d3f263bd663e4335\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010573Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.278{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivestandalo|2d3dc867bcc2e4ec\LowerCaseLongPathc:\users\administrator\appdata\local\microsoft\onedrive\onedrivestandaloneupdater.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010574Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.278{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivestandalo|2d3dc867bcc2e4ec\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010575Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.278{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivestandalo|2d3dc867bcc2e4ec\LinkDate09/04/2091 19:21:58NT AUTHORITY\SYSTEM +13241300x800000000000000010576Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.278{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\onedrivestandalo|2d3dc867bcc2e4ec\BinProductVersion25.189.928.2NT AUTHORITY\SYSTEM +13241300x800000000000000010577Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.297{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\openconsole.exe|7523323d8bd56d99\LowerCaseLongPathc:\program files\windowsapps\microsoft.windowsterminal_1.22.12111.0_x64__8wekyb3d8bbwe\openconsole.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010578Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.297{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\openconsole.exe|7523323d8bd56d99\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010579Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.297{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\openconsole.exe|7523323d8bd56d99\LinkDate07/30/2025 17:23:48NT AUTHORITY\SYSTEM +13241300x800000000000000010580Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.297{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\openconsole.exe|7523323d8bd56d99\BinProductVersion1.22.2507.30001NT AUTHORITY\SYSTEM +13241300x800000000000000010581Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.301{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\openwith.exe|5c91e48dda5e9a2a\LowerCaseLongPathc:\windows\system32\openwith.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010582Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.301{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\openwith.exe|5c91e48dda5e9a2a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010583Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.301{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\openwith.exe|5c91e48dda5e9a2a\LinkDate06/04/2000 00:25:21NT AUTHORITY\SYSTEM +13241300x800000000000000010584Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.301{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\openwith.exe|5c91e48dda5e9a2a\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010585Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.342{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\osqueryd.exe|9babb64fb6dcf9f9\LowerCaseLongPathc:\program files\osquery\osqueryd\osqueryd.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010586Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.342{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\osqueryd.exe|9babb64fb6dcf9f9\Publisherosquery foundationNT AUTHORITY\SYSTEM +13241300x800000000000000010587Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.342{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\osqueryd.exe|9babb64fb6dcf9f9\LinkDate12/27/2023 23:22:56NT AUTHORITY\SYSTEM +13241300x800000000000000010588Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.342{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\osqueryd.exe|9babb64fb6dcf9f9\BinProductVersion5.11.0.0NT AUTHORITY\SYSTEM +13241300x800000000000000010589Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.358{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pickerhost.exe|3b85f25a872af81a\LowerCaseLongPathc:\windows\system32\pickerhost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010590Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.358{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pickerhost.exe|3b85f25a872af81a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010591Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.358{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pickerhost.exe|3b85f25a872af81a\LinkDate03/19/2050 17:12:11NT AUTHORITY\SYSTEM +13241300x800000000000000010592Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.358{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pickerhost.exe|3b85f25a872af81a\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010593Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.358{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pnputil.exe|987679f36a34f0f3\LowerCaseLongPathc:\windows\system32\pnputil.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010594Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.358{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pnputil.exe|987679f36a34f0f3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010595Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.358{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pnputil.exe|987679f36a34f0f3\LinkDate04/06/1996 11:37:56NT AUTHORITY\SYSTEM +13241300x800000000000000010596Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.358{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pnputil.exe|987679f36a34f0f3\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010597Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.379{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\powershell.exe|bd2e1475245f53a2\LowerCaseLongPathc:\windows\system32\windowspowershell\v1.0\powershell.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010598Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.379{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\powershell.exe|bd2e1475245f53a2\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010599Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.379{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\powershell.exe|bd2e1475245f53a2\LinkDate01/28/2029 07:58:40NT AUTHORITY\SYSTEM +13241300x800000000000000010600Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.379{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\powershell.exe|bd2e1475245f53a2\BinProductVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010601Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.381{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\powershell.exe|bdbb2c1d41b249e7\LowerCaseLongPathc:\windows\syswow64\windowspowershell\v1.0\powershell.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010602Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.381{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\powershell.exe|bdbb2c1d41b249e7\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010603Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.381{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\powershell.exe|bdbb2c1d41b249e7\LinkDate05/10/2004 17:56:54NT AUTHORITY\SYSTEM +13241300x800000000000000010604Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.381{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\powershell.exe|bdbb2c1d41b249e7\BinProductVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010605Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.389{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|20bf7484dcde13ee\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\pwahelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010606Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.389{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|20bf7484dcde13ee\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010607Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.389{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|20bf7484dcde13ee\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010608Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.389{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|20bf7484dcde13ee\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010609Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.389{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|20bf7484dcde13ee\LowerCaseLongPathc:\program files (x86)\microsoft\edge\application\pwahelper.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010610Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.389{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|20bf7484dcde13ee\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010611Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.389{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|20bf7484dcde13ee\LinkDate10/22/2025 21:13:40NT AUTHORITY\SYSTEM +13241300x800000000000000010612Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.389{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\pwahelper.exe|20bf7484dcde13ee\BinProductVersion141.0.3537.99NT AUTHORITY\SYSTEM +13241300x800000000000000010613Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.405{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\reg.exe|83f32596acff4023\LowerCaseLongPathc:\windows\system32\reg.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010614Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.405{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\reg.exe|83f32596acff4023\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010615Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.405{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\reg.exe|83f32596acff4023\LinkDate02/01/2102 17:04:30NT AUTHORITY\SYSTEM +13241300x800000000000000010616Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.405{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\reg.exe|83f32596acff4023\BinProductVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010617Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.408{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\reg.exe|dae4008c3ff6ffc0\LowerCaseLongPathc:\windows\syswow64\reg.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010618Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.408{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\reg.exe|dae4008c3ff6ffc0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010619Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.408{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\reg.exe|dae4008c3ff6ffc0\LinkDate12/28/2080 21:53:06NT AUTHORITY\SYSTEM +13241300x800000000000000010620Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.408{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\reg.exe|dae4008c3ff6ffc0\BinProductVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010621Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.411{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\regedit.exe|cad7f90dbb3ce123\LowerCaseLongPathc:\windows\regedit.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010622Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.411{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\regedit.exe|cad7f90dbb3ce123\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010623Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.411{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\regedit.exe|cad7f90dbb3ce123\LinkDate10/11/2075 19:24:22NT AUTHORITY\SYSTEM +13241300x800000000000000010624Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.411{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\regedit.exe|cad7f90dbb3ce123\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010625Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.411{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\regsvr32.exe|8f2966bc37740081\LowerCaseLongPathc:\windows\syswow64\regsvr32.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010626Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.411{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\regsvr32.exe|8f2966bc37740081\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010627Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.411{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\regsvr32.exe|8f2966bc37740081\LinkDate07/13/2018 12:04:48NT AUTHORITY\SYSTEM +13241300x800000000000000010628Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.411{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\regsvr32.exe|8f2966bc37740081\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010629Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\rundll32.exe|c8d854bf61fafc41\LowerCaseLongPathc:\windows\system32\rundll32.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010630Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\rundll32.exe|c8d854bf61fafc41\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010631Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\rundll32.exe|c8d854bf61fafc41\LinkDate06/28/1988 15:11:22NT AUTHORITY\SYSTEM +13241300x800000000000000010632Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\rundll32.exe|c8d854bf61fafc41\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010633Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runonce.exe|112bcdfdacfed846\LowerCaseLongPathc:\windows\system32\runonce.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010634Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runonce.exe|112bcdfdacfed846\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010635Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runonce.exe|112bcdfdacfed846\LinkDate07/20/2001 18:10:17NT AUTHORITY\SYSTEM +13241300x800000000000000010636Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runonce.exe|112bcdfdacfed846\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010637Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runonce.exe|63eeaa8ac8c22e75\LowerCaseLongPathc:\windows\syswow64\runonce.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010638Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runonce.exe|63eeaa8ac8c22e75\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010639Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runonce.exe|63eeaa8ac8c22e75\LinkDate04/12/2043 01:54:20NT AUTHORITY\SYSTEM +13241300x800000000000000010640Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runonce.exe|63eeaa8ac8c22e75\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010641Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runtimebroker.ex|e0ee56ced61a9674\LowerCaseLongPathc:\windows\system32\runtimebroker.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010642Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runtimebroker.ex|e0ee56ced61a9674\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010643Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runtimebroker.ex|e0ee56ced61a9674\LinkDate08/24/2105 23:21:20NT AUTHORITY\SYSTEM +13241300x800000000000000010644Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\runtimebroker.ex|e0ee56ced61a9674\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010645Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sc.exe|f9557929d5a0fd7b\LowerCaseLongPathc:\windows\system32\sc.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010646Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sc.exe|f9557929d5a0fd7b\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010647Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sc.exe|f9557929d5a0fd7b\LinkDate08/14/2055 16:55:30NT AUTHORITY\SYSTEM +13241300x800000000000000010648Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sc.exe|f9557929d5a0fd7b\BinProductVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010649Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\schtasks.exe|d164abe84be90391\LowerCaseLongPathc:\windows\syswow64\schtasks.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010650Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\schtasks.exe|d164abe84be90391\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010651Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\schtasks.exe|d164abe84be90391\LinkDate10/14/1978 07:56:28NT AUTHORITY\SYSTEM +13241300x800000000000000010652Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.421{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\schtasks.exe|d164abe84be90391\BinProductVersion10.0.26100.4343NT AUTHORITY\SYSTEM +13241300x800000000000000010653Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sdbinst.exe|abd8eadcb53d1cf9\LowerCaseLongPathc:\windows\system32\sdbinst.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010654Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sdbinst.exe|abd8eadcb53d1cf9\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010655Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sdbinst.exe|abd8eadcb53d1cf9\LinkDate07/04/2084 01:53:36NT AUTHORITY\SYSTEM +13241300x800000000000000010656Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sdbinst.exe|abd8eadcb53d1cf9\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010657Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\searchindexer.ex|656ad2d8d06756c\LowerCaseLongPathc:\windows\system32\searchindexer.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010658Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\searchindexer.ex|656ad2d8d06756c\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010659Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\searchindexer.ex|656ad2d8d06756c\LinkDate03/08/1987 21:57:28NT AUTHORITY\SYSTEM +13241300x800000000000000010660Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\searchindexer.ex|656ad2d8d06756c\BinProductVersion7.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010661Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|2af635c7e213d024\LowerCaseLongPathc:\windows\system32\securityhealth\10.0.27840.1000-0\securityhealthhost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010662Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|2af635c7e213d024\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010663Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|2af635c7e213d024\LinkDate04/30/1994 17:17:52NT AUTHORITY\SYSTEM +13241300x800000000000000010664Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|2af635c7e213d024\BinProductVersion10.0.27840.1000NT AUTHORITY\SYSTEM +13241300x800000000000000010665Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|73c10dabec8b1be5\LowerCaseLongPathc:\windows\system32\securityhealthhost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010666Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|73c10dabec8b1be5\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010667Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|73c10dabec8b1be5\LinkDate09/24/2043 07:21:04NT AUTHORITY\SYSTEM +13241300x800000000000000010668Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|73c10dabec8b1be5\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010669Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthse|3a6d325b78a9c5bf\LowerCaseLongPathc:\windows\system32\securityhealthservice.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010670Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthse|3a6d325b78a9c5bf\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010671Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthse|3a6d325b78a9c5bf\LinkDate01/21/2058 12:35:10NT AUTHORITY\SYSTEM +13241300x800000000000000010672Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthse|3a6d325b78a9c5bf\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010673Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\services.exe|a9f10120a5dfa066\LowerCaseLongPathc:\windows\system32\services.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010674Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\services.exe|a9f10120a5dfa066\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010675Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\services.exe|a9f10120a5dfa066\LinkDate02/27/2053 09:39:07NT AUTHORITY\SYSTEM +13241300x800000000000000010676Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.437{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\services.exe|a9f10120a5dfa066\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010677Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\shutdown.exe|e576d9990252c4ee\LowerCaseLongPathc:\windows\system32\shutdown.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010678Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\shutdown.exe|e576d9990252c4ee\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010679Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\shutdown.exe|e576d9990252c4ee\LinkDate06/11/2073 06:56:20NT AUTHORITY\SYSTEM +13241300x800000000000000010680Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\shutdown.exe|e576d9990252c4ee\BinProductVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000010681Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sihclient.exe|92e5ae7dc3f76efd\LowerCaseLongPathc:\windows\system32\sihclient.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010682Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sihclient.exe|92e5ae7dc3f76efd\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010683Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sihclient.exe|92e5ae7dc3f76efd\LinkDate06/09/2040 18:59:25NT AUTHORITY\SYSTEM +13241300x800000000000000010684Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sihclient.exe|92e5ae7dc3f76efd\BinProductVersion1350.2506.29012.0NT AUTHORITY\SYSTEM +13241300x800000000000000010685Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sihost.exe|b528ee4e5557944a\LowerCaseLongPathc:\windows\system32\sihost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010686Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sihost.exe|b528ee4e5557944a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010687Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sihost.exe|b528ee4e5557944a\LinkDate07/30/2093 20:21:16NT AUTHORITY\SYSTEM +13241300x800000000000000010688Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.453{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sihost.exe|b528ee4e5557944a\BinProductVersion10.0.26100.1882NT AUTHORITY\SYSTEM +13241300x800000000000000010689Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.469{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\smss.exe|e5f1e221aaf19079\LowerCaseLongPathc:\windows\system32\smss.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010690Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.469{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\smss.exe|e5f1e221aaf19079\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010691Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.469{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\smss.exe|e5f1e221aaf19079\LinkDate02/02/2016 08:18:51NT AUTHORITY\SYSTEM +13241300x800000000000000010692Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.469{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\smss.exe|e5f1e221aaf19079\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010693Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.469{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\spoolsv.exe|1bb2eb6a2f17a3d0\LowerCaseLongPathc:\windows\system32\spoolsv.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010694Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.469{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\spoolsv.exe|1bb2eb6a2f17a3d0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010695Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.469{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\spoolsv.exe|1bb2eb6a2f17a3d0\LinkDate11/21/1995 12:35:54NT AUTHORITY\SYSTEM +13241300x800000000000000010696Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.469{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\spoolsv.exe|1bb2eb6a2f17a3d0\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010697Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.475{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sppextcomobj.exe|b05799c8b1eb4a3\LowerCaseLongPathc:\windows\system32\sppextcomobj.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010698Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.475{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sppextcomobj.exe|b05799c8b1eb4a3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010699Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.475{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sppextcomobj.exe|b05799c8b1eb4a3\LinkDate05/29/2006 05:46:22NT AUTHORITY\SYSTEM +13241300x800000000000000010700Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.475{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\sppextcomobj.exe|b05799c8b1eb4a3\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010701Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.475{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\svchost.exe|3a3b9820ea882eb4\LowerCaseLongPathc:\windows\system32\svchost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010702Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.475{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\svchost.exe|3a3b9820ea882eb4\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010703Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.475{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\svchost.exe|3a3b9820ea882eb4\LinkDate02/06/2054 15:19:25NT AUTHORITY\SYSTEM +13241300x800000000000000010704Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.475{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\svchost.exe|3a3b9820ea882eb4\BinProductVersion10.0.26100.4343NT AUTHORITY\SYSTEM +13241300x800000000000000010705Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.489{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\systemsettingsad|bf44aa5e9c15352\LowerCaseLongPathc:\windows\system32\systemsettingsadminflows.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010706Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.489{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\systemsettingsad|bf44aa5e9c15352\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010707Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.489{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\systemsettingsad|bf44aa5e9c15352\LinkDate06/20/2065 23:19:30NT AUTHORITY\SYSTEM +13241300x800000000000000010708Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.489{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\systemsettingsad|bf44aa5e9c15352\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010709Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.489{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskhostw.exe|87c6c7cdfdc02bad\LowerCaseLongPathc:\windows\system32\taskhostw.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010710Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.489{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskhostw.exe|87c6c7cdfdc02bad\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010711Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.489{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskhostw.exe|87c6c7cdfdc02bad\LinkDate07/12/2094 20:53:28NT AUTHORITY\SYSTEM +13241300x800000000000000010712Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.489{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskhostw.exe|87c6c7cdfdc02bad\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010713Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.491{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskkill.exe|48a632600af6cbf3\LowerCaseLongPathc:\windows\system32\taskkill.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010714Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.491{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskkill.exe|48a632600af6cbf3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010715Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.491{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskkill.exe|48a632600af6cbf3\LinkDate07/25/2052 11:51:30NT AUTHORITY\SYSTEM +13241300x800000000000000010716Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.491{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskkill.exe|48a632600af6cbf3\BinProductVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000010717Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.501{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskmgr.exe|615e0fd2618692ec\LowerCaseLongPathc:\windows\system32\taskmgr.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010718Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.501{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskmgr.exe|615e0fd2618692ec\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010719Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.501{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskmgr.exe|615e0fd2618692ec\LinkDate06/25/2063 11:45:51NT AUTHORITY\SYSTEM +13241300x800000000000000010720Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.501{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\taskmgr.exe|615e0fd2618692ec\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010721Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.501{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tiworker.exe|4088b8ca18215795\LowerCaseLongPathc:\windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\tiworker.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010722Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.501{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tiworker.exe|4088b8ca18215795\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010723Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.501{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tiworker.exe|4088b8ca18215795\LinkDate10/10/1972 16:19:04NT AUTHORITY\SYSTEM +13241300x800000000000000010724Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.501{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tiworker.exe|4088b8ca18215795\BinProductVersion10.0.26100.4933NT AUTHORITY\SYSTEM +13241300x800000000000000010725Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.516{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tzsync.exe|b7312a33f1aac703\LowerCaseLongPathc:\windows\system32\tzsync.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010726Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.516{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tzsync.exe|b7312a33f1aac703\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010727Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.516{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tzsync.exe|b7312a33f1aac703\LinkDate10/11/2078 11:17:25NT AUTHORITY\SYSTEM +13241300x800000000000000010728Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.516{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tzsync.exe|b7312a33f1aac703\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010729Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.516{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ucpdmgr.exe|cf023fa141a0ffe7\LowerCaseLongPathc:\windows\system32\ucpdmgr.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010730Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.516{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ucpdmgr.exe|cf023fa141a0ffe7\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010731Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.516{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ucpdmgr.exe|cf023fa141a0ffe7\LinkDate08/28/1993 07:44:13NT AUTHORITY\SYSTEM +13241300x800000000000000010732Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.516{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\ucpdmgr.exe|cf023fa141a0ffe7\BinProductVersion4.3.0.0NT AUTHORITY\SYSTEM +13241300x800000000000000010733Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.532{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unins000.exe|7f9839beea0077f1\LowerCaseLongPathc:\users\administrator\appdata\local\programs\ollama\unins000.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010734Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.532{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unins000.exe|7f9839beea0077f1\Publisherollama NT AUTHORITY\SYSTEM +13241300x800000000000000010735Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.532{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unins000.exe|7f9839beea0077f1\LinkDate01/08/2025 15:36:35NT AUTHORITY\SYSTEM +13241300x800000000000000010736Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.532{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unins000.exe|7f9839beea0077f1\BinProductVersion0.11.11.0NT AUTHORITY\SYSTEM +13241300x800000000000000010737Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.534{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unins000.exe|7f9839beea0077f1\LowerCaseLongPathc:\users\administrator\appdata\local\programs\ollama\unins000.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010738Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.534{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unins000.exe|7f9839beea0077f1\Publisherollama NT AUTHORITY\SYSTEM +13241300x800000000000000010739Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.534{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unins000.exe|7f9839beea0077f1\LinkDate01/08/2025 15:36:35NT AUTHORITY\SYSTEM +13241300x800000000000000010740Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.534{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\unins000.exe|7f9839beea0077f1\BinProductVersion0.11.11.0NT AUTHORITY\SYSTEM +13241300x800000000000000010741Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.538{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\upfc.exe|5e5b940356e40b74\LowerCaseLongPathc:\windows\system32\upfc.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010742Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.538{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\upfc.exe|5e5b940356e40b74\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010743Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.538{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\upfc.exe|5e5b940356e40b74\LinkDate06/19/1977 11:46:01NT AUTHORITY\SYSTEM +13241300x800000000000000010744Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.538{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\upfc.exe|5e5b940356e40b74\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010745Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.538{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\userinit.exe|b21bd46ff8053d3c\LowerCaseLongPathc:\windows\system32\userinit.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010746Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.538{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\userinit.exe|b21bd46ff8053d3c\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010747Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.538{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\userinit.exe|b21bd46ff8053d3c\LinkDate03/16/1977 14:44:39NT AUTHORITY\SYSTEM +13241300x800000000000000010748Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.538{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\userinit.exe|b21bd46ff8053d3c\BinProductVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010749Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.540{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\usoclient.exe|fe093c71b7abec54\LowerCaseLongPathc:\windows\system32\usoclient.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010750Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.540{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\usoclient.exe|fe093c71b7abec54\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010751Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.540{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\usoclient.exe|fe093c71b7abec54\LinkDate12/25/1972 02:06:28NT AUTHORITY\SYSTEM +13241300x800000000000000010752Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.540{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\usoclient.exe|fe093c71b7abec54\BinProductVersion10.0.26100.3037NT AUTHORITY\SYSTEM +13241300x800000000000000010753Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.544{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vgauthservice.ex|2eefeb8d422b68c0\LowerCaseLongPathc:\program files\vmware\vmware tools\vmware vgauth\vgauthservice.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010754Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.544{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vgauthservice.ex|2eefeb8d422b68c0\Publishervmware, inc.NT AUTHORITY\SYSTEM +13241300x800000000000000010755Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.544{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vgauthservice.ex|2eefeb8d422b68c0\LinkDate05/02/2024 06:15:43NT AUTHORITY\SYSTEM +13241300x800000000000000010756Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.544{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vgauthservice.ex|2eefeb8d422b68c0\BinProductVersion17.0.0.5473NT AUTHORITY\SYSTEM +13241300x800000000000000010757Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.548{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vm3dservice.exe|6ff0ee25bab6bb16\LowerCaseLongPathc:\windows\system32\vm3dservice.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010758Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.548{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vm3dservice.exe|6ff0ee25bab6bb16\Publishervmware, inc.NT AUTHORITY\SYSTEM +13241300x800000000000000010759Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.548{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vm3dservice.exe|6ff0ee25bab6bb16\LinkDate04/19/2024 20:54:04NT AUTHORITY\SYSTEM +13241300x800000000000000010760Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.548{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vm3dservice.exe|6ff0ee25bab6bb16\BinProductVersion9.17.7.4NT AUTHORITY\SYSTEM +13241300x800000000000000010761Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.550{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vmtoolsd.exe|ab980160c33e8fa1\LowerCaseLongPathc:\program files\vmware\vmware tools\vmtoolsd.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010762Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.550{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vmtoolsd.exe|ab980160c33e8fa1\Publishervmware, inc.NT AUTHORITY\SYSTEM +13241300x800000000000000010763Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.550{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vmtoolsd.exe|ab980160c33e8fa1\LinkDate05/02/2024 09:14:36NT AUTHORITY\SYSTEM +13241300x800000000000000010764Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.550{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\vmtoolsd.exe|ab980160c33e8fa1\BinProductVersion12.4.5.49651NT AUTHORITY\SYSTEM +13241300x800000000000000010765Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.554{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\waasmedicagent.e|387adc0eeaef539a\LowerCaseLongPathc:\windows\uus\amd64\waasmedicagent.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010766Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.554{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\waasmedicagent.e|387adc0eeaef539a\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010767Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.554{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\waasmedicagent.e|387adc0eeaef539a\LinkDate07/20/2002 10:39:38NT AUTHORITY\SYSTEM +13241300x800000000000000010768Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.554{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\waasmedicagent.e|387adc0eeaef539a\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010769Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.559{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wazuh-agent.exe|52f6b73a63fc6e\LowerCaseLongPathc:\program files (x86)\ossec-agent\wazuh-agent.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010770Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.559{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wazuh-agent.exe|52f6b73a63fc6e\Publisherwazuh inc.NT AUTHORITY\SYSTEM +13241300x800000000000000010771Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.559{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wazuh-agent.exe|52f6b73a63fc6e\LinkDate10/24/2023 08:18:32NT AUTHORITY\SYSTEM +13241300x800000000000000010772Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.559{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wazuh-agent.exe|52f6b73a63fc6e\BinProductVersion4.6.0.0NT AUTHORITY\SYSTEM +13241300x800000000000000010773Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.567{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\werfault.exe|6ef8f048a55d3a7f\LowerCaseLongPathc:\windows\system32\werfault.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010774Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.567{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\werfault.exe|6ef8f048a55d3a7f\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010775Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.567{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\werfault.exe|6ef8f048a55d3a7f\LinkDate01/12/2078 04:03:50NT AUTHORITY\SYSTEM +13241300x800000000000000010776Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.567{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\werfault.exe|6ef8f048a55d3a7f\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010777Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.571{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\werfaultsecure.e|d654a6ffa1b3f1c7\LowerCaseLongPathc:\windows\system32\werfaultsecure.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010778Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.571{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\werfaultsecure.e|d654a6ffa1b3f1c7\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010779Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.571{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\werfaultsecure.e|d654a6ffa1b3f1c7\LinkDate12/14/2030 00:49:12NT AUTHORITY\SYSTEM +13241300x800000000000000010780Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.571{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\werfaultsecure.e|d654a6ffa1b3f1c7\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010781Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.577{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wermgr.exe|ab945ca7a8b4f808\LowerCaseLongPathc:\windows\syswow64\wermgr.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010782Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.577{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wermgr.exe|ab945ca7a8b4f808\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010783Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.577{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wermgr.exe|ab945ca7a8b4f808\LinkDate06/22/2058 22:24:44NT AUTHORITY\SYSTEM +13241300x800000000000000010784Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.577{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wermgr.exe|ab945ca7a8b4f808\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010785Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.579{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wermgr.exe|ae5df027a4ca83dd\LowerCaseLongPathc:\windows\system32\wermgr.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010786Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.579{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wermgr.exe|ae5df027a4ca83dd\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010787Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.579{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wermgr.exe|ae5df027a4ca83dd\LinkDate02/24/2048 14:54:29NT AUTHORITY\SYSTEM +13241300x800000000000000010788Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.579{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wermgr.exe|ae5df027a4ca83dd\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010789Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.579{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wevtutil.exe|f1c7ea938fdf696d\LowerCaseLongPathc:\windows\system32\wevtutil.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010790Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.579{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wevtutil.exe|f1c7ea938fdf696d\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010791Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.579{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wevtutil.exe|f1c7ea938fdf696d\LinkDate02/15/2079 19:38:51NT AUTHORITY\SYSTEM +13241300x800000000000000010792Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.579{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wevtutil.exe|f1c7ea938fdf696d\BinProductVersion10.0.26100.1150NT AUTHORITY\SYSTEM +13241300x800000000000000010793Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.597{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wftpserver.exe|f15cdefa93d50d2c\LowerCaseLongPathc:\program files (x86)\wing ftp server\wftpserver.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010794Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.597{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wftpserver.exe|f15cdefa93d50d2c\LinkDate07/02/2014 06:15:17NT AUTHORITY\SYSTEM +13241300x800000000000000010795Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.603{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\widgets.exe|a9c930271e359c22\LowerCaseLongPathc:\program files\windowsapps\microsoftwindows.client.webexperience_525.22301.90.0_x64__cw5n1h2txyewy\dashboard\widgets.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010796Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.603{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\widgets.exe|a9c930271e359c22\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010797Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.603{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\widgets.exe|a9c930271e359c22\LinkDate08/19/2025 07:17:37NT AUTHORITY\SYSTEM +13241300x800000000000000010798Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.603{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\widgets.exe|a9c930271e359c22\BinProductVersion525.22301.40.0NT AUTHORITY\SYSTEM +13241300x800000000000000010799Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.603{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\widgetservice.ex|ae8ecd4a4cacc470\LowerCaseLongPathc:\program files\windowsapps\microsoft.widgetsplatformruntime_1.6.14.0_x64__8wekyb3d8bbwe\widgetservice\widgetservice.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010800Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.603{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\widgetservice.ex|ae8ecd4a4cacc470\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010801Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.603{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\widgetservice.ex|ae8ecd4a4cacc470\LinkDate07/07/2015 14:50:16NT AUTHORITY\SYSTEM +13241300x800000000000000010802Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.603{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\widgetservice.ex|ae8ecd4a4cacc470\BinProductVersion0.5.0.0NT AUTHORITY\SYSTEM +13241300x800000000000000010803Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.611{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windeploy.exe|3d482a077f170021\LowerCaseLongPathc:\windows\system32\oobe\windeploy.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010804Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.611{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windeploy.exe|3d482a077f170021\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010805Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.611{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windeploy.exe|3d482a077f170021\LinkDate02/02/2103 17:50:02NT AUTHORITY\SYSTEM +13241300x800000000000000010806Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.611{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windeploy.exe|3d482a077f170021\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010807Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.611{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windowspackagema|2a2dd2139de4fd0\LowerCaseLongPathc:\program files\windowsapps\microsoft.desktopappinstaller_1.26.430.0_x64__8wekyb3d8bbwe\windowspackagemanagerserver.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010808Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.611{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windowspackagema|2a2dd2139de4fd0\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010809Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.611{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windowspackagema|2a2dd2139de4fd0\LinkDate07/17/2025 18:02:33NT AUTHORITY\SYSTEM +13241300x800000000000000010810Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.611{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windowspackagema|2a2dd2139de4fd0\BinProductVersion1.26.430.0NT AUTHORITY\SYSTEM +13241300x800000000000000010811Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.613{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windowsterminal.|b11a4a4325aa94a7\LowerCaseLongPathc:\program files\windowsapps\microsoft.windowsterminal_1.22.12111.0_x64__8wekyb3d8bbwe\windowsterminal.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010812Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.613{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windowsterminal.|b11a4a4325aa94a7\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010813Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.613{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windowsterminal.|b11a4a4325aa94a7\LinkDate07/30/2025 17:24:27NT AUTHORITY\SYSTEM +13241300x800000000000000010814Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.613{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windowsterminal.|b11a4a4325aa94a7\BinProductVersion1.22.2507.30001NT AUTHORITY\SYSTEM +13241300x800000000000000010815Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.615{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wininit.exe|92052297798522\LowerCaseLongPathc:\windows\system32\wininit.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010816Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.615{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wininit.exe|92052297798522\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010817Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.615{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wininit.exe|92052297798522\LinkDate02/15/2097 03:33:59NT AUTHORITY\SYSTEM +13241300x800000000000000010818Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.615{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wininit.exe|92052297798522\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010819Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.619{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\winlogon.exe|7111cb227d6798fb\LowerCaseLongPathc:\windows\system32\winlogon.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010820Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.619{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\winlogon.exe|7111cb227d6798fb\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010821Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.619{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\winlogon.exe|7111cb227d6798fb\LinkDate07/17/2027 20:23:25NT AUTHORITY\SYSTEM +13241300x800000000000000010822Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.619{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\winlogon.exe|7111cb227d6798fb\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010823Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.643{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\winsat.exe|bdbc7af94f920c2d\LowerCaseLongPathc:\windows\system32\winsat.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010824Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.643{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\winsat.exe|bdbc7af94f920c2d\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010825Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.643{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\winsat.exe|bdbc7af94f920c2d\LinkDate01/07/2026 09:07:48NT AUTHORITY\SYSTEM +13241300x800000000000000010826Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.643{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\winsat.exe|bdbc7af94f920c2d\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010827Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.651{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wmiprvse.exe|124e12238fc8c4e4\LowerCaseLongPathc:\windows\system32\wbem\wmiprvse.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010828Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.651{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wmiprvse.exe|124e12238fc8c4e4\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010829Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.651{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wmiprvse.exe|124e12238fc8c4e4\LinkDate06/09/2003 18:54:17NT AUTHORITY\SYSTEM +13241300x800000000000000010830Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.651{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wmiprvse.exe|124e12238fc8c4e4\BinProductVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010831Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.655{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wsl.exe|88d5e8ee009f35b9\LowerCaseLongPathc:\windows\system32\wsl.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010832Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.655{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wsl.exe|88d5e8ee009f35b9\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010833Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.655{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wsl.exe|88d5e8ee009f35b9\LinkDate01/12/2009 20:27:19NT AUTHORITY\SYSTEM +13241300x800000000000000010834Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.655{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wsl.exe|88d5e8ee009f35b9\BinProductVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010835Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.667{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wslservice.exe|72bc8a5fea501aa3\LowerCaseLongPathc:\program files\wsl\wslservice.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010836Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.667{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wslservice.exe|72bc8a5fea501aa3\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010837Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.667{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wslservice.exe|72bc8a5fea501aa3\LinkDate11/09/2024 16:24:56NT AUTHORITY\SYSTEM +13241300x800000000000000010838Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.667{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wslservice.exe|72bc8a5fea501aa3\BinProductVersion5.0.1.1NT AUTHORITY\SYSTEM +13241300x800000000000000010839Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.671{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wuaucltcore.exe|49c19336683ae935\LowerCaseLongPathc:\windows\uus\amd64\wuaucltcore.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010840Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.671{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wuaucltcore.exe|49c19336683ae935\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010841Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.671{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wuaucltcore.exe|49c19336683ae935\LinkDate06/17/2101 11:07:35NT AUTHORITY\SYSTEM +13241300x800000000000000010842Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.671{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wuaucltcore.exe|49c19336683ae935\BinProductVersion1310.2506.11012.0NT AUTHORITY\SYSTEM +13241300x800000000000000010843Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:23:41.677{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wudfhost.exe|591959b03299c0d\LowerCaseLongPathc:\windows\system32\wudfhost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000010844Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:23:41.677{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wudfhost.exe|591959b03299c0d\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000010845Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:23:41.677{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wudfhost.exe|591959b03299c0d\LinkDate02/26/2047 03:50:14NT AUTHORITY\SYSTEM +13241300x800000000000000010846Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:23:41.677{8223a6b9-154f-6902-f801-000000002b00}5072C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\wudfhost.exe|591959b03299c0d\BinProductVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010847Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:41.931{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\scsi/disk&ven_nvme&prod_vmware_virtual_n/5&25a13950&0&000000\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010848Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:41.931{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07f0&subsys_07f015ad&rev_00/4&3b50545d&0&00b8\DriverVerVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010849Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:41.977{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi/acpi0003/1\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010850Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.058{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_8086&dev_7191&subsys_00000000&rev_01/3&61aaa01&0&08\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010851Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.064{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/volmgr/0000\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010852Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.064{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi/pnp0a03/2&daba3ff&0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010853Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.068{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/basicdisplay/0000\DriverVerVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010854Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.072{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi/vmw0004/0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010855Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.924{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/vid/0000\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010856Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.940{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/spaceport/0000\DriverVerVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010857Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.951{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/kdnic/0000\DriverVerVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010858Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.951{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&a8\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010859Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.953{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&a9\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010860Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.953{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&aa\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010861Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.953{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&ab\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010862Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.955{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&ac\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010863Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.955{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&ad\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010864Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.956{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&ae\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010865Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.956{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&af\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010866Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.956{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010867Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.958{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b1\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010868Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.958{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b2\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010869Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.958{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b3\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010870Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.958{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b4\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010871Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.960{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b5\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010872Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.960{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b6\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010873Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.960{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b7\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010874Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:42.960{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b8\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010875Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.936{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&b9\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010876Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.941{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&ba\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010877Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.941{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&bb\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010878Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.943{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&bc\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010879Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.943{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&bd\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010880Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.943{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&be\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010881Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.945{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&bf\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010882Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.945{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&c0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010883Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.945{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&c1\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010884Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.947{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&c2\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010885Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.947{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&c3\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010886Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.947{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&c4\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010887Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.949{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&c5\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010888Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.949{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&c6\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010889Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.949{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07a0&subsys_07a015ad&rev_01/3&61aaa01&0&c7\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010890Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.952{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\hdaudio/func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001/5&217be3d6&0&0001\DriverVerVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010891Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.952{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_0774&subsys_197615ad&rev_00/4&bbf9765&0&0088\DriverVerVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010892Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.952{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/vpcivsp/0000\DriverVerVersion10.0.26100.3037NT AUTHORITY\SYSTEM +13241300x800000000000000010893Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:43.958{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_0770&subsys_077015ad&rev_00/4&bbf9765&0&1088\DriverVerVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010894Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.942{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_1977&subsys_197715ad&rev_09/4&bbf9765&0&0888\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010895Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.956{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi_hal/pnp0c08/0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010896Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.956{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/basicrender/0000\DriverVerVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010897Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.961{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi_hal/uefi/0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010898Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.963{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi/genuineintel_-_intel64_family_6_model_154_-_12th_gen_intel(r)_core(tm)_i5-1240p/_0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010899Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.963{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi/genuineintel_-_intel64_family_6_model_154_-_12th_gen_intel(r)_core(tm)_i5-1240p/_1\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010900Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.963{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi/genuineintel_-_intel64_family_6_model_154_-_12th_gen_intel(r)_core(tm)_i5-1240p/_2\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010901Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.963{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\acpi/genuineintel_-_intel64_family_6_model_154_-_12th_gen_intel(r)_core(tm)_i5-1240p/_3\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010902Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.963{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_8086&dev_7111&subsys_197615ad&rev_01/3&61aaa01&0&39\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010903Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.972{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/storvsp/0000\DriverVerVersion10.0.26100.4652NT AUTHORITY\SYSTEM +13241300x800000000000000010904Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.972{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pciide/idechannel/4&23686003&0&0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010905Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.972{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pciide/idechannel/4&23686003&0&1\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010906Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.976{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\usb/root_hub20/5&36a4b5d6&0\DriverVerVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010907Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.978{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\usb/root_hub/5&2891968b&0\DriverVerVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010908Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.985{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_07e0&subsys_07e015ad&rev_00/4&bbf9765&0&1888\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010909Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.985{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_0790&subsys_079015ad&rev_02/3&61aaa01&0&88\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010910Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.987{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\root/system/0000\DriverVerVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010911Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.989{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/mmdevapi/{0.0.1.00000000}.{9a7526dc-b447-4185-b852-6d454330c217}\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000010912Microsoft-Windows-Sysmon/Operationalsoc101win11Context,DeviceConnectedOrUpdatedSetValue2025-10-29 13:23:44.989{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDeviceContainer\{c475a361-a2e6-6c4e-4dda-c3731b4beeb3}\FriendlyNameMicrophone (High Definition Audio Device)NT AUTHORITY\SYSTEM +13241300x800000000000000010913Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:44.994{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\display/default_monitor/4&427137e&0&uid0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010914Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:45.946{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\pci/ven_15ad&dev_077a&subsys_077a15ad&rev_00/4&1ee266c4&0&00b0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010915Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:45.950{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\usb/root_hub30/5&11106705&0&0\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010916Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:45.950{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/mmdevapi/{0.0.0.00000000}.{f0c5979a-a346-411a-bd61-25c75f1b113f}\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000010917Microsoft-Windows-Sysmon/Operationalsoc101win11Context,DeviceConnectedOrUpdatedSetValue2025-10-29 13:23:45.950{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDeviceContainer\{cf788797-6b4a-1c54-5418-3cb035518e98}\FriendlyNameSpeakers (High Definition Audio Device)NT AUTHORITY\SYSTEM +13241300x800000000000000010918Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:45.960{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\usb/vid_0e0f&pid_0003&mi_01/7&bcbfcc2&0&0001\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010919Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:45.960{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\usb/vid_0e0f&pid_0003&mi_00/7&bcbfcc2&0&0000\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010920Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:45.960{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\usb/vid_0e0f&pid_0003/6&39d724fe&0&5\DriverVerVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010921Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.201{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/acpi.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010922Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.211{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/acpidev.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010923Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.227{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/acx01000.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010924Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.243{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/afd.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010925Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.243{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/afunix.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010926Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.243{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ahcache.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010927Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.267{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/amdk8.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010928Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.277{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/amdppm.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010929Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.283{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/appid.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010930Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.952{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/applockerfltr.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010931Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.981{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/atapi.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010932Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.983{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bam.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010933Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.983{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/basicdisplay.inf_amd64_2753efdbb0d9a226/basicdisplay.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010934Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.999{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/basicrender.inf_amd64_4a022393fa7795f1/basicrender.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010935Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.999{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bfs.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010936Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:46.999{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bindflt.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010937Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.015{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bowser.sys\DriverVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010938Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.015{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bthenum.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010939Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.040{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/microsoft.bluetooth.legacy.leenumerator.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010940Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.042{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bthmini.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010941Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.047{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bthmodem.sys\DriverVersion10.0.26100.4061NT AUTHORITY\SYSTEM +13241300x800000000000000010942Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.081{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bthport.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010943Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.081{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bthusb.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010944Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.100{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/buttonconverter.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010945Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.111{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/cad.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010946Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.111{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/cdd.dll\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010947Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.139{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/cldflt.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010948Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.150{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/clfs.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010949Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.154{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/cmbatt.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010950Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.175{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/cng.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010951Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.192{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/csc.sys\DriverVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000010952Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.192{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/dam.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010953Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.207{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/disk.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010954Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.209{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/dmvsc.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010955Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.223{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/drmkaud.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010956Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.271{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/dxgkrnl.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010957Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.287{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ehstorclass.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010958Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.287{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/executioncontext.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010959Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.302{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/filetrace.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010960Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.318{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/fltmgr.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010961Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.350{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/fvevol.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010962Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.350{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/genericusbfn.inf_amd64_71c810ddc0116541/genericusbfn.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010963Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.375{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/msgpioclx.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010964Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.381{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hdaudio.sys\DriverVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010965Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.382{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hdaudbus.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010966Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.382{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hidi2c.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010967Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.400{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hidspicx.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010968Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.400{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hidusb.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010969Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.416{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hnswfpdriver.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010970Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.416{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hsp.sys\DriverVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010971Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.446{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/http.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010972Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.447{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hvcrash.sys\DriverVersion10.0.26100.3912NT AUTHORITY\SYSTEM +13241300x800000000000000010973Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.461{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hvservice.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010974Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.461{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/hwpolicy.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010975Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.477{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/i3chost.inf_amd64_d4247b39ddc61336/i3chost.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010976Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.493{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/indirectkmd.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010977Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.493{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/intelide.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010978Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.509{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/intelpep.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010979Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.509{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/intelpmt.sys\DriverVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010980Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.524{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/intelppm.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010981Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.524{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ipfltdrv.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010982Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.542{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ipmidrv.sys\DriverVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000010983Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.542{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ipnat.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010984Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.564{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/msiscsi.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010985Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.571{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/kdnic.sys\DriverVersion6.2.1.0NT AUTHORITY\SYSTEM +13241300x800000000000000010986Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.571{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ksecdd.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010987Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.587{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ksecpkg.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010988Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.603{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wd/ksld.sys\DriverVersion1.1.25081.3013NT AUTHORITY\SYSTEM +13241300x800000000000000010989Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.603{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ksthunk.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000010990Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.619{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/l1vhlwf.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010991Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.623{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/l2bridge.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010992Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.629{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/lltdio.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010993Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.635{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/luafv.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010994Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.653{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mausbhost.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010995Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.666{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mausbip.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000010996Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.680{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mbbcx.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010997Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.685{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/microsoft.bluetooth.avrcptransport.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000010998Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.685{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mmcss.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000010999Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.701{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/modem.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011000Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.701{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/monitor.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011001Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.714{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mrxsmb.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000011002Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.730{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mrxsmb10.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011003Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.730{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mrxsmb20.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011004Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.748{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/bridge.sys\DriverVersion10.0.26100.2454NT AUTHORITY\SYSTEM +13241300x800000000000000011005Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.754{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mskssrv.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011006Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.762{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mspclock.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011007Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.765{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mspqm.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011008Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.778{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/msquic.sys\DriverVersion2.4.11.0NT AUTHORITY\SYSTEM +13241300x800000000000000011009Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.778{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/msquicprev.sys\DriverVersion2.3.12.0NT AUTHORITY\SYSTEM +13241300x800000000000000011010Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.799{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/msseccore.sys\DriverVersion10.8798.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011011Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.812{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mssecflt.sys\DriverVersion10.8798.25857.1000NT AUTHORITY\SYSTEM +13241300x800000000000000011012Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.817{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mssecwfp.sys\DriverVersion10.8798.25857.1000NT AUTHORITY\SYSTEM +13241300x800000000000000011013Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.822{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mstee.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011014Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.825{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/mup.sys\DriverVersion10.0.26100.4061NT AUTHORITY\SYSTEM +13241300x800000000000000011015Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.853{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/nwifi.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011016Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.890{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ndis.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011017Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.897{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ndiscap.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011018Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.907{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ndisimplatform.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011019Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.907{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ndistapi.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011020Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.921{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ndiswan.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011021Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.929{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ndproxy.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011022Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.936{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ndu.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011023Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.936{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/netadaptercx.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011024Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.954{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/netbt.sys\DriverVersion10.0.26100.4652NT AUTHORITY\SYSTEM +13241300x800000000000000011025Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.967{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/netvsc.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011026Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.967{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/networkprivacypolicy.inf_amd64_175be12a1ceba7e2/networkprivacypolicy.sys\DriverVersionMissingNT AUTHORITY\SYSTEM +13241300x800000000000000011027Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.967{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/nsiproxy.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011028Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.988{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/nvdimm.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011029Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.994{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/nvmedisk.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011030Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:47.999{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/p9rdr.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011031Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.015{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/partmgr.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011032Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.015{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/pci.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011033Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.015{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/pciide.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011034Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.031{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/pdc.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011035Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.047{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/peauth.sys\DriverVersion10.0.26100.4652NT AUTHORITY\SYSTEM +13241300x800000000000000011036Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.069{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/pktmon.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011037Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.075{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/pktmonapi.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011038Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.081{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/pluton-heci.inf_amd64_2dd7270ad04edb22/pluton-heci.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011039Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.094{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/pmem.sys\DriverVersion10.0.26100.3912NT AUTHORITY\SYSTEM +13241300x800000000000000011040Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.099{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/processr.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011041Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.114{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/qwavedrv.sys\DriverVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000011042Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.128{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/agilevpn.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011043Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.135{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/rasl2tp.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011044Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.143{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/rdpdr.sys\DriverVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000011045Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.157{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/rdyboost.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011046Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.170{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/rfcomm.sys\DriverVersion10.0.26100.4061NT AUTHORITY\SYSTEM +13241300x800000000000000011047Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.178{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/routepolicy.sys\DriverVersion10.0.26100.3037NT AUTHORITY\SYSTEM +13241300x800000000000000011048Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.182{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/rspndr.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011049Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.191{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/scfilter.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011050Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.206{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/scmbus.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011051Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.221{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/sdbus.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011052Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.229{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/sdstor.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011053Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.247{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/smbdirect.sys\DriverVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000011054Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.255{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/spaceparser.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011055Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.265{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/spaceport.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000011056Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.271{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/spbcx.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011057Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.280{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/srv.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011058Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.290{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/srv2.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011059Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.297{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/srvnet.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011060Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.302{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/storahci.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011061Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.307{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/stornvme.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000011062Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.313{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/storufs.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011063Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.320{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/storvsc.sys\DriverVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000011064Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.320{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/storvsp.sys\DriverVersion10.0.26100.4652NT AUTHORITY\SYSTEM +13241300x800000000000000011065Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.320{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/swenum.inf_amd64_8b9dd76f362e3ec6/swenum.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011066Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.373{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/tcpip.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011067Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.380{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/tcpipreg.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011068Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.391{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/tdx.sys\DriverVersion10.0.26100.4652NT AUTHORITY\SYSTEM +13241300x800000000000000011069Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.396{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/c_thermal.inf_amd64_29c3532559395caa/thermalfilter.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011070Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.396{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/tpm.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011071Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.412{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/tsusbflt.sys\DriverVersion10.0.26100.2894NT AUTHORITY\SYSTEM +13241300x800000000000000011072Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.412{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/tsusbgd.sys\DriverVersion10.0.26100.2894NT AUTHORITY\SYSTEM +13241300x800000000000000011073Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.430{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/tunnel.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011074Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.444{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ucmcx.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011075Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.452{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ucmucsicx.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011076Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.462{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ucpd.sys\DriverVersion4.3.0.0NT AUTHORITY\SYSTEM +13241300x800000000000000011077Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.470{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ucx01000.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011078Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.476{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/udecx.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011079Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.484{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/udfs.sys\DriverVersion10.0.26100.4652NT AUTHORITY\SYSTEM +13241300x800000000000000011080Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.486{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/uefi.inf_amd64_76e7c15a1110d3a0/uefi.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011081Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.497{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/uiomap.inf_amd64_2f71bdab19510aef/uiomap.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011082Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.511{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/usb-platformdetection.inf_amd64_dd328ec315d48717/usb-platformdetection.sys\DriverVersionMissingNT AUTHORITY\SYSTEM +13241300x800000000000000011083Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.538{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/usb4devicerouter.inf_amd64_f4352c97d57d5d7f/usb4devicerouter.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011084Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.557{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/usb4hostrouter.inf_amd64_d8c2526d2b56c531/usb4hostrouter.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011085Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.570{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbaudio.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011086Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.571{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbccgp.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011087Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.571{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbehci.sys\DriverVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000011088Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.571{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbhub.sys\DriverVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000011089Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.587{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbhub3.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011090Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.587{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbohci.sys\DriverVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000011091Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.603{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbprint.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011092Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.603{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbser.sys\DriverVersion10.0.26100.2454NT AUTHORITY\SYSTEM +13241300x800000000000000011093Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.619{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbstor.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011094Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.619{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbuhci.sys\DriverVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000011095Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.635{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/usbxhci.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011096Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.635{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/verifierext.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011097Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.651{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vfpext.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011098Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.667{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vhdmp.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000011099Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.683{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vhdparser.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011100Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.699{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vhf.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011101Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.715{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vid.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011102Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.715{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vmbus.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011103Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.731{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vmbusproxy.sys\DriverVersion10.0.26100.4066NT AUTHORITY\SYSTEM +13241300x800000000000000011104Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.731{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vmbusr.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011105Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.747{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vmsproxyhnic.sys\DriverVersion10.0.26100.3912NT AUTHORITY\SYSTEM +13241300x800000000000000011106Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.763{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vmswitch.sys\DriverVersion10.0.26100.4946NT AUTHORITY\SYSTEM +13241300x800000000000000011107Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.778{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vmsproxy.sys\DriverVersion10.0.26100.3912NT AUTHORITY\SYSTEM +13241300x800000000000000011108Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.784{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/volmgr.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011109Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.794{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/volsnap.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011110Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.812{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vpci.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011111Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.814{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vpcivsp.sys\DriverVersion10.0.26100.3037NT AUTHORITY\SYSTEM +13241300x800000000000000011112Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.825{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/vwififlt.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011113Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.833{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wanarp.sys\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011114Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.839{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wcifs.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011115Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.848{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wd/wdboot.sys\DriverVersion4.18.25080.5NT AUTHORITY\SYSTEM +13241300x800000000000000011116Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.857{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wdf01000.sys\DriverVersion1.35.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011117Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.873{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wd/wdfilter.sys\DriverVersion4.18.25080.5NT AUTHORITY\SYSTEM +13241300x800000000000000011118Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.889{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wdiwifi.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011119Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.905{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wdmcompanionfilter.sys\DriverVersion10.0.26100.2454NT AUTHORITY\SYSTEM +13241300x800000000000000011120Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.905{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wd/wdnisdrv.sys\DriverVersion4.18.25080.5NT AUTHORITY\SYSTEM +13241300x800000000000000011121Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.921{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wfplwfs.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011122Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.937{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wificx.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011123Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.937{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wimmount.sys\DriverVersion10.0.26100.3624NT AUTHORITY\SYSTEM +13241300x800000000000000011124Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.953{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/windowstrustedrt.sys\DriverVersion10.0.26100.4061NT AUTHORITY\SYSTEM +13241300x800000000000000011125Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.953{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/windowstrustedrtproxy.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011126Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.953{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/wini3ctarget.inf_amd64_a0f0ccbe333937ce/wini3ctarget.sys\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011127Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.969{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/winnat.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011128Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.969{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ws2ifsl.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011129Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.985{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wtd.sys\DriverVersion10.0.26100.4061NT AUTHORITY\SYSTEM +13241300x800000000000000011130Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:48.996{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wudfpf.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011131Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.006{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/wudfrd.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011132Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.017{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/xboxgip.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011133Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.017{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/xinputhid.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011134Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.034{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/ztdns.sys\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011135Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.034{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/hidcfu.inf_amd64_1fb64427d6480a8b/hidcfu.dll\DriverVersion1.0.0.0NT AUTHORITY\SYSTEM +13241300x800000000000000011136Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.052{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/hidi3c.inf_amd64_713eab098670616d/hidi3c.dll\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011137Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.065{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/microsoft.bluetooth.profiles.hidovergatt.dll\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011138Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.065{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/hidtelephony.dll\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011139Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.081{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/iddcx.dll\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011140Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.096{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/netadaptercxum.dll\DriverVersion10.0.26100.4202NT AUTHORITY\SYSTEM +13241300x800000000000000011141Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.112{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/nfccx.dll\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011142Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.128{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/rdpidd.inf_amd64_449e893f6a845b9b/rdpidd.dll\DriverVersion10.0.26100.4484NT AUTHORITY\SYSTEM +13241300x800000000000000011143Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.130{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/sensorscx.dll\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +13241300x800000000000000011144Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.144{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/smccx.dll\DriverVersion10.0.26100.3323NT AUTHORITY\SYSTEM +13241300x800000000000000011145Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.144{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/driverstore/filerepository/storfwupdate.inf_amd64_fa7e1db8cfcc4f82/storfwupdate.dll\DriverVersion1.0.0.0NT AUTHORITY\SYSTEM +13241300x800000000000000011146Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.162{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/ucmcx.dll\DriverVersion10.0.26100.3912NT AUTHORITY\SYSTEM +13241300x800000000000000011147Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:23:49.162{8223a6b9-155d-6902-fa01-000000002b00}5664C:\WINDOWS\system32\compattelrunner.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDriverBinary\c:/windows/system32/drivers/umdf/usbxhcicompanion.dll\DriverVersion10.0.26100.4768NT AUTHORITY\SYSTEM +154100x800000000000000011148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:53.051{8223a6b9-1569-6902-fe01-000000002b00}11296C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k smphostC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +22542200x800000000000000011149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:53.443{8223a6b9-1319-6902-6700-000000002b00}5168SOC101WIN110fe80::a832:a53b:32c1:6645;::ffff:172.16.143.133;C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\NETWORK SERVICE +154100x800000000000000011150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:57.844{8223a6b9-156d-6902-0002-000000002b00}1888C:\Windows\ImmersiveControlPanel\SystemSettings.exe10.0.26100.4652 (WinBuild.160101.0800)SettingsMicrosoft® Windows® Operating SystemMicrosoft CorporationSystemSettings.exe"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanelC:\Windows\ImmersiveControlPanel\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B237E61BD46B8B0C37895661C182DDBC,SHA256=50DB6A50FC541E24F31FDCB240C97C9D3C267AFC4DE907BF1DCF9238EF2A914B,IMPHASH=1053E0B8206A1D7F7ECA60D282397B13{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000011151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:57.846{8223a6b9-156d-6902-0102-000000002b00}3700C:\Windows\System32\ApplicationFrameHost.exe10.0.26100.3912 (WinBuild.160101.0800)Application Frame HostMicrosoft® Windows® Operating SystemMicrosoft CorporationApplicationFrameHost.exeC:\WINDOWS\system32\ApplicationFrameHost.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=697A42DE43B5E355657494C345FEE5E5,SHA256=83A5467E68D23292B55BF0D1E2CB22113776AE7B009C733F5010D7D1F7190CA7,IMPHASH=28580ECEB0562A8A7FBD08DC4F37B368{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000011152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:58.701{8223a6b9-156e-6902-0202-000000002b00}8428C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalService -p -s SstpSvcC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000011153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:23:58.801{8223a6b9-156e-6902-0302-000000002b00}5268C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe1450.2506.28022.0MoUSO Core Worker ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationMoUSOCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E048EE9A14933FFA4A9C9FC7A8A7F83B,SHA256=B4A080E7ABAC28ADCBB172B53060508457C9CEC25BC339F3DFA0A031CD881737,IMPHASH=D3DBFEDBF38C961BD70D128454E64766{8223a6b9-1393-6902-3901-000000002b00}10328C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvcNT AUTHORITY\SYSTEM +13241300x800000000000000011154Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:24:07.086{8223a6b9-1330-6902-cb00-000000002b00}10148C:\Windows\System32\smartscreen.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm-studio-0.3.30|11238f399652b123\LowerCaseLongPathc:\users\administrator\downloads\lm-studio-0.3.30-2-x64.exesoc101win11\Administrator +13241300x800000000000000011155Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:24:07.086{8223a6b9-1330-6902-cb00-000000002b00}10148C:\Windows\System32\smartscreen.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm-studio-0.3.30|11238f399652b123\Publisherlm studiosoc101win11\Administrator +13241300x800000000000000011156Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:24:07.086{8223a6b9-1330-6902-cb00-000000002b00}10148C:\Windows\System32\smartscreen.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm-studio-0.3.30|11238f399652b123\LinkDate12/15/2018 22:26:14soc101win11\Administrator +13241300x800000000000000011157Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:24:07.086{8223a6b9-1330-6902-cb00-000000002b00}10148C:\Windows\System32\smartscreen.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm-studio-0.3.30|11238f399652b123\BinProductVersion0.3.30.0soc101win11\Administrator +154100x800000000000000011158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:09.184{8223a6b9-1579-6902-0902-000000002b00}10120C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivilegesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:09.192{8223a6b9-1579-6902-0a02-000000002b00}7268C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" Scan -ScheduleJob -RestrictPrivileges -ScanType 1 -ScanTrigger 59C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:09.256{8223a6b9-1579-6902-0d02-000000002b00}1236C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" Scan -ScheduleJob -RestrictPrivileges -ScanType 1 -ScanTrigger 59 -ReinvokeC:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1579-6902-0a02-000000002b00}7268C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" Scan -ScheduleJob -RestrictPrivileges -ScanType 1 -ScanTrigger 59NT AUTHORITY\SYSTEM +154100x800000000000000011161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:09.289{8223a6b9-1579-6902-0e02-000000002b00}10688C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -UnmanagedUpdateC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011162Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.943{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/{5e259276-bc7e-40e3-b93b-8f89b5f3abc0}\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000011163Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.952{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/ms_sstpminiport\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000011164Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.956{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/ms_agilevpnminiport\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000011165Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.963{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/ms_l2tpminiport\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000011166Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.971{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/ms_pptpminiport\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000011167Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.975{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/ms_pppoeminiport\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000011168Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.981{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/ms_ndiswanip\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000011169Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.985{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/ms_ndiswanipv6\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +13241300x800000000000000011170Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-DriverVerSetValue2025-10-29 13:24:09.990{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryDevicePnp\swd/msrras/ms_ndiswanbh\DriverVerVersion10.0.26100.1NT AUTHORITY\SYSTEM +154100x800000000000000011171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:12.108{8223a6b9-157c-6902-1102-000000002b00}2576C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000011172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:12.139{8223a6b9-157c-6902-1202-000000002b00}5656C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000011173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:11.622{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe0.3.30Discover, download, and run LLMs locallyLM StudioLM Studio-"C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exe" C:\Users\Administrator\Downloads\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=3F3FB643A297CEAD99CE29679B368C51,SHA256=0E59B73EF9A2D702AA349D85B483C5FF493BE320EC4844DA581EA3627D44183E,IMPHASH=B34F154EC913D2D2C435CBD644E91687{8223a6b9-1433-6902-8c01-000000002b00}6584C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" soc101win11\Administrator +13241300x800000000000000011174Microsoft-Windows-Sysmon/Operationalsoc101win11InvDBSetValue2025-10-29 13:24:13.072{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeBinary DataNT AUTHORITY\SYSTEM +11241100x800000000000000011175Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:14.717{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\System.dll2025-10-29 13:24:14.717soc101win11\Administrator +11241100x800000000000000011176Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:14.772{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\UAC.dll2025-10-29 13:24:14.772soc101win11\Administrator +11241100x800000000000000011177Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:14.842{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\StdUtils.dll2025-10-29 13:24:14.842soc101win11\Administrator +254200x800000000000000011178Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 13:24:14.903{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\modern-wizard.bmp2025-10-18 16:55:22.0002025-10-29 13:24:14.892soc101win11\Administrator +11241100x800000000000000011179Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:14.920{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\nsDialogs.dll2025-10-29 13:24:14.919soc101win11\Administrator +154100x800000000000000011180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:18.733{8223a6b9-1582-6902-1302-000000002b00}3028C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe1407.2506.11012.0Windows UpdateMicrosoft® Windows® Operating SystemMicrosoft Corporationwuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId dce658da-05c0-4fda-92f6-26b4e5d2b45f /RunHandlerComServerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=EA98A3ECEF7902605B361FC16D3D8081,SHA256=9C685412986F3939E7A84E62B09E319F4FA5B5C2B7006DE3441F6D4BB0CAC02D,IMPHASH=5FB5459A8931EA77DFAA79FC37CD9756{8223a6b9-1317-6902-3f00-000000002b00}3008C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauservNT AUTHORITY\SYSTEM +11241100x800000000000000011181Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:18.802{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exe2025-10-29 13:24:18.802NT AUTHORITY\SYSTEM +154100x800000000000000011182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:18.968{8223a6b9-1582-6902-1402-000000002b00}8240C:\Windows\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exe4.18.25090.3009AntiMalware Platform Update (amd64fre)Microsoft Malware ProtectionMicrosoft CorporationUpdatePlatform.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exe" C:\WINDOWS\SoftwareDistribution\Download\Install\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF770F0BADC21AE6A474B8620DB5B2D7,SHA256=16EE7DE0A15360FD98DB1AB982792CE23EFB698B8EBA6347D6BD207AB30657DB,IMPHASH=1B8228588B13615766448489C5655246{8223a6b9-1582-6902-1302-000000002b00}3028C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId dce658da-05c0-4fda-92f6-26b4e5d2b45f /RunHandlerComServerNT AUTHORITY\SYSTEM +11241100x800000000000000011183Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.211{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\DefenderCSP.dll2025-10-29 13:24:19.211NT AUTHORITY\SYSTEM +11241100x800000000000000011184Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.233{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MdeDiag.dll2025-10-29 13:24:19.231NT AUTHORITY\SYSTEM +11241100x800000000000000011185Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.255{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MipDlp.dll2025-10-29 13:24:19.255NT AUTHORITY\SYSTEM +11241100x800000000000000011186Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.350{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpAsDesc.dll2025-10-29 13:24:19.350NT AUTHORITY\SYSTEM +11241100x800000000000000011187Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.357{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpAzSubmit.dll2025-10-29 13:24:19.357NT AUTHORITY\SYSTEM +11241100x800000000000000011188Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.381{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpClient.dll2025-10-29 13:24:19.381NT AUTHORITY\SYSTEM +11241100x800000000000000011189Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.403{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpCommu.dll2025-10-29 13:24:19.403NT AUTHORITY\SYSTEM +11241100x800000000000000011190Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.415{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpDetours.dll2025-10-29 13:24:19.415NT AUTHORITY\SYSTEM +11241100x800000000000000011191Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.425{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpDetoursCopyAccelerator.dll2025-10-29 13:24:19.425NT AUTHORITY\SYSTEM +11241100x800000000000000011192Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.433{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpDlp.dll2025-10-29 13:24:19.433NT AUTHORITY\SYSTEM +11241100x800000000000000011193Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.453{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpEvMsg.dll2025-10-29 13:24:19.453NT AUTHORITY\SYSTEM +11241100x800000000000000011194Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.473{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpOAV.dll2025-10-29 13:24:19.473NT AUTHORITY\SYSTEM +11241100x800000000000000011195Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.486{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpRtp.dll2025-10-29 13:24:19.484NT AUTHORITY\SYSTEM +11241100x800000000000000011196Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.502{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpSenseComm.dll2025-10-29 13:24:19.502NT AUTHORITY\SYSTEM +11241100x800000000000000011197Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.516{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpSvc.dll2025-10-29 13:24:19.516NT AUTHORITY\SYSTEM +11241100x800000000000000011198Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.587{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpUpdate.dll2025-10-29 13:24:19.587NT AUTHORITY\SYSTEM +11241100x800000000000000011199Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.595{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpUxAgent.dll2025-10-29 13:24:19.595NT AUTHORITY\SYSTEM +11241100x800000000000000011200Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.607{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MsMpLics.dll2025-10-29 13:24:19.607NT AUTHORITY\SYSTEM +11241100x800000000000000011201Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.613{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\NpRep.dll2025-10-29 13:24:19.613NT AUTHORITY\SYSTEM +11241100x800000000000000011202Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.637{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\ProtectionManagement.dll2025-10-29 13:24:19.637NT AUTHORITY\SYSTEM +11241100x800000000000000011203Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.651{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\endpointdlp.dll2025-10-29 13:24:19.651NT AUTHORITY\SYSTEM +11241100x800000000000000011204Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.671{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\MpAsDesc.dll2025-10-29 13:24:19.669NT AUTHORITY\SYSTEM +11241100x800000000000000011205Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.676{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\MpClient.dll2025-10-29 13:24:19.676NT AUTHORITY\SYSTEM +11241100x800000000000000011206Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.696{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\MpDetours.dll2025-10-29 13:24:19.696NT AUTHORITY\SYSTEM +11241100x800000000000000011207Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.706{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\MpDetoursCopyAccelerator.dll2025-10-29 13:24:19.706NT AUTHORITY\SYSTEM +11241100x800000000000000011208Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.714{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\MpOAV.dll2025-10-29 13:24:19.714NT AUTHORITY\SYSTEM +11241100x800000000000000011209Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.724{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\MsMpLics.dll2025-10-29 13:24:19.724NT AUTHORITY\SYSTEM +11241100x800000000000000011210Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:19.732{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\endpointdlp.dll2025-10-29 13:24:19.732NT AUTHORITY\SYSTEM +11241100x800000000000000011211Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.754{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\ConfigSecurityPolicy.exe2025-10-29 13:24:19.752NT AUTHORITY\SYSTEM +11241100x800000000000000011212Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.767{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\DlpUserAgent.exe2025-10-29 13:24:19.767NT AUTHORITY\SYSTEM +11241100x800000000000000011213Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.776{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MipDlp.exe2025-10-29 13:24:19.776NT AUTHORITY\SYSTEM +11241100x800000000000000011214Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.790{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpCmdRun.exe2025-10-29 13:24:19.790NT AUTHORITY\SYSTEM +11241100x800000000000000011215Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.816{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpCopyAccelerator.exe2025-10-29 13:24:19.816NT AUTHORITY\SYSTEM +11241100x800000000000000011216Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.826{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpDefenderCoreService.exe2025-10-29 13:24:19.826NT AUTHORITY\SYSTEM +11241100x800000000000000011217Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.854{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpDlpCmd.exe2025-10-29 13:24:19.852NT AUTHORITY\SYSTEM +11241100x800000000000000011218Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.866{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpDlpService.exe2025-10-29 13:24:19.864NT AUTHORITY\SYSTEM +11241100x800000000000000011219Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.878{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpRecovery.exe2025-10-29 13:24:19.878NT AUTHORITY\SYSTEM +11241100x800000000000000011220Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.886{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpSigStub.exe2025-10-29 13:24:19.886NT AUTHORITY\SYSTEM +11241100x800000000000000011221Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.902{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MsMpEng.exe2025-10-29 13:24:19.902NT AUTHORITY\SYSTEM +11241100x800000000000000011222Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.910{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\NisSrv.exe2025-10-29 13:24:19.910NT AUTHORITY\SYSTEM +11241100x800000000000000011223Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.964{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\mpextms.exe2025-10-29 13:24:19.964NT AUTHORITY\SYSTEM +11241100x800000000000000011224Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:19.979{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\MpCmdRun.exe2025-10-29 13:24:19.979NT AUTHORITY\SYSTEM +11241100x800000000000000011225Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:20.007{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\x86\MpCopyAccelerator.exe2025-10-29 13:24:20.005NT AUTHORITY\SYSTEM +11241100x800000000000000011226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:21.526{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\Drivers\WdBoot.sys2025-10-29 13:24:21.526NT AUTHORITY\SYSTEM +11241100x800000000000000011227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:21.540{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\Drivers\WdDevFlt.sys2025-10-29 13:24:21.540NT AUTHORITY\SYSTEM +11241100x800000000000000011228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:21.572{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\Drivers\WdFilter.sys2025-10-29 13:24:21.572NT AUTHORITY\SYSTEM +11241100x800000000000000011229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:21.629{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\Drivers\WdNisDrv.sys2025-10-29 13:24:21.629NT AUTHORITY\SYSTEM +11241100x800000000000000011230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:21.657{8223a6b9-1582-6902-1402-000000002b00}8240C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\Drivers\ksld.sys2025-10-29 13:24:21.657NT AUTHORITY\SYSTEM +154100x800000000000000011231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:21.752{8223a6b9-1585-6902-1502-000000002b00}8684C:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpSigStub.exe1.1.24010.2001 (7122f19e8a45ed98fbe41ea0bdadf251e45717f9)Microsoft Malware Protection Signature Update StubMicrosoft Malware ProtectionMicrosoft CorporationMpSigStub.exeC:\WINDOWS\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpSigStub.exe /stub 1.1.24010.2001 /payload 4.18.25090.3009 /program C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeC:\WINDOWS\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=71CF589293424C4389202C7F1752FB2D,SHA256=071B0D3A08503A8B88AEEDA1D20F371A563377028F6E252DC66CCE60AB8F823E,IMPHASH=73D10F665B566678AC1DDF9942FDAEA0{8223a6b9-1582-6902-1402-000000002b00}8240C:\Windows\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exe" NT AUTHORITY\SYSTEM +154100x800000000000000011232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:22.115{8223a6b9-1586-6902-1602-000000002b00}10636C:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpRecovery.exe4.18.25090.3009 (eca5bedb954af928bf12cba51015d5b3e0195e2e)Microsoft Malware Protection RecoveryMicrosoft® Windows® Operating SystemMicrosoft Corporationmprecovery.exeC:\WINDOWS\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpRecovery.exeC:\WINDOWS\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=F5F1F4AF401395AD76B7AD3AEDD6C744,SHA256=80DADD13D147E5C2E89B4671625468C087D8B773ED118C540426EBC2E04FCF5E,IMPHASH=6F16BF3C7540F752871993EB3657EA0F{8223a6b9-1585-6902-1502-000000002b00}8684C:\Windows\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpSigStub.exeC:\WINDOWS\SystemTemp\A9822913-9963-4D92-B409-1DE9A2D62759\MpSigStub.exe /stub 1.1.24010.2001 /payload 4.18.25090.3009 /program C:\WINDOWS\SoftwareDistribution\Download\Install\UpdatePlatform.amd64fre.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011233Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:24:22.430{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\updateplatform.a|c79706282bf37b9f\LowerCaseLongPathc:\windows\softwaredistribution\download\install\updateplatform.amd64fre.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011234Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:24:22.430{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\updateplatform.a|c79706282bf37b9f\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000011235Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:24:22.430{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\updateplatform.a|c79706282bf37b9f\LinkDate09/30/2025 21:39:46NT AUTHORITY\SYSTEM +13241300x800000000000000011236Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:24:22.430{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\updateplatform.a|c79706282bf37b9f\BinProductVersion4.18.25090.3009NT AUTHORITY\SYSTEM +13241300x800000000000000011237Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:24:22.677{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpsigstub.exe|17fd0379f6e799cc\LowerCaseLongPathc:\windows\systemtemp\a9822913-9963-4d92-b409-1de9a2d62759\mpsigstub.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011238Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:24:22.677{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpsigstub.exe|17fd0379f6e799cc\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000011239Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:24:22.677{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpsigstub.exe|17fd0379f6e799cc\LinkDate03/07/2001 16:32:57NT AUTHORITY\SYSTEM +13241300x800000000000000011240Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:24:22.677{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpsigstub.exe|17fd0379f6e799cc\BinProductVersion1.1.24010.2001NT AUTHORITY\SYSTEM +13241300x800000000000000011241Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:24:22.683{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mprecovery.exe|3c211614389e76ed\LowerCaseLongPathc:\windows\systemtemp\a9822913-9963-4d92-b409-1de9a2d62759\mprecovery.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011242Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:24:22.683{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mprecovery.exe|3c211614389e76ed\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000011243Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:24:22.683{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mprecovery.exe|3c211614389e76ed\LinkDate10/03/2066 10:21:32NT AUTHORITY\SYSTEM +13241300x800000000000000011244Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:24:22.683{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mprecovery.exe|3c211614389e76ed\BinProductVersion4.18.25090.3009NT AUTHORITY\SYSTEM +11241100x800000000000000011245Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:22.903{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\ConfigSecurityPolicy.exe2025-10-29 13:24:22.901NT AUTHORITY\SYSTEM +11241100x800000000000000011246Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.919{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpAzSubmit.dll2025-10-29 13:24:22.919NT AUTHORITY\SYSTEM +11241100x800000000000000011247Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.929{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll2025-10-29 13:24:22.929NT AUTHORITY\SYSTEM +11241100x800000000000000011248Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:22.939{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe2025-10-29 13:24:22.939NT AUTHORITY\SYSTEM +11241100x800000000000000011249Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.945{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCommu.dll2025-10-29 13:24:22.945NT AUTHORITY\SYSTEM +11241100x800000000000000011250Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.955{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDetours.dll2025-10-29 13:24:22.955NT AUTHORITY\SYSTEM +11241100x800000000000000011251Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.955{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDetoursCopyAccelerator.dll2025-10-29 13:24:22.955NT AUTHORITY\SYSTEM +11241100x800000000000000011252Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:22.960{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCopyAccelerator.exe2025-10-29 13:24:22.960NT AUTHORITY\SYSTEM +11241100x800000000000000011253Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.960{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOAV.dll2025-10-29 13:24:22.960NT AUTHORITY\SYSTEM +11241100x800000000000000011254Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.971{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpRtp.dll2025-10-29 13:24:22.960NT AUTHORITY\SYSTEM +11241100x800000000000000011255Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.971{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDlp.dll2025-10-29 13:24:22.971NT AUTHORITY\SYSTEM +11241100x800000000000000011256Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:22.986{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NpRep.dll2025-10-29 13:24:22.986NT AUTHORITY\SYSTEM +11241100x800000000000000011257Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.002{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpSvc.dll2025-10-29 13:24:23.002NT AUTHORITY\SYSTEM +11241100x800000000000000011258Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.042{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpUpdate.dll2025-10-29 13:24:23.042NT AUTHORITY\SYSTEM +11241100x800000000000000011259Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.046{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe2025-10-29 13:24:23.046NT AUTHORITY\SYSTEM +11241100x800000000000000011260Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.050{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpLics.dll2025-10-29 13:24:23.050NT AUTHORITY\SYSTEM +11241100x800000000000000011261Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.052{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\DlpUserAgent.exe2025-10-29 13:24:23.052NT AUTHORITY\SYSTEM +11241100x800000000000000011262Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.056{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MipDlp.exe2025-10-29 13:24:23.056NT AUTHORITY\SYSTEM +11241100x800000000000000011263Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.062{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe2025-10-29 13:24:23.062NT AUTHORITY\SYSTEM +11241100x800000000000000011264Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.082{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exe2025-10-29 13:24:23.082NT AUTHORITY\SYSTEM +11241100x800000000000000011265Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.098{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDlpService.exe2025-10-29 13:24:23.098NT AUTHORITY\SYSTEM +11241100x800000000000000011266Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.104{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\DefenderCSP.dll2025-10-29 13:24:23.104NT AUTHORITY\SYSTEM +11241100x800000000000000011267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:23.122{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdBoot.sys2025-10-29 13:24:23.122NT AUTHORITY\SYSTEM +11241100x800000000000000011268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:23.124{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdDevFlt.sys2025-10-29 13:24:23.124NT AUTHORITY\SYSTEM +11241100x800000000000000011269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:23.128{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdFilter.sys2025-10-29 13:24:23.128NT AUTHORITY\SYSTEM +11241100x800000000000000011270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:23.134{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdNisDrv.sys2025-10-29 13:24:23.134NT AUTHORITY\SYSTEM +11241100x800000000000000011271Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.136{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\endpointdlp.dll2025-10-29 13:24:23.136NT AUTHORITY\SYSTEM +11241100x800000000000000011272Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.146{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpSenseComm.dll2025-10-29 13:24:23.146NT AUTHORITY\SYSTEM +11241100x800000000000000011273Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.146{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MdeDiag.dll2025-10-29 13:24:23.146NT AUTHORITY\SYSTEM +11241100x800000000000000011274Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.196{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDlpCmd.exe2025-10-29 13:24:23.196NT AUTHORITY\SYSTEM +11241100x800000000000000011275Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.202{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpUxAgent.dll2025-10-29 13:24:23.202NT AUTHORITY\SYSTEM +13241300x800000000000000011276Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:23.383{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WdNisDrv\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x800000000000000011277Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:23.383{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WdNisDrv\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +11241100x800000000000000011278Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.394{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpAsDesc.dll2025-10-29 13:24:23.394NT AUTHORITY\SYSTEM +11241100x800000000000000011279Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.478{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpEvMsg.dll2025-10-29 13:24:23.478NT AUTHORITY\SYSTEM +11241100x800000000000000011280Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.534{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\ProtectionManagement.dll2025-10-29 13:24:23.534NT AUTHORITY\SYSTEM +11241100x800000000000000011281Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.557{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\MpAsDesc.dll2025-10-29 13:24:23.557NT AUTHORITY\SYSTEM +11241100x800000000000000011282Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.574{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\MpClient.dll2025-10-29 13:24:23.574NT AUTHORITY\SYSTEM +11241100x800000000000000011283Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.574{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\MpCmdRun.exe2025-10-29 13:24:23.574NT AUTHORITY\SYSTEM +11241100x800000000000000011284Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.589{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\MpDetours.dll2025-10-29 13:24:23.589NT AUTHORITY\SYSTEM +11241100x800000000000000011285Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.589{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\MpDetoursCopyAccelerator.dll2025-10-29 13:24:23.589NT AUTHORITY\SYSTEM +11241100x800000000000000011286Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.589{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\endpointdlp.dll2025-10-29 13:24:23.589NT AUTHORITY\SYSTEM +11241100x800000000000000011287Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.605{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\MpOAV.dll2025-10-29 13:24:23.605NT AUTHORITY\SYSTEM +11241100x800000000000000011288Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.605{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\MsMpLics.dll2025-10-29 13:24:23.605NT AUTHORITY\SYSTEM +11241100x800000000000000011289Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:23.605{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MipDlp.dll2025-10-29 13:24:23.605NT AUTHORITY\SYSTEM +11241100x800000000000000011290Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:23.787{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\mpextms.exe2025-10-29 13:24:23.787NT AUTHORITY\SYSTEM +11241100x800000000000000011291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:23.801{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\ksld.sys2025-10-29 13:24:23.801NT AUTHORITY\SYSTEM +13241300x800000000000000011292Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:23.827{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\KslD\StartDWORD (0x00000004)NT AUTHORITY\SYSTEM +154100x800000000000000011293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:23.832{8223a6b9-1587-6902-1702-000000002b00}3196C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" -RestartServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1318-6902-5c00-000000002b00}4216C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011294Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:23.995{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WdNisDrv\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +154100x800000000000000011295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:24.162{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Antimalware Service ExecutableMicrosoft® Windows® Operating SystemMicrosoft CorporationMsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=77E9CCBB8335BA5D4345447BA5B6121D,SHA256=C02655606C199BA276D2B01A796E6EBBA07A41EEDE9C85FE516D9A5851290155,IMPHASH=6D2BBFBF0C29D2CD8E6FD86A0206A516{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011296Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:24.947{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WdNisSvc\ImagePath"%%ProgramData%%\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:24.960{8223a6b9-1588-6902-1a02-000000002b00}5608C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-AMFilter.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.079{8223a6b9-1589-6902-1c02-000000002b00}2128C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-AMFilter.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdFilter.sys" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdFilter.sys" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdFilter.sys"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.144{8223a6b9-1589-6902-1e02-000000002b00}7788C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Windows-Windows Defender.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +12241200x800000000000000011300Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:24:25.215{8223a6b9-1589-6902-1e02-000000002b00}7788C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/OperationalNT AUTHORITY\SYSTEM +12241200x800000000000000011301Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:24:25.247{8223a6b9-1589-6902-1e02-000000002b00}7788C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHCNT AUTHORITY\SYSTEM +154100x800000000000000011302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.264{8223a6b9-1589-6902-2002-000000002b00}10956C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Windows-Windows Defender.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpEvMsg.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpEvMsg.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpEvMsg.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011303Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\OwningPublisher{11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78}NT AUTHORITY\SYSTEM +13241300x800000000000000011304Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011305Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\IsolationDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011306Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\ChannelAccessO:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x3;;;BO)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x3;;;SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x800000000000000011307Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\MaxSizeDWORD (0x01000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011308Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011309Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011310Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\OwningPublisher{11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78}NT AUTHORITY\SYSTEM +13241300x800000000000000011311Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011312Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\IsolationDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011313Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\ChannelAccessO:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x3;;;BO)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x3;;;SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x800000000000000011314Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\MaxSizeDWORD (0x00040000)NT AUTHORITY\SYSTEM +13241300x800000000000000011315Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011316Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:25.327{8223a6b9-1589-6902-2002-000000002b00}10956C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +154100x800000000000000011317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.649{8223a6b9-1589-6902-2202-000000002b00}10412C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-Service.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.709{8223a6b9-1589-6902-2402-000000002b00}440C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-Service.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpSvc.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpSvc.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpSvc.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.779{8223a6b9-1589-6902-2602-000000002b00}10196C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-NIS.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.820{8223a6b9-1589-6902-2802-000000002b00}8776C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-NIS.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.877{8223a6b9-1589-6902-2a02-000000002b00}4100C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-RTP.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:25.949{8223a6b9-1589-6902-2c02-000000002b00}3984C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-RTP.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpRtp.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpRtp.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpRtp.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.017{8223a6b9-158a-6902-2e02-000000002b00}6896C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-Protection.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.137{8223a6b9-158a-6902-3002-000000002b00}11812C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-Protection.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011325Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:24:26.184{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\CLSID\{2781761E-28E0-4109-99FE-B9D127C57AFE}\InprocServer32\(Default)"%%ProgramData%%\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll"NT AUTHORITY\SYSTEM +13241300x800000000000000011326Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:24:26.184{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\WOW6432Node\CLSID\{2781761E-28E0-4109-99FE-B9D127C57AFE}\InprocServer32\(Default)"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\X86\MpOav.dll"NT AUTHORITY\SYSTEM +13241300x800000000000000011327Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\CLSID\{2DCD7FDB-8809-48E4-8E4F-3157C57CF987}\InprocServer32\(Default)C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MPUXAGENT.DLLNT AUTHORITY\SYSTEM +13241300x800000000000000011328Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\CLSID\{4DB116D1-9B24-4DFC-946B-BFE03E852002}\InProcServer32\(Default)C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MPUXAGENT.DLLNT AUTHORITY\SYSTEM +13241300x800000000000000011329Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\CLSID\{195B4D07-3DE2-4744-BBF2-D90121AE785B}\InprocServer32\(Default)"%%ProgramData%%\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\DefenderCSP.dll"NT AUTHORITY\SYSTEM +11241100x800000000000000011330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\ConfigDefender.psd12024-11-17 14:06:32.792NT AUTHORITY\SYSTEM +11241100x800000000000000011331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpComputerStatus.cdxml2024-11-17 14:06:32.792NT AUTHORITY\SYSTEM +11241100x800000000000000011332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreat.cdxml2024-11-17 14:06:32.792NT AUTHORITY\SYSTEM +11241100x800000000000000011333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatCatalog.cdxml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatDetection.cdxml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpPreference.cdxml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpBehavioralNetworkBlockingRules.cdxml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpScan.cdxml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpWDOScan.cdxml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpSignature.cdxml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpRollback.cdxml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefenderPerformance\ConfigDefenderPerformance.psd12024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefenderPerformance\MSFT_MpPerformanceRecording.psm12024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefenderPerformance\MSFT_MpPerformanceRecording.wprp2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +11241100x800000000000000011344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.200{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeC:\Windows\System32\WindowsPowerShell\v1.0\Modules\ConfigDefenderPerformance\MSFT_MpPerformanceReport.Format.ps1xml2024-11-17 14:06:32.794NT AUTHORITY\SYSTEM +154100x800000000000000011345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.217{8223a6b9-158a-6902-3202-000000002b00}4444C:\Windows\System32\wbem\mofcomp.exe10.0.26100.4202 (WinBuild.160101.0800)The Managed Object Format (MOF) Compiler Microsoft® Windows® Operating SystemMicrosoft Corporationmofcomp.exeC:\WINDOWS\system32\wbem\mofcomp.exe "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\ProtectionManagement.mof"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=CE2EFFFCD373A28AF43E32AC86374C16,SHA256=C6BFC677DCC72782429BCDAC4A489546F488A8C545051A16B926446300BF3F05,IMPHASH=33E29380499B6B413B576B5B4927D346{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011346Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:24:26.391{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exeHKCR\CLSID\{A7C452EF-8E9F-42EB-9F2B-245613CA0DC9}\InprocServer32\(Default)"%%ProgramData%%\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\ProtectionManagement.dll"NT AUTHORITY\SYSTEM +154100x800000000000000011347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.402{8223a6b9-158a-6902-3402-000000002b00}1088C:\Windows\System32\taskkill.exe10.0.26100.1 (WinBuild.160101.0800)Terminates ProcessesMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskkill.exeC:\WINDOWS\system32\taskkill.exe /f /FI "MODULES eq protectionmanagement.dll" /IM WmiPrvSE.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=CBF904BC6835B56A4BD5AC4141F8D131,SHA256=1249717315FC8F4D2DF17D5DB9DA0444795FDB9FB83DFB1F763C3F39282244F7,IMPHASH=FFE513AF7F8477FE56A2B3C63BE2D148{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011348Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:26.477{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MDCoreSvc\ImagePath"%%ProgramData%%\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011349Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:26.477{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MDCoreSvc\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +154100x800000000000000011350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.486{8223a6b9-158a-6902-3602-000000002b00}6480C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exe4.18.25090.3009 (eca5bedb954af928bf12cba51015d5b3e0195e2e)Antimalware Core ServiceMicrosoft® Windows® Operating SystemMicrosoft CorporationMpDefenderCoreService.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=B5CB6FA557506DA9729527D8B49C77A3,SHA256=1732632B30B27DFE458F0F6D05F4E50B7DD6CCD892ADC9ABA091446BEBE2200B,IMPHASH=3B718699E3114A2EC08F4D6A06959E8A{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000011351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.510{8223a6b9-158a-6902-3702-000000002b00}6084C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k GPSvcGroupC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011352Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:26.511{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WinDefend\ImagePath"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.520{8223a6b9-158a-6902-3802-000000002b00}10872C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" -RestartServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-1588-6902-1902-000000002b00}5072C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.585{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe4.18.25090.3009 (eca5bedb954af928bf12cba51015d5b3e0195e2e)Antimalware Service ExecutableMicrosoft® Windows® Operating SystemMicrosoft CorporationMsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=05BFF37CEAB240F0EE39B43A5D132F35,SHA256=C8F990145359081D2D2FD616D8BF2F1E82FEF822B10A2DC6FF82E66630CDEE16,IMPHASH=6D2BBFBF0C29D2CD8E6FD86A0206A516{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000011355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.749{8223a6b9-158a-6902-3b02-000000002b00}8432C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-AMFilter.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.864{8223a6b9-158a-6902-3d02-000000002b00}6928C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-AMFilter.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdFilter.sys" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdFilter.sys" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Drivers\WdFilter.sys"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:26.932{8223a6b9-158a-6902-3f02-000000002b00}3116C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Windows-Windows Defender.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +12241200x800000000000000011358Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:24:27.005{8223a6b9-158a-6902-3f02-000000002b00}3116C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/OperationalNT AUTHORITY\SYSTEM +12241200x800000000000000011359Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:24:27.024{8223a6b9-158a-6902-3f02-000000002b00}3116C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHCNT AUTHORITY\SYSTEM +154100x800000000000000011360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.033{8223a6b9-158b-6902-4102-000000002b00}6516C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Windows-Windows Defender.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpEvMsg.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpEvMsg.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpEvMsg.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011361Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:24:27.078{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msmpeng.exe|29ef5a9427e6f197\LowerCaseLongPathc:\programdata\microsoft\windows defender\platform\4.18.25090.3009-0\msmpeng.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011362Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:24:27.078{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msmpeng.exe|29ef5a9427e6f197\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000011363Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:24:27.078{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msmpeng.exe|29ef5a9427e6f197\LinkDate03/26/1997 13:30:22NT AUTHORITY\SYSTEM +13241300x800000000000000011364Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:24:27.078{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\msmpeng.exe|29ef5a9427e6f197\BinProductVersion4.18.25090.3009NT AUTHORITY\SYSTEM +13241300x800000000000000011365Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\OwningPublisher{11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78}NT AUTHORITY\SYSTEM +13241300x800000000000000011366Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011367Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\IsolationDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011368Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\ChannelAccessO:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x3;;;BO)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x3;;;SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x800000000000000011369Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\MaxSizeDWORD (0x01000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011370Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011371Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/Operational\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011372Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\OwningPublisher{11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78}NT AUTHORITY\SYSTEM +13241300x800000000000000011373Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011374Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\IsolationDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000011375Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\ChannelAccessO:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x3;;;BO)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x3;;;SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x800000000000000011376Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\MaxSizeDWORD (0x00040000)NT AUTHORITY\SYSTEM +13241300x800000000000000011377Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011378Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.099{8223a6b9-158b-6902-4102-000000002b00}6516C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Windows Defender/WHC\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +154100x800000000000000011379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.411{8223a6b9-158b-6902-4302-000000002b00}6932C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-Service.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.474{8223a6b9-158b-6902-4502-000000002b00}7116C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-Service.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpSvc.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpSvc.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpSvc.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.539{8223a6b9-158b-6902-4702-000000002b00}10572C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-NIS.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.585{8223a6b9-158b-6902-4902-000000002b00}2136C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-NIS.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.643{8223a6b9-158b-6902-4b02-000000002b00}12220C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-RTP.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.714{8223a6b9-158b-6902-4d02-000000002b00}7260C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-RTP.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpRtp.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpRtp.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpRtp.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.774{8223a6b9-158b-6902-4f02-000000002b00}2096C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe uninstall-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-Protection.man"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +154100x800000000000000011386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.910{8223a6b9-158b-6902-5102-000000002b00}6804C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exeC:\WINDOWS\system32\wevtutil.exe install-manifest "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\Microsoft-Antimalware-Protection.man" "/resourceFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll" "/messageFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll" "/parameterFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011387Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:24:27.974{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeHKCR\CLSID\{2DCD7FDB-8809-48E4-8E4F-3157C57CF987}\InprocServer32\(Default)C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MPUXAGENT.DLLNT AUTHORITY\SYSTEM +13241300x800000000000000011388Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 13:24:27.976{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeHKCR\CLSID\{4DB116D1-9B24-4DFC-946B-BFE03E852002}\InProcServer32\(Default)C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MPUXAGENT.DLLNT AUTHORITY\SYSTEM +13241300x800000000000000011389Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:27.978{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MDCoreSvc\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x800000000000000011390Microsoft-Windows-Sysmon/Operationalsoc101win11T1089,Tamper-DefenderSetValue2025-10-29 13:24:27.988{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeHKLM\SOFTWARE\Microsoft\Windows Defender\DisableAntiSpywareDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011391Microsoft-Windows-Sysmon/Operationalsoc101win11T1089,Tamper-DefenderSetValue2025-10-29 13:24:27.988{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeHKLM\SOFTWARE\Microsoft\Windows Defender\DisableAntiVirusDWORD (0x00000000)NT AUTHORITY\SYSTEM +154100x800000000000000011392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:27.990{8223a6b9-158b-6902-5302-000000002b00}3672C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe4.18.25080.5 (aec027e97d1d7ab25370672d0fb4548480483a83)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe" -EnableServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4B730D779E8FFFAAD3320C097BE2B067,SHA256=A4291C5B4325895D13D32E232BF50C1B41356306803AC5DC75BBA9AECB021141,IMPHASH=E0220E5B585FC612AF76A6608C817F84{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000011393Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.992{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeHKCR\*\shellex\ContextMenuHandlers\EPP\(Default){09A47860-11B0-4DA5-AFA5-26D86198A780}NT AUTHORITY\SYSTEM +13241300x800000000000000011394Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.992{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeHKCR\Drive\shellex\ContextMenuHandlers\EPP\(Default){09A47860-11B0-4DA5-AFA5-26D86198A780}NT AUTHORITY\SYSTEM +13241300x800000000000000011395Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:24:27.992{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeHKCR\Directory\shellex\ContextMenuHandlers\EPP\(Default){09A47860-11B0-4DA5-AFA5-26D86198A780}NT AUTHORITY\SYSTEM +13241300x800000000000000011396Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:28.036{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WdFilter\StartDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011397Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:28.036{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WdBoot\StartDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000011398Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:28.036{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WinDefend\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x800000000000000011399Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:28.101{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\KslD\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +13241300x800000000000000011400Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:28.101{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\KslD\ImagePathsystem32\drivers\wd\KslD.sysNT AUTHORITY\SYSTEM +154100x800000000000000011401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:30.128{8223a6b9-158e-6902-5502-000000002b00}3984C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe10.0.27840.1000 (WinBuild.160101.0800)Windows Security Health HostMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=478FBFDA6A51CF9F0D5BFD50B72DFB08,SHA256=272896B88C6C30DD41E8D44FD54A676FDC6A675BE3F38AAA7434F51B98B822E0,IMPHASH=E8960CAF12CF621B3CA78988264C27F1{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x800000000000000011402Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:34.553{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\MDCoreSvc\StartDWORD (0x00000002)NT AUTHORITY\SYSTEM +13241300x800000000000000011403Microsoft-Windows-Sysmon/Operationalsoc101win11T1031,T1050SetValue2025-10-29 13:24:34.575{8223a6b9-1314-6902-0b00-000000002b00}832C:\WINDOWS\system32\services.exeHKLM\System\CurrentControlSet\Services\WdNisDrv\StartDWORD (0x00000003)NT AUTHORITY\SYSTEM +154100x800000000000000011404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:34.736{8223a6b9-1592-6902-5602-000000002b00}3552C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe4.18.25090.3009 (eca5bedb954af928bf12cba51015d5b3e0195e2e)Microsoft Network Realtime Inspection ServiceMicrosoft® Windows® Operating SystemMicrosoft CorporationNisSrv.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe"C:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=057F2B90813A4BB412DA71B99816B795,SHA256=1403C198C987F26E8C257CEF8B9826783B7438181E2CB062BA590BA383FEEDC9,IMPHASH=1DF092BD9A196CF019F35F9F3FEC51E5{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +11241100x800000000000000011405Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:43.180{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\nsExec.dll2025-10-29 13:24:43.180soc101win11\Administrator +254200x800000000000000011406Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 13:24:43.799{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\app-64.7z2025-10-18 17:42:28.0002025-10-29 13:24:43.276soc101win11\Administrator +11241100x800000000000000011407Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:43.803{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\nsis7z.dll2025-10-29 13:24:43.799soc101win11\Administrator +11241100x800000000000000011408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:49.573{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\ctypes\macholib\fetch_macholib.bat2025-10-29 13:24:49.573soc101win11\Administrator +11241100x800000000000000011409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:50.249{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\idlelib\idle.bat2025-10-29 13:24:50.249soc101win11\Administrator +11241100x800000000000000011410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:50.783{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\common\Activate.ps12025-10-29 13:24:50.783soc101win11\Administrator +11241100x800000000000000011411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:50.785{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\nt\activate.bat2025-10-29 13:24:50.785soc101win11\Administrator +11241100x800000000000000011412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:50.787{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\nt\deactivate.bat2025-10-29 13:24:50.787soc101win11\Administrator +11241100x800000000000000011413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:55.389{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\main\native_modules\node-gyp-bin\node-gyp.cmd2025-10-29 13:24:55.389soc101win11\Administrator +11241100x800000000000000011414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:24:55.391{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\main\native_modules\node-gyp-bin1\node-gyp.cmd2025-10-29 13:24:55.391soc101win11\Administrator +11241100x800000000000000011415Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:57.838{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\d3dcompiler_47.dll2025-10-29 13:24:57.838soc101win11\Administrator +11241100x800000000000000011416Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:57.958{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\ffmpeg.dll2025-10-29 13:24:57.958soc101win11\Administrator +11241100x800000000000000011417Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:58.043{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\libEGL.dll2025-10-29 13:24:58.043soc101win11\Administrator +11241100x800000000000000011418Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:24:58.049{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\libGLESv2.dll2025-10-29 13:24:58.049soc101win11\Administrator +11241100x800000000000000011419Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:24:58.235{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\LM Studio.exe2025-10-29 13:24:58.235soc101win11\Administrator +11241100x800000000000000011420Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:02.894{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\deno.exe2025-10-29 13:25:02.894soc101win11\Administrator +11241100x800000000000000011421Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:04.356{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\esbuild.exe2025-10-29 13:25:04.356soc101win11\Administrator +11241100x800000000000000011422Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.549{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\ggml-base.dll2025-10-29 13:25:04.547soc101win11\Administrator +11241100x800000000000000011423Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.557{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\ggml-cpu.dll2025-10-29 13:25:04.557soc101win11\Administrator +11241100x800000000000000011424Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.577{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\ggml_llamacpp.dll2025-10-29 13:25:04.577soc101win11\Administrator +11241100x800000000000000011425Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.578{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\llama.dll2025-10-29 13:25:04.577soc101win11\Administrator +11241100x800000000000000011426Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.616{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\llm_engine.dll2025-10-29 13:25:04.616soc101win11\Administrator +11241100x800000000000000011427Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.628{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\lmstudiocore.dll2025-10-29 13:25:04.628soc101win11\Administrator +11241100x800000000000000011428Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.640{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\MSVCP140.dll2025-10-29 13:25:04.640soc101win11\Administrator +11241100x800000000000000011429Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.652{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\mtmd.dll2025-10-29 13:25:04.652soc101win11\Administrator +11241100x800000000000000011430Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.665{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\VCOMP140.dll2025-10-29 13:25:04.665soc101win11\Administrator +11241100x800000000000000011431Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.669{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\VCRUNTIME140.dll2025-10-29 13:25:04.667soc101win11\Administrator +11241100x800000000000000011432Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.669{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\VCRUNTIME140_1.dll2025-10-29 13:25:04.669soc101win11\Administrator +11241100x800000000000000011433Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.671{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\ggml-base.dll2025-10-29 13:25:04.671soc101win11\Administrator +11241100x800000000000000011434Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.691{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\ggml-cpu.dll2025-10-29 13:25:04.691soc101win11\Administrator +11241100x800000000000000011435Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:04.701{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\ggml-cuda.dll2025-10-29 13:25:04.701soc101win11\Administrator +154100x800000000000000011436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:05.411{8223a6b9-15b1-6902-5702-000000002b00}7720C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe10.0.27840.1000 (WinBuild.160101.0800)Windows Security Health HostMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=478FBFDA6A51CF9F0D5BFD50B72DFB08,SHA256=272896B88C6C30DD41E8D44FD54A676FDC6A675BE3F38AAA7434F51B98B822E0,IMPHASH=E8960CAF12CF621B3CA78988264C27F1{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +11241100x800000000000000011437Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.809{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\ggml_llamacpp.dll2025-10-29 13:25:08.809soc101win11\Administrator +11241100x800000000000000011438Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.811{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\libomp.dll2025-10-29 13:25:08.811soc101win11\Administrator +11241100x800000000000000011439Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.819{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\llama.dll2025-10-29 13:25:08.819soc101win11\Administrator +11241100x800000000000000011440Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.853{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\llm_engine.dll2025-10-29 13:25:08.853soc101win11\Administrator +11241100x800000000000000011441Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.880{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\lmstudiocore.dll2025-10-29 13:25:08.880soc101win11\Administrator +11241100x800000000000000011442Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.888{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\MSVCP140.dll2025-10-29 13:25:08.886soc101win11\Administrator +11241100x800000000000000011443Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.902{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\mtmd.dll2025-10-29 13:25:08.900soc101win11\Administrator +11241100x800000000000000011444Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.926{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\VCRUNTIME140.dll2025-10-29 13:25:08.924soc101win11\Administrator +11241100x800000000000000011445Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.928{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\VCRUNTIME140_1.dll2025-10-29 13:25:08.928soc101win11\Administrator +11241100x800000000000000011446Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.928{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\ggml-base.dll2025-10-29 13:25:08.928soc101win11\Administrator +11241100x800000000000000011447Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.936{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\ggml-cpu.dll2025-10-29 13:25:08.936soc101win11\Administrator +11241100x800000000000000011448Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:08.950{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\ggml-vulkan.dll2025-10-29 13:25:08.948soc101win11\Administrator +11241100x800000000000000011449Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.189{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\ggml_llamacpp.dll2025-10-29 13:25:09.189soc101win11\Administrator +11241100x800000000000000011450Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.191{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\llama.dll2025-10-29 13:25:09.191soc101win11\Administrator +11241100x800000000000000011451Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.221{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\llm_engine.dll2025-10-29 13:25:09.219soc101win11\Administrator +11241100x800000000000000011452Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.231{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\lmstudiocore.dll2025-10-29 13:25:09.231soc101win11\Administrator +11241100x800000000000000011453Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.234{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\MSVCP140.dll2025-10-29 13:25:09.234soc101win11\Administrator +11241100x800000000000000011454Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.245{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\mtmd.dll2025-10-29 13:25:09.245soc101win11\Administrator +11241100x800000000000000011455Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.254{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\VCOMP140.dll2025-10-29 13:25:09.254soc101win11\Administrator +11241100x800000000000000011456Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.256{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\VCRUNTIME140.dll2025-10-29 13:25:09.256soc101win11\Administrator +11241100x800000000000000011457Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.258{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\VCRUNTIME140_1.dll2025-10-29 13:25:09.258soc101win11\Administrator +11241100x800000000000000011458Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:09.260{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\win-llama-cuda-vendor-v2\cublas64_11.dll2025-10-29 13:25:09.260soc101win11\Administrator +11241100x800000000000000011459Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:12.885{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\win-llama-cuda-vendor-v2\cublasLt64_11.dll2025-10-29 13:25:12.885soc101win11\Administrator +11241100x800000000000000011460Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.203{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\win-llama-cuda-vendor-v2\cudart64_110.dll2025-10-29 13:25:20.203soc101win11\Administrator +11241100x800000000000000011461Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.212{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\win-llama-vulkan-vendor-v2\vulkan-1.dll2025-10-29 13:25:20.212soc101win11\Administrator +11241100x800000000000000011462Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:20.234{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe2025-10-29 13:25:20.234soc101win11\Administrator +11241100x800000000000000011463Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:20.236{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\pythonw.exe2025-10-29 13:25:20.236soc101win11\Administrator +11241100x800000000000000011464Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.240{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\libcrypto-3-x64.dll2025-10-29 13:25:20.240soc101win11\Administrator +11241100x800000000000000011465Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.320{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\libffi-8.dll2025-10-29 13:25:20.320soc101win11\Administrator +11241100x800000000000000011466Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.320{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\libssl-3-x64.dll2025-10-29 13:25:20.320soc101win11\Administrator +11241100x800000000000000011467Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.335{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\sqlite3.dll2025-10-29 13:25:20.335soc101win11\Administrator +11241100x800000000000000011468Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.375{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\tcl86t.dll2025-10-29 13:25:20.375soc101win11\Administrator +11241100x800000000000000011469Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.411{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\tk86t.dll2025-10-29 13:25:20.411soc101win11\Administrator +11241100x800000000000000011470Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:20.435{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\nt\python.exe2025-10-29 13:25:20.435soc101win11\Administrator +11241100x800000000000000011471Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:20.443{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\nt\pythonw.exe2025-10-29 13:25:20.441soc101win11\Administrator +11241100x800000000000000011472Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:20.445{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe2025-10-29 13:25:20.445soc101win11\Administrator +11241100x800000000000000011473Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.447{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python3.dll2025-10-29 13:25:20.447soc101win11\Administrator +11241100x800000000000000011474Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.449{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python311.dll2025-10-29 13:25:20.449soc101win11\Administrator +11241100x800000000000000011475Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:20.522{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\pythonw.exe2025-10-29 13:25:20.522soc101win11\Administrator +11241100x800000000000000011476Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.530{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\tcl\dde1.4\tcldde14.dll2025-10-29 13:25:20.529soc101win11\Administrator +11241100x800000000000000011477Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.532{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\tcl\reg1.3\tclreg13.dll2025-10-29 13:25:20.532soc101win11\Administrator +11241100x800000000000000011478Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.534{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\tcl\tix8.4.3\tix84.dll2025-10-29 13:25:20.534soc101win11\Administrator +11241100x800000000000000011479Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.538{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\vcruntime140.dll2025-10-29 13:25:20.538soc101win11\Administrator +11241100x800000000000000011480Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.542{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\vcruntime140_1.dll2025-10-29 13:25:20.542soc101win11\Administrator +11241100x800000000000000011481Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.544{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll2025-10-29 13:25:20.544soc101win11\Administrator +11241100x800000000000000011482Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.548{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\liblmstudio\vulkan\lmstudiocore.dll2025-10-29 13:25:20.548soc101win11\Administrator +11241100x800000000000000011483Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:20.552{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\liblmstudio\vulkan\vulkan-1.dll2025-10-29 13:25:20.552soc101win11\Administrator +11241100x800000000000000011484Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:20.560{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\node.exe2025-10-29 13:25:20.560soc101win11\Administrator +11241100x800000000000000011485Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:21.517{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\bin\sqlite-vector.dll2025-10-29 13:25:21.517soc101win11\Administrator +11241100x800000000000000011486Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:21.517{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\lib\libvips-42.dll2025-10-29 13:25:21.517soc101win11\Administrator +11241100x800000000000000011487Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:21.843{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\lib\libvips-cpp.dll2025-10-29 13:25:21.843soc101win11\Administrator +11241100x800000000000000011488Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:21.849{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\app\.webpack\lms.exe2025-10-29 13:25:21.849soc101win11\Administrator +11241100x800000000000000011489Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:22.921{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\resources\elevate.exe2025-10-29 13:25:22.921soc101win11\Administrator +11241100x800000000000000011490Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:22.931{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\vk_swiftshader.dll2025-10-29 13:25:22.931soc101win11\Administrator +11241100x800000000000000011491Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:23.003{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\7z-out\vulkan-1.dll2025-10-29 13:25:23.003soc101win11\Administrator +11241100x800000000000000011492Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:23.273{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\d3dcompiler_47.dll2025-10-29 13:25:23.271soc101win11\Administrator +11241100x800000000000000011493Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:23.279{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\ffmpeg.dll2025-10-29 13:25:23.277soc101win11\Administrator +11241100x800000000000000011494Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:23.293{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\libEGL.dll2025-10-29 13:25:23.293soc101win11\Administrator +11241100x800000000000000011495Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:23.299{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\libGLESv2.dll2025-10-29 13:25:23.299soc101win11\Administrator +11241100x800000000000000011496Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:23.324{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe2025-10-29 13:25:23.324soc101win11\Administrator +11241100x800000000000000011497Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:23.863{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vk_swiftshader.dll2025-10-29 13:25:23.863soc101win11\Administrator +11241100x800000000000000011498Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:23.885{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vulkan-1.dll2025-10-29 13:25:23.885soc101win11\Administrator +13241300x800000000000000011499Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:25:23.895{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{40DD6E20-7C17-11CE-A804-00AA003CA9F6} {000214FC-0000-0000-C000-000000000046} 0xFFFFBinary Datasoc101win11\Administrator +11241100x800000000000000011500Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:24.162{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\elevate.exe2025-10-29 13:25:24.162soc101win11\Administrator +11241100x800000000000000011501Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:24.234{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\lms.exe2025-10-29 13:25:24.234soc101win11\Administrator +11241100x800000000000000011502Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:24.436{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\deno.exe2025-10-29 13:25:24.436soc101win11\Administrator +11241100x800000000000000011503Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:24.697{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\esbuild.exe2025-10-29 13:25:24.697soc101win11\Administrator +11241100x800000000000000011504Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:24.739{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe2025-10-29 13:25:24.739soc101win11\Administrator +11241100x800000000000000011505Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:24.936{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\sqlite-vector.dll2025-10-29 13:25:24.936soc101win11\Administrator +11241100x800000000000000011506Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.198{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\ggml-base.dll2025-10-29 13:25:25.196soc101win11\Administrator +11241100x800000000000000011507Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.204{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\ggml-cpu.dll2025-10-29 13:25:25.202soc101win11\Administrator +11241100x800000000000000011508Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.208{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\ggml_llamacpp.dll2025-10-29 13:25:25.208soc101win11\Administrator +11241100x800000000000000011509Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.222{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\llama.dll2025-10-29 13:25:25.222soc101win11\Administrator +11241100x800000000000000011510Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.230{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\llm_engine.dll2025-10-29 13:25:25.230soc101win11\Administrator +11241100x800000000000000011511Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.242{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\lmstudiocore.dll2025-10-29 13:25:25.242soc101win11\Administrator +11241100x800000000000000011512Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.246{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\MSVCP140.dll2025-10-29 13:25:25.246soc101win11\Administrator +11241100x800000000000000011513Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.252{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\mtmd.dll2025-10-29 13:25:25.252soc101win11\Administrator +11241100x800000000000000011514Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.258{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\VCOMP140.dll2025-10-29 13:25:25.258soc101win11\Administrator +11241100x800000000000000011515Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.262{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\VCRUNTIME140.dll2025-10-29 13:25:25.262soc101win11\Administrator +11241100x800000000000000011516Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.266{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-avx2-1.52.1\VCRUNTIME140_1.dll2025-10-29 13:25:25.266soc101win11\Administrator +11241100x800000000000000011517Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.288{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\ggml-base.dll2025-10-29 13:25:25.286soc101win11\Administrator +11241100x800000000000000011518Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.298{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\ggml-cpu.dll2025-10-29 13:25:25.298soc101win11\Administrator +11241100x800000000000000011519Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:25.306{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\ggml-cuda.dll2025-10-29 13:25:25.306soc101win11\Administrator +11241100x800000000000000011520Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.472{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\ggml_llamacpp.dll2025-10-29 13:25:26.472soc101win11\Administrator +11241100x800000000000000011521Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.480{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\libomp.dll2025-10-29 13:25:26.480soc101win11\Administrator +11241100x800000000000000011522Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.486{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\llama.dll2025-10-29 13:25:26.486soc101win11\Administrator +11241100x800000000000000011523Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.494{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\llm_engine.dll2025-10-29 13:25:26.494soc101win11\Administrator +11241100x800000000000000011524Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.504{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\lmstudiocore.dll2025-10-29 13:25:26.504soc101win11\Administrator +11241100x800000000000000011525Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.508{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\MSVCP140.dll2025-10-29 13:25:26.508soc101win11\Administrator +11241100x800000000000000011526Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.514{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\mtmd.dll2025-10-29 13:25:26.514soc101win11\Administrator +11241100x800000000000000011527Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.518{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\VCRUNTIME140.dll2025-10-29 13:25:26.518soc101win11\Administrator +11241100x800000000000000011528Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.522{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-nvidia-cuda-avx2-1.52.1\VCRUNTIME140_1.dll2025-10-29 13:25:26.522soc101win11\Administrator +11241100x800000000000000011529Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.540{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\ggml-base.dll2025-10-29 13:25:26.538soc101win11\Administrator +11241100x800000000000000011530Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.544{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\ggml-cpu.dll2025-10-29 13:25:26.544soc101win11\Administrator +11241100x800000000000000011531Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.550{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\ggml-vulkan.dll2025-10-29 13:25:26.550soc101win11\Administrator +11241100x800000000000000011532Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.675{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\ggml_llamacpp.dll2025-10-29 13:25:26.675soc101win11\Administrator +11241100x800000000000000011533Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.685{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\llama.dll2025-10-29 13:25:26.685soc101win11\Administrator +11241100x800000000000000011534Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.695{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\llm_engine.dll2025-10-29 13:25:26.695soc101win11\Administrator +11241100x800000000000000011535Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.707{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\lmstudiocore.dll2025-10-29 13:25:26.707soc101win11\Administrator +11241100x800000000000000011536Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.715{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\MSVCP140.dll2025-10-29 13:25:26.715soc101win11\Administrator +11241100x800000000000000011537Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.721{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\mtmd.dll2025-10-29 13:25:26.721soc101win11\Administrator +11241100x800000000000000011538Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.727{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\VCOMP140.dll2025-10-29 13:25:26.727soc101win11\Administrator +11241100x800000000000000011539Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.731{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\VCRUNTIME140.dll2025-10-29 13:25:26.731soc101win11\Administrator +11241100x800000000000000011540Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.735{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\llama.cpp-win-x86_64-vulkan-avx2-1.52.1\VCRUNTIME140_1.dll2025-10-29 13:25:26.735soc101win11\Administrator +11241100x800000000000000011541Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:26.747{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\win-llama-cuda-vendor-v2\cublas64_11.dll2025-10-29 13:25:26.747soc101win11\Administrator +11241100x800000000000000011542Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:27.150{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\win-llama-cuda-vendor-v2\cublasLt64_11.dll2025-10-29 13:25:27.148soc101win11\Administrator +11241100x800000000000000011543Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:28.049{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\win-llama-cuda-vendor-v2\cudart64_110.dll2025-10-29 13:25:28.047soc101win11\Administrator +11241100x800000000000000011544Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:28.059{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\win-llama-vulkan-vendor-v2\vulkan-1.dll2025-10-29 13:25:28.059soc101win11\Administrator +11241100x800000000000000011545Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:29.341{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe2025-10-29 13:25:29.341soc101win11\Administrator +11241100x800000000000000011546Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:29.347{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\pythonw.exe2025-10-29 13:25:29.347soc101win11\Administrator +11241100x800000000000000011547Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:29.376{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe2025-10-29 13:25:29.376soc101win11\Administrator +11241100x800000000000000011548Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.380{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python3.dll2025-10-29 13:25:29.380soc101win11\Administrator +11241100x800000000000000011549Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.384{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python311.dll2025-10-29 13:25:29.384soc101win11\Administrator +11241100x800000000000000011550Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:29.394{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\pythonw.exe2025-10-29 13:25:29.394soc101win11\Administrator +11241100x800000000000000011551Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.396{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\vcruntime140.dll2025-10-29 13:25:29.396soc101win11\Administrator +11241100x800000000000000011552Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.400{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\vcruntime140_1.dll2025-10-29 13:25:29.400soc101win11\Administrator +11241100x800000000000000011553Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.406{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\libcrypto-3-x64.dll2025-10-29 13:25:29.406soc101win11\Administrator +11241100x800000000000000011554Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.424{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\libffi-8.dll2025-10-29 13:25:29.424soc101win11\Administrator +11241100x800000000000000011555Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.428{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\libssl-3-x64.dll2025-10-29 13:25:29.428soc101win11\Administrator +11241100x800000000000000011556Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.444{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\sqlite3.dll2025-10-29 13:25:29.444soc101win11\Administrator +11241100x800000000000000011557Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.452{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\tcl86t.dll2025-10-29 13:25:29.452soc101win11\Administrator +11241100x800000000000000011558Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:29.462{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\DLLs\tk86t.dll2025-10-29 13:25:29.462soc101win11\Administrator +11241100x800000000000000011559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:31.433{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\ctypes\macholib\fetch_macholib.bat2025-10-29 13:25:31.433soc101win11\Administrator +22542200x800000000000000011560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:30.582{8223a6b9-15c8-6902-5b02-000000002b00}6292soc101win110fe80::a832:a53b:32c1:6645;::ffff:172.16.143.133;C:\Windows\System32\CompatTelRunner.exeNT AUTHORITY\SYSTEM +11241100x800000000000000011561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:32.529{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\idlelib\idle.bat2025-10-29 13:25:32.529soc101win11\Administrator +11241100x800000000000000011562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:33.737{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\common\Activate.ps12025-10-29 13:25:33.737soc101win11\Administrator +11241100x800000000000000011563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:33.745{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\nt\activate.bat2025-10-29 13:25:33.745soc101win11\Administrator +11241100x800000000000000011564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:33.749{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\nt\deactivate.bat2025-10-29 13:25:33.749soc101win11\Administrator +11241100x800000000000000011565Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:33.753{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\nt\python.exe2025-10-29 13:25:33.753soc101win11\Administrator +11241100x800000000000000011566Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:33.759{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\Lib\venv\scripts\nt\pythonw.exe2025-10-29 13:25:33.759soc101win11\Administrator +11241100x800000000000000011567Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:34.180{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\tcl\dde1.4\tcldde14.dll2025-10-29 13:25:34.180soc101win11\Administrator +11241100x800000000000000011568Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:34.223{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\tcl\reg1.3\tclreg13.dll2025-10-29 13:25:34.223soc101win11\Administrator +11241100x800000000000000011569Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:38.042{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\tcl\tix8.4.3\tix84.dll2025-10-29 13:25:38.042soc101win11\Administrator + C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-15c8-6902-5b02-000000002b00}6292C:\Windows\System32\CompatTelRunner.exeC:\WINDOWS\system32\compattelrunner.exe -cv:CFtwuJIl6U2RpFVm.0.6 -wce:0000000000000228 -m:appraiser.dll -f:DoScheduledTelemetryRun NT AUTHORITY\SYSTEM + Write-Host 'Final result:',$isBroken + } + } + } + break + $isBroken = if ((Get-ItemPropertyValue -Path ($bagRoot + '\' + $nodeSlot + '\Shell\*') -Name 'GroupView') -eq 0) { 1 } else { 0 } + $nodeSlot = Get-ItemPropertyValue -Path ($bagMRURoot + '\' + $subkey) -Name 'NodeSlot' + $subkey = $property.Name + if ($hexString -eq $HomeFolderGuid) { + $hexString = ($property.Value | ForEach-Object { $_.ToString('X2') }) -join '' + if ($property.TypeNameOfValue -eq 'System.Byte[]') { + foreach ($property in $properties.PSObject.Properties) { + $properties = Get-ItemProperty -Path $bagMRURoot + $HomeFolderGuid = '14001F400E3174F8B7B6DC47BC84B9E6B38F59030000' + # Define the target GUID tail for MSGraphHome + $bagRoot = $ShellRegRoot + '\Bags' + $bagMRURoot = $ShellRegRoot + '\BagMRU' + $ShellRegRoot = 'HKCU:\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell' + # Define the root registry path + $isBroken = 0 +154100x800000000000000011570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:38.274{8223a6b9-15d2-6902-5c02-000000002b00}11052C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEpowershell.exe -ExecutionPolicy Restricted -Command +11241100x800000000000000011571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:39.378{8223a6b9-15d2-6902-5c02-000000002b00}11052C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\SystemTemp\__PSScriptPolicyTest_tvzqydxm.euy.ps12025-10-29 13:25:39.378NT AUTHORITY\SYSTEM +11241100x800000000000000011572Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:39.904{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll2025-10-29 13:25:39.904soc101win11\Administrator +11241100x800000000000000011573Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:39.918{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\vulkan\lmstudiocore.dll2025-10-29 13:25:39.918soc101win11\Administrator +11241100x800000000000000011574Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:39.922{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\vulkan\vulkan-1.dll2025-10-29 13:25:39.922soc101win11\Administrator +11241100x800000000000000011575Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:39.971{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\lib\libvips-42.dll2025-10-29 13:25:39.971soc101win11\Administrator +11241100x800000000000000011576Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:40.056{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\lib\libvips-cpp.dll2025-10-29 13:25:40.053soc101win11\Administrator +11241100x800000000000000011577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:40.327{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\main\native_modules\node-gyp-bin\node-gyp.cmd2025-10-29 13:25:40.327soc101win11\Administrator +11241100x800000000000000011578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:40.341{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\main\native_modules\node-gyp-bin1\node-gyp.cmd2025-10-29 13:25:40.341soc101win11\Administrator +11241100x800000000000000011579Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:42.542{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\lm-studio-updater\installer.exe2025-10-29 13:25:42.542soc101win11\Administrator +11241100x800000000000000011580Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:44.093{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\Uninstall LM Studio.exe2025-10-29 13:25:44.093soc101win11\Administrator +254200x800000000000000011581Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 13:25:44.097{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\Uninstall LM Studio.exe2025-10-18 17:42:32.0002025-10-29 13:25:44.093soc101win11\Administrator +13241300x800000000000000011582Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:25:44.101{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\c6dbe996-22a9-5998-b542-7abe33da3b83\PublisherLM Studiosoc101win11\Administrator +11241100x800000000000000011583Microsoft-Windows-Sysmon/Operationalsoc101win11T10232025-10-29 13:25:44.244{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LM Studio.lnk2025-10-29 13:25:44.244soc101win11\Administrator +11241100x800000000000000011584Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:25:44.248{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsa93B9.tmp\WinShell.dll2025-10-29 13:25:44.248soc101win11\Administrator +154100x800000000000000011585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:44.316{8223a6b9-15d8-6902-5f02-000000002b00}2028C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000011586Microsoft-Windows-Sysmon/Operationalsoc101win11T10232025-10-29 13:25:44.334{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LM Studio.lnk2025-10-29 13:25:44.244soc101win11\Administrator +154100x800000000000000011587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:44.702{8223a6b9-15d8-6902-6002-000000002b00}7276C:\Windows\servicing\TrustedInstaller.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Modules InstallerMicrosoft® Windows® Operating SystemMicrosoft CorporationTrustedInstaller.exeC:\WINDOWS\servicing\TrustedInstaller.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=23CF29D35F32448C19398B91E3C31186,SHA256=C037F1D455B27EF75391EECE7F25711CF3055006FA29C5D872DB4D54FEF0ADE8,IMPHASH=5E159CE7599ACD6CA7EC3122186D5DBC{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000011588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:44.761{8223a6b9-15d8-6902-6102-000000002b00}3172C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe10.0.26100.4933 (WinBuild.160101.0800)Windows Modules Installer WorkerMicrosoft® Windows® Operating SystemMicrosoft CorporationTiWorker.exeC:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=749679E003C18036BF998EB9BCE36A63,SHA256=3F42DBAF2BD7AD92577AFB6D47A8F3DC32DCB6A8E52BA7738FAEB31ED197ACDC,IMPHASH=0B85588480DF97BD963732E20722340E{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000011589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:46.765{8223a6b9-15da-6902-6202-000000002b00}7640C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEpowershell.exe -ExecutionPolicy Restricted -Command Write-Host 'Final result: 1';C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-15c8-6902-5b02-000000002b00}6292C:\Windows\System32\CompatTelRunner.exeC:\WINDOWS\system32\compattelrunner.exe -cv:CFtwuJIl6U2RpFVm.0.6 -wce:0000000000000228 -m:appraiser.dll -f:DoScheduledTelemetryRun NT AUTHORITY\SYSTEM +11241100x800000000000000011590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:46.955{8223a6b9-15da-6902-6202-000000002b00}7640C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\SystemTemp\__PSScriptPolicyTest_bk4hncwd.4ao.ps12025-10-29 13:25:46.955NT AUTHORITY\SYSTEM +154100x800000000000000011591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:47.919{8223a6b9-15db-6902-6402-000000002b00}10052C:\Windows\System32\dllhost.exe10.0.26100.1150 (WinBuild.160101.0800)COM SurrogateMicrosoft® Windows® Operating SystemMicrosoft Corporationdllhost.exe"C:\WINDOWS\system32\DllHost.exe" /Processid:{CA6CC9F1-867A-481E-951E-A28C5E4F01EA}C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7450570BA423A8E9864D498D3241FFD4,SHA256=50C9C2EDEA6C51F1AAD2DD80A59F4EDB32637F51714F8472D216E5B9BDACDABF,IMPHASH=FBDAC0471446783AD621D3CAB6033559{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM + C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-15c8-6902-5b02-000000002b00}6292C:\Windows\System32\CompatTelRunner.exeC:\WINDOWS\system32\compattelrunner.exe -cv:CFtwuJIl6U2RpFVm.0.6 -wce:0000000000000228 -m:appraiser.dll -f:DoScheduledTelemetryRun NT AUTHORITY\SYSTEM + Write-Host 'Final result:',$isBroken + } + } + } + break + $isBroken = if ((Get-ItemPropertyValue -Path ($bagRoot + '\' + $nodeSlot + '\Shell\*') -Name 'GroupView') -eq 0) { 1 } else { 0 } + $nodeSlot = Get-ItemPropertyValue -Path ($bagMRURoot + '\' + $subkey) -Name 'NodeSlot' + $subkey = $property.Name + if ($hexString -eq $HomeFolderGuid) { + $hexString = ($property.Value | ForEach-Object { $_.ToString('X2') }) -join '' + if ($property.TypeNameOfValue -eq 'System.Byte[]') { + foreach ($property in $properties.PSObject.Properties) { + $properties = Get-ItemProperty -Path $bagMRURoot + $HomeFolderGuid = '14001F400E3174F8B7B6DC47BC84B9E6B38F59030000' + # Define the target GUID tail for MSGraphHome + $bagRoot = $ShellRegRoot + '\Bags' + $bagMRURoot = $ShellRegRoot + '\BagMRU' + $ShellRegRoot = 'HKCU:\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell' + # Define the root registry path + $isBroken = 0 +154100x800000000000000011592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:49.290{8223a6b9-15dd-6902-6502-000000002b00}8820C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEpowershell.exe -ExecutionPolicy Restricted -Command +11241100x800000000000000011593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:49.492{8223a6b9-15dd-6902-6502-000000002b00}8820C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\SystemTemp\__PSScriptPolicyTest_kutwnlsf.i4u.ps12025-10-29 13:25:49.492NT AUTHORITY\SYSTEM +154100x800000000000000011594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:50.634{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +13241300x800000000000000011595Microsoft-Windows-Sysmon/Operationalsoc101win11InvDBSetValue2025-10-29 13:25:51.265{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeBinary DataNT AUTHORITY\SYSTEM +154100x800000000000000011596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:52.591{8223a6b9-15e0-6902-6802-000000002b00}3844C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Administrator\AppData\Roaming\LM Studio" /prefetch:4 --no-rate-limit --no-upload-gzip --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad" "--annotation=_productName=LM Studio" --annotation=_version=0.3.30+2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=37.2.0 --initial-client-data=0x4c4,0x4c8,0x4cc,0x4c0,0x4d0,0x7ff6780dbb44,0x7ff6780dbb50,0x7ff6780dbb60C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +13241300x800000000000000011597Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 13:25:53.365{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lmstudio\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" "%%1"soc101win11\Administrator +154100x800000000000000011598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:53.484{8223a6b9-15e1-6902-6902-000000002b00}6920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1772 /prefetch:2C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000011599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:53.494{8223a6b9-15e1-6902-6a02-000000002b00}10756C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1872 /prefetch:11C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000011600Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:53.513{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\utils\esbuild.exe2025-10-29 13:25:53.513soc101win11\Administrator +11241100x800000000000000011601Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:53.533{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\utils\node.exe2025-10-29 13:25:53.533soc101win11\Administrator +11241100x800000000000000011602Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:53.563{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\utils\deno.exe2025-10-29 13:25:53.563soc101win11\Administrator +154100x800000000000000011603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:53.632{8223a6b9-15e1-6902-6b02-000000002b00}2976C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000011604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:53.683{8223a6b9-157b-6902-1002-000000002b00}2140C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exesoc101win11\Administrator +13241300x800000000000000011605Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:25:53.929{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm studio.exe|c460d8612d6d64a5\LowerCaseLongPathc:\users\administrator\appdata\local\programs\lm studio\lm studio.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011606Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:25:53.929{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm studio.exe|c460d8612d6d64a5\Publisherlm studioNT AUTHORITY\SYSTEM +13241300x800000000000000011607Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:25:53.929{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm studio.exe|c460d8612d6d64a5\LinkDate06/30/2025 07:06:07NT AUTHORITY\SYSTEM +13241300x800000000000000011608Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:25:53.929{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm studio.exe|c460d8612d6d64a5\BinProductVersion0.3.30.0NT AUTHORITY\SYSTEM +154100x800000000000000011609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:54.086{8223a6b9-15e2-6902-6c02-000000002b00}8508C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEpowershell.exe -ExecutionPolicy Restricted -Command Write-Host 'Final result: 1';C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-15c8-6902-5b02-000000002b00}6292C:\Windows\System32\CompatTelRunner.exeC:\WINDOWS\system32\compattelrunner.exe -cv:CFtwuJIl6U2RpFVm.0.6 -wce:0000000000000228 -m:appraiser.dll -f:DoScheduledTelemetryRun NT AUTHORITY\SYSTEM +11241100x800000000000000011610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:54.312{8223a6b9-15e2-6902-6c02-000000002b00}8508C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\SystemTemp\__PSScriptPolicyTest_knvwp3rp.1xq.ps12025-10-29 13:25:54.312NT AUTHORITY\SYSTEM +11241100x800000000000000011611Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:25:54.446{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\bin\lms.exe2025-10-29 13:25:54.446soc101win11\Administrator +154100x800000000000000011612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:54.498{8223a6b9-15e2-6902-6e02-000000002b00}10076C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1596 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000011613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:55.158{8223a6b9-15e0-6902-6802-000000002b00}3844C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\d3b90d3b-59af-4c36-be8a-f4a61ee52961.dmp2025-10-29 13:25:55.158soc101win11\Administrator +534500x800000000000000011614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:55.334{8223a6b9-15e2-6902-6e02-000000002b00}10076C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000011615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:55.354{8223a6b9-15e3-6902-6f02-000000002b00}1928C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator + "C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator + } + [Console]::WriteLine($gpu.Name) + foreach ($gpu in $gpuInfo) { + $gpuInfo = Get-WmiObject -Class Win32_VideoController | Select-Object -Property Name +154100x800000000000000011616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:55.522{8223a6b9-15e3-6902-7002-000000002b00}8352C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -Command " +11241100x800000000000000011617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:55.812{8223a6b9-15e3-6902-7002-000000002b00}8352C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_j00v5u1h.y4z.ps12025-10-29 13:25:55.812soc101win11\Administrator +13241300x800000000000000011618Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:25:56.713{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm-studio-0.3.30|11238f399652b123\LowerCaseLongPathc:\users\administrator\downloads\lm-studio-0.3.30-2-x64.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011619Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:25:56.713{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm-studio-0.3.30|11238f399652b123\Publisherlm studioNT AUTHORITY\SYSTEM +13241300x800000000000000011620Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:25:56.713{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm-studio-0.3.30|11238f399652b123\LinkDate12/15/2018 22:26:14NT AUTHORITY\SYSTEM +13241300x800000000000000011621Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:25:56.713{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\lm-studio-0.3.30|11238f399652b123\BinProductVersion0.3.30.0NT AUTHORITY\SYSTEM +13241300x800000000000000011622Microsoft-Windows-Sysmon/Operationalsoc101win11InvDBSetValue2025-10-29 13:25:56.717{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\C:\Users\Administrator\Downloads\LM-Studio-0.3.30-2-x64.exeBinary DataNT AUTHORITY\SYSTEM +154100x800000000000000011623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:57.604{8223a6b9-15e5-6902-7202-000000002b00}8356C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000011624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:58.789{8223a6b9-15e6-6902-7302-000000002b00}4624C:\Windows\System32\directxdatabaseupdater.exe10.0.26100.3624 (WinBuild.160101.0800)DirectX Database UpdaterMicrosoft® Windows® Operating SystemMicrosoft CorporationDirectXDatabaseUpdater.exeC:\WINDOWS\system32\directxdatabaseupdater.exe -DatabaseComplete {E6F67F2D-D318-46F9-9FB5-C3168327A3EF}C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=D2AAAEB94EA9E68B39410D240334F242,SHA256=49A3186F3EC106E8D1281DE9FC189CE3E606418371A8881D4876AD2A748FF6D5,IMPHASH=74B611F908F64357720ABBF5DAF48BF3{8223a6b9-132e-6902-c800-000000002b00}9780C:\Windows\System32\svchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BITSNT AUTHORITY\SYSTEM +154100x800000000000000011625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:25:59.238{8223a6b9-15e7-6902-7402-000000002b00}3924C:\Windows\System32\Dism\DismHost.exe10.0.26100.1150 (WinBuild.160101.0800)Dism Host Servicing ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationDismHost.exeC:\Windows\System32\Dism\dismhost.exe {121EBB13-5C26-4B45-8211-AEA0D084DE15}C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=A5CA984A40E37049FDF649BDCBFA5C88,SHA256=D8EADC9DB05FE0A9C06774DB36C7765E7113F17D8464AD0F3EBAFA5B803B3230,IMPHASH=9DDBEC2516241A81664067A928EDBA2E{8223a6b9-15e6-6902-7302-000000002b00}4624C:\Windows\System32\directxdatabaseupdater.exeC:\WINDOWS\system32\directxdatabaseupdater.exe -DatabaseComplete {E6F67F2D-D318-46F9-9FB5-C3168327A3EF}NT AUTHORITY\SYSTEM +154100x800000000000000011626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:00.095{8223a6b9-15e8-6902-7502-000000002b00}10044C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --app-user-model-id="electron.app.LM Studio" --app-path="C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app" --no-sandbox --no-zygote --node-integration-in-worker --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1761743627040775 --launch-time-ticks=733047983 --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3256 /prefetch:1C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +22542200x800000000000000011627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:00.047{8223a6b9-15de-6902-6702-000000002b00}10092versions-prod.lmstudio.ai0::ffff:104.26.7.153;::ffff:172.67.69.92;::ffff:104.26.6.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000011628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:01.036{8223a6b9-15e9-6902-7602-000000002b00}5688C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -c "[Environment]::GetEnvironmentVariable('PATH', 'User')"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000011629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:01.395{8223a6b9-15e9-6902-7602-000000002b00}5688C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_vcqudxcx.x5o.ps12025-10-29 13:26:01.395soc101win11\Administrator +354300x800000000000000011630Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:00.159{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50101-false104.26.7.153-443https +22542200x800000000000000011631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:00.700{8223a6b9-15e1-6902-6a02-000000002b00}10756wpad1460-C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +[Environment]::SetEnvironmentVariable('PATH', $path, 'User');"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +$path += \";C:\Users\Administrator\.lmstudio\bin\"; +154100x800000000000000011632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:02.689{8223a6b9-15ea-6902-7802-000000002b00}1136C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -c "$path = [Environment]::GetEnvironmentVariable('PATH', 'User'); +22542200x800000000000000011633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:01.052{8223a6b9-15de-6902-6702-000000002b00}10092extensions.lmstudio.ai0::ffff:104.26.6.153;::ffff:104.26.7.153;::ffff:172.67.69.92;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +11241100x800000000000000011634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:02.937{8223a6b9-15ea-6902-7802-000000002b00}1136C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_y2ypbhzd.ylx.ps12025-10-29 13:26:02.936soc101win11\Administrator +22542200x800000000000000011635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:01.104{8223a6b9-15de-6902-6702-000000002b00}10092models.lmstudio.ai0::ffff:172.67.69.92;::ffff:104.26.7.153;::ffff:104.26.6.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000011636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:04.609{8223a6b9-15ec-6902-7a02-000000002b00}11924C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe1450.2506.28022.0MoUSO Core Worker ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationMoUSOCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E048EE9A14933FFA4A9C9FC7A8A7F83B,SHA256=B4A080E7ABAC28ADCBB172B53060508457C9CEC25BC339F3DFA0A031CD881737,IMPHASH=D3DBFEDBF38C961BD70D128454E64766{8223a6b9-1393-6902-3901-000000002b00}10328C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvcNT AUTHORITY\SYSTEM +154100x800000000000000011637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:11.200{8223a6b9-15f3-6902-7e02-000000002b00}5864C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\postinstall.pyC:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +13241300x800000000000000011638Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:26:11.877{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\python.exe|3e481b98eb59d781\LowerCaseLongPathc:\users\administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011639Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:26:11.877{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\python.exe|3e481b98eb59d781\Publisherpython software foundationNT AUTHORITY\SYSTEM +13241300x800000000000000011640Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:26:11.877{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\python.exe|3e481b98eb59d781\LinkDate08/14/2024 04:19:59NT AUTHORITY\SYSTEM +13241300x800000000000000011641Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:26:11.877{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\python.exe|3e481b98eb59d781\BinProductVersion3.11.9150.1013NT AUTHORITY\SYSTEM +354300x800000000000000011642Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:11.101{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50105-false172.67.69.92-443https +354300x800000000000000011643Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:11.103{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50103-false104.26.6.153-443https +354300x800000000000000011644Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:11.103{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50104-false104.26.6.153-443https +354300x800000000000000011645Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:11.336{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50106-false104.26.7.153-443https +22542200x800000000000000011646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:11.130{8223a6b9-15de-6902-6702-000000002b00}10092search.lmstudio.ai0::ffff:104.26.7.153;::ffff:172.67.69.92;::ffff:104.26.6.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +354300x800000000000000011647Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:11.743{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50107-false104.26.6.153-443https +354300x800000000000000011648Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:12.387{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50108-false104.26.6.153-443https +354300x800000000000000011649Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:12.387{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50110-false104.26.6.153-443https +354300x800000000000000011650Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:12.387{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50109-false104.26.6.153-443https +22542200x800000000000000011651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:11.697{8223a6b9-15de-6902-6702-000000002b00}10092lmstudio.ai0::ffff:104.26.6.153;::ffff:172.67.69.92;::ffff:104.26.7.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +22542200x800000000000000011652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:12.351{8223a6b9-15de-6902-6702-000000002b00}10092extensions.lmstudio.ai0::ffff:104.26.6.153;::ffff:172.67.69.92;::ffff:104.26.7.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000011653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:16.847{8223a6b9-15f3-6902-7e02-000000002b00}5864C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +154100x800000000000000011654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:16.870{8223a6b9-15f8-6902-8402-000000002b00}3716C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\postinstall.pyC:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000011655Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:26:17.114{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-748333135600\Scripts\python.exe2025-10-29 13:26:17.114soc101win11\Administrator +11241100x800000000000000011656Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:26:17.127{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-748333135600\Scripts\pythonw.exe2025-10-29 13:26:17.126soc101win11\Administrator +11241100x800000000000000011657Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:17.471{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\DLLs\libcrypto-3-x64.dll2025-10-29 13:26:17.471soc101win11\Administrator +11241100x800000000000000011658Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:17.548{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\DLLs\libffi-8.dll2025-10-29 13:26:17.547soc101win11\Administrator +11241100x800000000000000011659Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:17.554{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\DLLs\libssl-3-x64.dll2025-10-29 13:26:17.553soc101win11\Administrator +11241100x800000000000000011660Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:17.602{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\DLLs\sqlite3.dll2025-10-29 13:26:17.602soc101win11\Administrator +11241100x800000000000000011661Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:17.623{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\DLLs\tcl86t.dll2025-10-29 13:26:17.622soc101win11\Administrator +11241100x800000000000000011662Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:17.651{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\DLLs\tk86t.dll2025-10-29 13:26:17.650soc101win11\Administrator +11241100x800000000000000011663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:18.793{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\Lib\ctypes\macholib\fetch_macholib.bat2025-10-29 13:26:18.792soc101win11\Administrator +11241100x800000000000000011664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:20.717{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\Lib\idlelib\idle.bat2025-10-29 13:26:20.717soc101win11\Administrator +11241100x800000000000000011665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:22.962{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\Lib\venv\scripts\common\Activate.ps12025-10-29 13:26:22.961soc101win11\Administrator +11241100x800000000000000011666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:22.965{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\Lib\venv\scripts\nt\activate.bat2025-10-29 13:26:22.965soc101win11\Administrator +11241100x800000000000000011667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:22.968{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\Lib\venv\scripts\nt\deactivate.bat2025-10-29 13:26:22.968soc101win11\Administrator +11241100x800000000000000011668Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:26:22.969{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\Lib\venv\scripts\nt\python.exe2025-10-29 13:26:22.969soc101win11\Administrator +11241100x800000000000000011669Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:26:22.982{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\Lib\venv\scripts\nt\pythonw.exe2025-10-29 13:26:22.982soc101win11\Administrator +11241100x800000000000000011670Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:26:24.245{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\python.exe2025-10-29 13:26:24.244soc101win11\Administrator +11241100x800000000000000011671Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:24.251{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\python3.dll2025-10-29 13:26:24.251soc101win11\Administrator +11241100x800000000000000011672Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:24.258{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\python311.dll2025-10-29 13:26:24.258soc101win11\Administrator +11241100x800000000000000011673Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:26:24.305{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\pythonw.exe2025-10-29 13:26:24.305soc101win11\Administrator +11241100x800000000000000011674Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:24.325{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\tcl\dde1.4\tcldde14.dll2025-10-29 13:26:24.325soc101win11\Administrator +11241100x800000000000000011675Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:24.352{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\tcl\reg1.3\tclreg13.dll2025-10-29 13:26:24.351soc101win11\Administrator +11241100x800000000000000011676Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:27.395{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\tcl\tix8.4.3\tix84.dll2025-10-29 13:26:27.394soc101win11\Administrator +11241100x800000000000000011677Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:28.057{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\vcruntime140.dll2025-10-29 13:26:28.056soc101win11\Administrator +11241100x800000000000000011678Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:28.062{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\vcruntime140_1.dll2025-10-29 13:26:28.062soc101win11\Administrator +534500x800000000000000011679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:28.443{8223a6b9-15f8-6902-8402-000000002b00}3716C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +154100x800000000000000011680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:28.597{8223a6b9-1604-6902-8702-000000002b00}8624C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000011681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:28.707{8223a6b9-1604-6902-8802-000000002b00}3496C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=65DBD77AF4AC01F89BC8FE4F69927D6E,SHA256=5CB1B448FAB5C0B83F89C8FB75C574DB0F270508E29E0BFDECEC1C6E5BEF0BFD,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000011682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:28.883{8223a6b9-1604-6902-8802-000000002b00}3496C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\.tmp-750154688100\python.exesoc101win11\Administrator +154100x800000000000000011683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:29.052{8223a6b9-1605-6902-8b02-000000002b00}4392C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\postinstall.pyC:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000011684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:29.101{8223a6b9-1604-6902-8702-000000002b00}8624C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000011685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:29.101{8223a6b9-1605-6902-8e02-000000002b00}2588C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000011686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:29.373{8223a6b9-1605-6902-8b02-000000002b00}4392C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +154100x800000000000000011687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:29.379{8223a6b9-1605-6902-9002-000000002b00}7936C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\postinstall.pyC:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000011688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:29.619{8223a6b9-15e0-6902-6802-000000002b00}3844C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\f11264da-d9c9-4a50-aaad-7bddf4b9fa49.dmp2025-10-29 13:26:29.619soc101win11\Administrator +534500x800000000000000011689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:29.718{8223a6b9-1605-6902-8e02-000000002b00}2588C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000011690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:29.739{8223a6b9-1605-6902-9202-000000002b00}6820C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000011691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:30.130{8223a6b9-1605-6902-9002-000000002b00}7936C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +154100x800000000000000011692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:30.262{8223a6b9-1606-6902-9502-000000002b00}10996C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=74A434608B94BD66721A01808B3F3300,SHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4,IMPHASH=C91715637F89CFF9813ED6D375592AA2{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000011693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:30.333{8223a6b9-1606-6902-9702-000000002b00}2148C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-1606-6902-9502-000000002b00}10996C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +534500x800000000000000011694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:30.375{8223a6b9-1606-6902-9702-000000002b00}2148C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000011695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:30.378{8223a6b9-1606-6902-9502-000000002b00}10996C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +154100x800000000000000011696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:30.385{8223a6b9-1606-6902-9802-000000002b00}1184C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000011697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:30.447{8223a6b9-1606-6902-9802-000000002b00}1184C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +13241300x800000000000000011698Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:26:30.574{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\python.exe|aa3a6147ff9508a3\LowerCaseLongPathc:\users\administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\scripts\python.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011699Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:26:30.574{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\python.exe|aa3a6147ff9508a3\Publisherpython software foundationNT AUTHORITY\SYSTEM +13241300x800000000000000011700Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:26:30.574{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\python.exe|aa3a6147ff9508a3\LinkDate08/14/2024 04:19:25NT AUTHORITY\SYSTEM +13241300x800000000000000011701Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:26:30.574{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\python.exe|aa3a6147ff9508a3\BinProductVersion3.11.9150.1013NT AUTHORITY\SYSTEM +22542200x800000000000000011702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:30.288{8223a6b9-15de-6902-6702-000000002b00}10092extensions.lmstudio.ai0::ffff:104.26.7.153;::ffff:172.67.69.92;::ffff:104.26.6.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +354300x800000000000000011703Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:26:30.350{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50111-false104.26.7.153-443https +154100x800000000000000011704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:32.444{8223a6b9-1608-6902-9b02-000000002b00}10404C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\js-code-sandbox\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5E3ABA1CBDA9F8BB9BBB279F6402E0C6,SHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94,IMPHASH=F205B027C46CADF1E2534D1AA11A4093{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000011705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:32.670{8223a6b9-1608-6902-9c02-000000002b00}4300C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\rag-v1\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5E3ABA1CBDA9F8BB9BBB279F6402E0C6,SHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94,IMPHASH=F205B027C46CADF1E2534D1AA11A4093{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000011706Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:32.871{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\ggml-base.dll2025-10-29 13:26:32.871soc101win11\Administrator +11241100x800000000000000011707Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:32.893{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\ggml-cpu.dll2025-10-29 13:26:32.892soc101win11\Administrator +11241100x800000000000000011708Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:32.903{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\ggml_llamacpp.dll2025-10-29 13:26:32.903soc101win11\Administrator +11241100x800000000000000011709Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:32.933{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\llama.dll2025-10-29 13:26:32.933soc101win11\Administrator +11241100x800000000000000011710Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:32.949{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\llm_engine.dll2025-10-29 13:26:32.949soc101win11\Administrator +11241100x800000000000000011711Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:32.978{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\lmstudiocore.dll2025-10-29 13:26:32.977soc101win11\Administrator +11241100x800000000000000011712Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:32.993{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\MSVCP140.dll2025-10-29 13:26:32.993soc101win11\Administrator +11241100x800000000000000011713Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:32.999{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\mtmd.dll2025-10-29 13:26:32.999soc101win11\Administrator +11241100x800000000000000011714Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:33.006{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\VCOMP140.dll2025-10-29 13:26:33.005soc101win11\Administrator +11241100x800000000000000011715Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:33.017{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\VCRUNTIME140.dll2025-10-29 13:26:33.017soc101win11\Administrator +11241100x800000000000000011716Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:26:33.024{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\.tmp-765789934900\VCRUNTIME140_1.dll2025-10-29 13:26:33.024soc101win11\Administrator +154100x800000000000000011717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:33.068{8223a6b9-1609-6902-9f02-000000002b00}8760C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3868 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +13241300x800000000000000011718Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:26:33.297{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\node.exe|97c6cd93c1bfd9f8\LowerCaseLongPathc:\users\administrator\appdata\local\programs\lm studio\resources\app\.webpack\bin\node.exeNT AUTHORITY\SYSTEM +13241300x800000000000000011719Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:26:33.297{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\node.exe|97c6cd93c1bfd9f8\Publishernode.jsNT AUTHORITY\SYSTEM +13241300x800000000000000011720Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:26:33.297{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\node.exe|97c6cd93c1bfd9f8\LinkDate10/03/2024 06:15:36NT AUTHORITY\SYSTEM +13241300x800000000000000011721Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:26:33.297{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\node.exe|97c6cd93c1bfd9f8\BinProductVersion20.18.0.0NT AUTHORITY\SYSTEM +154100x800000000000000011722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:33.524{8223a6b9-1609-6902-a002-000000002b00}4512C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3944 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000011723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:35.073{8223a6b9-160b-6902-a202-000000002b00}5540C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "taskkill /pid 4300 /T /F"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000011724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:35.085{8223a6b9-160b-6902-a302-000000002b00}5008C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "taskkill /pid 10404 /T /F"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000011725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:35.126{8223a6b9-160b-6902-a602-000000002b00}2068C:\Windows\System32\taskkill.exe10.0.26100.1 (WinBuild.160101.0800)Terminates ProcessesMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskkill.exetaskkill /pid 4300 /T /FC:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CBF904BC6835B56A4BD5AC4141F8D131,SHA256=1249717315FC8F4D2DF17D5DB9DA0444795FDB9FB83DFB1F763C3F39282244F7,IMPHASH=FFE513AF7F8477FE56A2B3C63BE2D148{8223a6b9-160b-6902-a202-000000002b00}5540C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "taskkill /pid 4300 /T /F"soc101win11\Administrator +154100x800000000000000011726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:35.129{8223a6b9-160b-6902-a702-000000002b00}4916C:\Windows\System32\taskkill.exe10.0.26100.1 (WinBuild.160101.0800)Terminates ProcessesMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskkill.exetaskkill /pid 10404 /T /FC:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CBF904BC6835B56A4BD5AC4141F8D131,SHA256=1249717315FC8F4D2DF17D5DB9DA0444795FDB9FB83DFB1F763C3F39282244F7,IMPHASH=FFE513AF7F8477FE56A2B3C63BE2D148{8223a6b9-160b-6902-a302-000000002b00}5008C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "taskkill /pid 10404 /T /F"soc101win11\Administrator +534500x800000000000000011727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:35.231{8223a6b9-1608-6902-9c02-000000002b00}4300C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000011728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:26:35.233{8223a6b9-1608-6902-9b02-000000002b00}10404C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +154100x800000000000000011729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:27:01.188{8223a6b9-1625-6902-a802-000000002b00}3136C:\Windows\System32\UsoClient.exe10.0.26100.3037 (WinBuild.160101.0800)UsoClientMicrosoft® Windows® Operating SystemMicrosoft CorporationUsoClient"C:\WINDOWS\system32\usoclient.exe" StartWorkC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0AFB6EB9D41AF833D65448734C47A4C2,SHA256=0A4C60CD2FBE6859B6C09F56C7051580F9582F106D1851750264733194B94DB3,IMPHASH=1BC6441172601AD7E84C0082681FF7D2{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +354300x800000000000000011730Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:27:34.469{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50116-false104.26.7.153-443https +22542200x800000000000000011731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:27:34.439{8223a6b9-15de-6902-6702-000000002b00}10092lmstudio.ai0::ffff:104.26.7.153;::ffff:104.26.6.153;::ffff:172.67.69.92;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +354300x800000000000000011732Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:27:35.775{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50118-false104.26.6.153-443https +354300x800000000000000011733Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:27:35.775{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50119-false104.26.6.153-443https +354300x800000000000000011734Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:27:35.775{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50117-false104.26.6.153-443https +22542200x800000000000000011735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:27:35.746{8223a6b9-15de-6902-6702-000000002b00}10092search.lmstudio.ai0::ffff:104.26.6.153;::ffff:172.67.69.92;::ffff:104.26.7.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000011736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:27:53.495{8223a6b9-1659-6902-a902-000000002b00}4668C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5549 --gpu-device-id=1029 --gpu-sub-system-id=67442093 --gpu-revision=0 --gpu-driver-version=9.17.7.4 --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:10C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000011737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:27:53.616{8223a6b9-1659-6902-a902-000000002b00}4668C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +13241300x800000000000000011738Microsoft-Windows-Sysmon/Operationalsoc101win11T1060,RunKeySetValue2025-10-29 13:28:00.456{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Run\electron.app.LM StudioC:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe --run-as-servicesoc101win11\Administrator +22542200x800000000000000011739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:28:06.750{8223a6b9-15de-6902-6702-000000002b00}10092lmstudio.ai0::ffff:104.26.7.153;::ffff:172.67.69.92;::ffff:104.26.6.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +22542200x800000000000000011740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:28:07.342{8223a6b9-15de-6902-6702-000000002b00}10092search.lmstudio.ai0::ffff:172.67.69.92;::ffff:104.26.6.153;::ffff:104.26.7.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +354300x800000000000000011741Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:06.778{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50121-false104.26.7.153-443https +354300x800000000000000011742Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:07.388{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50122-false172.67.69.92-443https +354300x800000000000000011743Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:07.388{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50123-false172.67.69.92-443https +354300x800000000000000011744Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:07.388{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50124-false172.67.69.92-443https +13241300x800000000000000011745Microsoft-Windows-Sysmon/Operationalsoc101win11T1060,RunKeySetValue2025-10-29 13:28:10.458{8223a6b9-1327-6902-a100-000000002b00}6708C:\WINDOWS\system32\sihost.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\RunNotification\StartupTNotielectron.app.LM StudioDWORD (0x00000001)soc101win11\Administrator +354300x800000000000000011746Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:18.531{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50126-false104.26.7.153-443https +354300x800000000000000011747Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:18.635{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50128-false104.26.7.153-443https +354300x800000000000000011748Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:18.635{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50129-false104.26.7.153-443https +354300x800000000000000011749Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:18.635{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50127-false104.26.7.153-443https +354300x800000000000000011750Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:20.938{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50130-false104.26.7.153-443https +354300x800000000000000011751Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:28:20.938{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50131-false104.26.7.153-443https +154100x800000000000000011752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:29:14.638{8223a6b9-16aa-6902-aa02-000000002b00}5376C:\Windows\System32\UsoClient.exe10.0.26100.3037 (WinBuild.160101.0800)UsoClientMicrosoft® Windows® Operating SystemMicrosoft CorporationUsoClient"C:\WINDOWS\system32\usoclient.exe" StartWorkC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0AFB6EB9D41AF833D65448734C47A4C2,SHA256=0A4C60CD2FBE6859B6C09F56C7051580F9582F106D1851750264733194B94DB3,IMPHASH=1BC6441172601AD7E84C0082681FF7D2{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000011753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:29:14.679{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe1450.2506.28022.0MoUSO Core Worker ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationMoUSOCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E048EE9A14933FFA4A9C9FC7A8A7F83B,SHA256=B4A080E7ABAC28ADCBB172B53060508457C9CEC25BC339F3DFA0A031CD881737,IMPHASH=D3DBFEDBF38C961BD70D128454E64766{8223a6b9-1393-6902-3901-000000002b00}10328C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvcNT AUTHORITY\SYSTEM +154100x800000000000000011754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:29:15.236{8223a6b9-16ab-6902-af02-000000002b00}11804C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000011755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:29:15.792{8223a6b9-16ab-6902-b102-000000002b00}10368C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe -RegisterUserDevice -NewAccountC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000011756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:29:16.450{8223a6b9-16ac-6902-b202-000000002b00}4072C:\Windows\servicing\TrustedInstaller.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Modules InstallerMicrosoft® Windows® Operating SystemMicrosoft CorporationTrustedInstaller.exeC:\WINDOWS\servicing\TrustedInstaller.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=23CF29D35F32448C19398B91E3C31186,SHA256=C037F1D455B27EF75391EECE7F25711CF3055006FA29C5D872DB4D54FEF0ADE8,IMPHASH=5E159CE7599ACD6CA7EC3122186D5DBC{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000011757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:29:16.476{8223a6b9-16ac-6902-b302-000000002b00}6948C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe10.0.26100.4933 (WinBuild.160101.0800)Windows Modules Installer WorkerMicrosoft® Windows® Operating SystemMicrosoft CorporationTiWorker.exeC:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=749679E003C18036BF998EB9BCE36A63,SHA256=3F42DBAF2BD7AD92577AFB6D47A8F3DC32DCB6A8E52BA7738FAEB31ED197ACDC,IMPHASH=0B85588480DF97BD963732E20722340E{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +11241100x800000000000000011758Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:00.255{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exeC:\Windows\SystemTemp\{E7296E88-6A24-4EC0-B6CB-0876877773F9}\ssshim.dll2025-10-29 13:30:00.255NT AUTHORITY\SYSTEM +154100x800000000000000011759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:30:00.465{8223a6b9-16d8-6902-b602-000000002b00}10504C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /ClearActiveNotifications /CV x2sHkZhQTUqT3y32.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +11241100x800000000000000011760Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:00.586{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exeC:\Windows\SystemTemp\{739AB9B2-D5BE-4188-B2B1-BA6A919ABE45}\ssshim.dll2025-10-29 13:30:00.586NT AUTHORITY\SYSTEM +154100x800000000000000011761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:30:02.011{8223a6b9-16da-6902-b802-000000002b00}1944C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000011762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:30:18.420{8223a6b9-16ea-6902-ba02-000000002b00}9788C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /ClearActiveNotifications /CV x2sHkZhQTUqT3y32.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +154100x800000000000000011763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:30:18.781{8223a6b9-16ea-6902-bb02-000000002b00}2044C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /ClearActiveNotifications /CV x2sHkZhQTUqT3y32.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +11241100x800000000000000011764Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:18.990{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{B0FD0C4E-5BB5-47BC-AC92-DBAA829A2969}\ssshim.dll2025-10-29 13:30:18.990NT AUTHORITY\SYSTEM +13241300x800000000000000011765Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:30:21.471{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\EventsCreateSessionNT AUTHORITY\SYSTEM +11241100x800000000000000011766Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:21.634{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{F2C52E0E-39EA-4CE2-AD20-65134E3CEF52}\ssshim.dll2025-10-29 13:30:21.634NT AUTHORITY\SYSTEM +13241300x800000000000000011767Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:30:22.373{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\Events(Empty)NT AUTHORITY\SYSTEM +11241100x800000000000000011768Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:33.629{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{88CEB0A2-F34C-4D7B-8746-40297DB1CE8F}\ssshim.dll2025-10-29 13:30:33.629NT AUTHORITY\SYSTEM +11241100x800000000000000011769Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:33.980{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateCompression.dll2025-10-29 13:30:33.980NT AUTHORITY\SYSTEM +11241100x800000000000000011770Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:33.986{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\featurestaging.dll2025-10-29 13:30:33.984NT AUTHORITY\SYSTEM +11241100x800000000000000011771Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:33.988{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\updatedeploy.dll2025-10-29 13:30:33.988NT AUTHORITY\SYSTEM +11241100x800000000000000011772Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:33.994{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\AppxDeviceInventory.dll2025-10-29 13:30:33.994NT AUTHORITY\SYSTEM +11241100x800000000000000011773Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.002{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\TurboStack.dll2025-10-29 13:30:34.002NT AUTHORITY\SYSTEM +11241100x800000000000000011774Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.019{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UAOneSettings.dll2025-10-29 13:30:34.019NT AUTHORITY\SYSTEM +11241100x800000000000000011775Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.021{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\wcp.dll2025-10-29 13:30:34.021NT AUTHORITY\SYSTEM +11241100x800000000000000011776Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.054{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\MsixPackageProvisioner.dll2025-10-29 13:30:34.054NT AUTHORITY\SYSTEM +11241100x800000000000000011777Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.060{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\dpx.dll2025-10-29 13:30:34.060NT AUTHORITY\SYSTEM +11241100x800000000000000011778Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.072{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\WinREAgent.dll2025-10-29 13:30:34.070NT AUTHORITY\SYSTEM +11241100x800000000000000011779Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.080{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\ReserveManager.dll2025-10-29 13:30:34.080NT AUTHORITY\SYSTEM +11241100x800000000000000011780Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.084{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\Mitigation.dll2025-10-29 13:30:34.084NT AUTHORITY\SYSTEM +11241100x800000000000000011781Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:34.090{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateAgent.dll2025-10-29 13:30:34.090NT AUTHORITY\SYSTEM +11241100x800000000000000011782Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:47.406{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D8935652-D486-441F-9602-75757A8E8833}\ssshim.dll2025-10-29 13:30:47.404NT AUTHORITY\SYSTEM +11241100x800000000000000011783Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:48.382{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{39044C85-A167-40AD-8003-F971023DCFF8}\ssshim.dll2025-10-29 13:30:48.380NT AUTHORITY\SYSTEM +13241300x800000000000000011784Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:30:50.128{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\EventsCreateSessionNT AUTHORITY\SYSTEM +13241300x800000000000000011785Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:30:50.884{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\Events(Empty)NT AUTHORITY\SYSTEM +11241100x800000000000000011786Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:51.897{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{E5F2DD94-F017-4A98-BF85-B727BD695976}\ssshim.dll2025-10-29 13:30:51.897NT AUTHORITY\SYSTEM +11241100x800000000000000011787Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.465{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\clretwrc.dll2025-10-29 13:30:53.465NT AUTHORITY\SYSTEM +11241100x800000000000000011788Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.465{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\clrjit.dll2025-10-29 13:30:53.465NT AUTHORITY\SYSTEM +11241100x800000000000000011789Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.467{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\coreclr.dll2025-10-29 13:30:53.465NT AUTHORITY\SYSTEM +11241100x800000000000000011790Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:30:53.467{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\createdump.exe2025-10-29 13:30:53.467NT AUTHORITY\SYSTEM +11241100x800000000000000011791Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.467{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\dbgshim.dll2025-10-29 13:30:53.467NT AUTHORITY\SYSTEM +11241100x800000000000000011792Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\GetHelp.dll2025-10-29 13:30:53.467NT AUTHORITY\SYSTEM +11241100x800000000000000011793Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:30:53.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\GetHelp.exe2025-10-29 13:30:53.469NT AUTHORITY\SYSTEM +11241100x800000000000000011794Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\GraphQL.Client.Abstractions.dll2025-10-29 13:30:53.469NT AUTHORITY\SYSTEM +11241100x800000000000000011795Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\GraphQL.Client.Abstractions.Websocket.dll2025-10-29 13:30:53.469NT AUTHORITY\SYSTEM +11241100x800000000000000011796Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\GraphQL.Client.Serializer.Newtonsoft.dll2025-10-29 13:30:53.469NT AUTHORITY\SYSTEM +11241100x800000000000000011797Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\GraphQL.Primitives.dll2025-10-29 13:30:53.471NT AUTHORITY\SYSTEM +11241100x800000000000000011798Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\hostfxr.dll2025-10-29 13:30:53.471NT AUTHORITY\SYSTEM +11241100x800000000000000011799Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\hostpolicy.dll2025-10-29 13:30:53.471NT AUTHORITY\SYSTEM +11241100x800000000000000011800Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Markdig.Signed.dll2025-10-29 13:30:53.471NT AUTHORITY\SYSTEM +11241100x800000000000000011801Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.ApplicationInsights.dll2025-10-29 13:30:53.471NT AUTHORITY\SYSTEM +11241100x800000000000000011802Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.CodeAnalysis.CSharp.dll2025-10-29 13:30:53.471NT AUTHORITY\SYSTEM +11241100x800000000000000011803Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.CodeAnalysis.dll2025-10-29 13:30:53.473NT AUTHORITY\SYSTEM +11241100x800000000000000011804Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.CSharp.dll2025-10-29 13:30:53.473NT AUTHORITY\SYSTEM +11241100x800000000000000011805Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Abstractions.dll2025-10-29 13:30:53.473NT AUTHORITY\SYSTEM +11241100x800000000000000011806Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Binder.dll2025-10-29 13:30:53.473NT AUTHORITY\SYSTEM +11241100x800000000000000011807Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.dll2025-10-29 13:30:53.473NT AUTHORITY\SYSTEM +11241100x800000000000000011808Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.Abstractions.dll2025-10-29 13:30:53.473NT AUTHORITY\SYSTEM +11241100x800000000000000011809Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.dll2025-10-29 13:30:53.475NT AUTHORITY\SYSTEM +11241100x800000000000000011810Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Abstractions.dll2025-10-29 13:30:53.475NT AUTHORITY\SYSTEM +11241100x800000000000000011811Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Configuration.dll2025-10-29 13:30:53.475NT AUTHORITY\SYSTEM +11241100x800000000000000011812Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.dll2025-10-29 13:30:53.475NT AUTHORITY\SYSTEM +11241100x800000000000000011813Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.ObjectPool.dll2025-10-29 13:30:53.475NT AUTHORITY\SYSTEM +11241100x800000000000000011814Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.ConfigurationExtensions.dll2025-10-29 13:30:53.475NT AUTHORITY\SYSTEM +11241100x800000000000000011815Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.dll2025-10-29 13:30:53.477NT AUTHORITY\SYSTEM +11241100x800000000000000011816Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Primitives.dll2025-10-29 13:30:53.477NT AUTHORITY\SYSTEM +11241100x800000000000000011817Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Graphics.Canvas.Interop.dll2025-10-29 13:30:53.477NT AUTHORITY\SYSTEM +11241100x800000000000000011818Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Identity.Client.Broker.dll2025-10-29 13:30:53.477NT AUTHORITY\SYSTEM +11241100x800000000000000011819Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Identity.Client.dll2025-10-29 13:30:53.477NT AUTHORITY\SYSTEM +11241100x800000000000000011820Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Identity.Client.Extensions.Msal.dll2025-10-29 13:30:53.479NT AUTHORITY\SYSTEM +11241100x800000000000000011821Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Identity.Client.NativeInterop.dll2025-10-29 13:30:53.479NT AUTHORITY\SYSTEM +11241100x800000000000000011822Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Abstractions.dll2025-10-29 13:30:53.479NT AUTHORITY\SYSTEM +11241100x800000000000000011823Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.JsonWebTokens.dll2025-10-29 13:30:53.479NT AUTHORITY\SYSTEM +11241100x800000000000000011824Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Logging.dll2025-10-29 13:30:53.479NT AUTHORITY\SYSTEM +11241100x800000000000000011825Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Tokens.dll2025-10-29 13:30:53.481NT AUTHORITY\SYSTEM +11241100x800000000000000011826Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.InteractiveExperiences.Projection.dll2025-10-29 13:30:53.481NT AUTHORITY\SYSTEM +11241100x800000000000000011827Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Management.Infrastructure.CimCmdlets.dll2025-10-29 13:30:53.481NT AUTHORITY\SYSTEM +11241100x800000000000000011828Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Management.Infrastructure.dll2025-10-29 13:30:53.481NT AUTHORITY\SYSTEM +11241100x800000000000000011829Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Management.Infrastructure.Native.dll2025-10-29 13:30:53.481NT AUTHORITY\SYSTEM +11241100x800000000000000011830Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.483{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Office.PrivacyGuard.dll2025-10-29 13:30:53.483NT AUTHORITY\SYSTEM +11241100x800000000000000011831Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.483{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Office.Telemetry.EventFlags.dll2025-10-29 13:30:53.483NT AUTHORITY\SYSTEM +11241100x800000000000000011832Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.483{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.OneSettingsClient.Managed.dll2025-10-29 13:30:53.483NT AUTHORITY\SYSTEM +11241100x800000000000000011833Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.483{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.PowerShell.Commands.Diagnostics.dll2025-10-29 13:30:53.483NT AUTHORITY\SYSTEM +11241100x800000000000000011834Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.483{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.PowerShell.Commands.Management.dll2025-10-29 13:30:53.483NT AUTHORITY\SYSTEM +11241100x800000000000000011835Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.PowerShell.Commands.Utility.dll2025-10-29 13:30:53.483NT AUTHORITY\SYSTEM +11241100x800000000000000011836Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.PowerShell.ConsoleHost.dll2025-10-29 13:30:53.485NT AUTHORITY\SYSTEM +11241100x800000000000000011837Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.PowerShell.CoreCLR.Eventing.dll2025-10-29 13:30:53.485NT AUTHORITY\SYSTEM +11241100x800000000000000011838Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.PowerShell.MarkdownRender.dll2025-10-29 13:30:53.485NT AUTHORITY\SYSTEM +11241100x800000000000000011839Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.PowerShell.Security.dll2025-10-29 13:30:53.485NT AUTHORITY\SYSTEM +11241100x800000000000000011840Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Security.Authentication.OAuth.Projection.dll2025-10-29 13:30:53.485NT AUTHORITY\SYSTEM +11241100x800000000000000011841Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Unified.Telemetry.ContractsAndContextProviders.dll2025-10-29 13:30:53.485NT AUTHORITY\SYSTEM +11241100x800000000000000011842Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Unified.Telemetry.dll2025-10-29 13:30:53.487NT AUTHORITY\SYSTEM +11241100x800000000000000011843Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Unified.Telemetry.OpenTelemetrySink.dll2025-10-29 13:30:53.487NT AUTHORITY\SYSTEM +11241100x800000000000000011844Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.VisualBasic.Core.dll2025-10-29 13:30:53.487NT AUTHORITY\SYSTEM +11241100x800000000000000011845Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.VisualBasic.dll2025-10-29 13:30:53.487NT AUTHORITY\SYSTEM +11241100x800000000000000011846Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Web.WebView2.Core.dll2025-10-29 13:30:53.489NT AUTHORITY\SYSTEM +11241100x800000000000000011847Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Web.WebView2.Core.Projection.dll2025-10-29 13:30:53.489NT AUTHORITY\SYSTEM +11241100x800000000000000011848Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Primitives.dll2025-10-29 13:30:53.489NT AUTHORITY\SYSTEM +11241100x800000000000000011849Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.491{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Registry.AccessControl.dll2025-10-29 13:30:53.491NT AUTHORITY\SYSTEM +11241100x800000000000000011850Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.491{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Registry.dll2025-10-29 13:30:53.491NT AUTHORITY\SYSTEM +11241100x800000000000000011851Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.493{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Win32.SystemEvents.dll2025-10-29 13:30:53.491NT AUTHORITY\SYSTEM +11241100x800000000000000011852Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Background.Projection.dll2025-10-29 13:30:53.493NT AUTHORITY\SYSTEM +11241100x800000000000000011853Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll2025-10-29 13:30:53.495NT AUTHORITY\SYSTEM +11241100x800000000000000011854Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.dll2025-10-29 13:30:53.495NT AUTHORITY\SYSTEM +11241100x800000000000000011855Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.Projection.dll2025-10-29 13:30:53.495NT AUTHORITY\SYSTEM +11241100x800000000000000011856Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.dll2025-10-29 13:30:53.495NT AUTHORITY\SYSTEM +11241100x800000000000000011857Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppLifecycle.Projection.dll2025-10-29 13:30:53.495NT AUTHORITY\SYSTEM +11241100x800000000000000011858Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppNotifications.Builder.Projection.dll2025-10-29 13:30:53.495NT AUTHORITY\SYSTEM +11241100x800000000000000011859Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppNotifications.Projection.dll2025-10-29 13:30:53.497NT AUTHORITY\SYSTEM +11241100x800000000000000011860Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.BadgeNotifications.Projection.dll2025-10-29 13:30:53.497NT AUTHORITY\SYSTEM +11241100x800000000000000011861Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Management.Deployment.Projection.dll2025-10-29 13:30:53.497NT AUTHORITY\SYSTEM +11241100x800000000000000011862Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Media.Capture.Projection.dll2025-10-29 13:30:53.497NT AUTHORITY\SYSTEM +11241100x800000000000000011863Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.PushNotifications.Projection.dll2025-10-29 13:30:53.497NT AUTHORITY\SYSTEM +11241100x800000000000000011864Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.499{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.SDK.NET.dll2025-10-29 13:30:53.499NT AUTHORITY\SYSTEM +11241100x800000000000000011865Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.499{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Security.AccessControl.Projection.dll2025-10-29 13:30:53.499NT AUTHORITY\SYSTEM +11241100x800000000000000011866Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.499{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Storage.Projection.dll2025-10-29 13:30:53.499NT AUTHORITY\SYSTEM +11241100x800000000000000011867Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.499{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.System.Power.Projection.dll2025-10-29 13:30:53.499NT AUTHORITY\SYSTEM +11241100x800000000000000011868Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.499{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.System.Projection.dll2025-10-29 13:30:53.499NT AUTHORITY\SYSTEM +11241100x800000000000000011869Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.499{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Projection.dll2025-10-29 13:30:53.499NT AUTHORITY\SYSTEM +11241100x800000000000000011870Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.501{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Bootstrap.dll2025-10-29 13:30:53.499NT AUTHORITY\SYSTEM +11241100x800000000000000011871Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.501{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Bootstrap.Net.dll2025-10-29 13:30:53.501NT AUTHORITY\SYSTEM +11241100x800000000000000011872Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.501{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.WinUI.dll2025-10-29 13:30:53.501NT AUTHORITY\SYSTEM +11241100x800000000000000011873Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.501{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.WSMan.Management.dll2025-10-29 13:30:53.501NT AUTHORITY\SYSTEM +11241100x800000000000000011874Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.501{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Microsoft.WSMan.Runtime.dll2025-10-29 13:30:53.501NT AUTHORITY\SYSTEM +11241100x800000000000000011875Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.503{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\mscordaccore.dll2025-10-29 13:30:53.503NT AUTHORITY\SYSTEM +11241100x800000000000000011876Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.503{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\mscordaccore_amd64_amd64_6.0.3624.51421.dll2025-10-29 13:30:53.503NT AUTHORITY\SYSTEM +11241100x800000000000000011877Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.503{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\mscordbi.dll2025-10-29 13:30:53.503NT AUTHORITY\SYSTEM +11241100x800000000000000011878Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.503{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\mscorlib.dll2025-10-29 13:30:53.503NT AUTHORITY\SYSTEM +11241100x800000000000000011879Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.503{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\mscorrc.dll2025-10-29 13:30:53.503NT AUTHORITY\SYSTEM +11241100x800000000000000011880Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.503{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Namotion.Reflection.dll2025-10-29 13:30:53.503NT AUTHORITY\SYSTEM +11241100x800000000000000011881Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.503{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\NativeNetworkDiagnosticsWRC.dll2025-10-29 13:30:53.503NT AUTHORITY\SYSTEM +11241100x800000000000000011882Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.505{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\netstandard.dll2025-10-29 13:30:53.505NT AUTHORITY\SYSTEM +11241100x800000000000000011883Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.505{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\Newtonsoft.Json.dll2025-10-29 13:30:53.505NT AUTHORITY\SYSTEM +11241100x800000000000000011884Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.505{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\NJsonSchema.dll2025-10-29 13:30:53.505NT AUTHORITY\SYSTEM +11241100x800000000000000011885Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.505{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\OpenTelemetry.Api.dll2025-10-29 13:30:53.505NT AUTHORITY\SYSTEM +11241100x800000000000000011886Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.505{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\OpenTelemetry.Api.ProviderBuilderExtensions.dll2025-10-29 13:30:53.505NT AUTHORITY\SYSTEM +11241100x800000000000000011887Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.505{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\OpenTelemetry.dll2025-10-29 13:30:53.505NT AUTHORITY\SYSTEM +11241100x800000000000000011888Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.507{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\OpenTelemetry.Exporter.OneCollector.dll2025-10-29 13:30:53.507NT AUTHORITY\SYSTEM +11241100x800000000000000011889Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.507{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.AppContext.dll2025-10-29 13:30:53.507NT AUTHORITY\SYSTEM +11241100x800000000000000011890Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.507{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Buffers.dll2025-10-29 13:30:53.507NT AUTHORITY\SYSTEM +11241100x800000000000000011891Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.507{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.CodeDom.dll2025-10-29 13:30:53.507NT AUTHORITY\SYSTEM +11241100x800000000000000011892Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.507{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Collections.Concurrent.dll2025-10-29 13:30:53.507NT AUTHORITY\SYSTEM +11241100x800000000000000011893Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.509{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Collections.dll2025-10-29 13:30:53.509NT AUTHORITY\SYSTEM +11241100x800000000000000011894Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.509{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Collections.Immutable.dll2025-10-29 13:30:53.509NT AUTHORITY\SYSTEM +11241100x800000000000000011895Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.509{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Collections.NonGeneric.dll2025-10-29 13:30:53.509NT AUTHORITY\SYSTEM +11241100x800000000000000011896Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.509{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Collections.Specialized.dll2025-10-29 13:30:53.509NT AUTHORITY\SYSTEM +11241100x800000000000000011897Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.511{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ComponentModel.Annotations.dll2025-10-29 13:30:53.509NT AUTHORITY\SYSTEM +11241100x800000000000000011898Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.511{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ComponentModel.Composition.dll2025-10-29 13:30:53.511NT AUTHORITY\SYSTEM +11241100x800000000000000011899Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.511{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ComponentModel.Composition.Registration.dll2025-10-29 13:30:53.511NT AUTHORITY\SYSTEM +11241100x800000000000000011900Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.511{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ComponentModel.DataAnnotations.dll2025-10-29 13:30:53.511NT AUTHORITY\SYSTEM +11241100x800000000000000011901Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.511{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ComponentModel.dll2025-10-29 13:30:53.511NT AUTHORITY\SYSTEM +11241100x800000000000000011902Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.511{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ComponentModel.EventBasedAsync.dll2025-10-29 13:30:53.511NT AUTHORITY\SYSTEM +11241100x800000000000000011903Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.511{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ComponentModel.Primitives.dll2025-10-29 13:30:53.511NT AUTHORITY\SYSTEM +11241100x800000000000000011904Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.513{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ComponentModel.TypeConverter.dll2025-10-29 13:30:53.513NT AUTHORITY\SYSTEM +11241100x800000000000000011905Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.513{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Configuration.ConfigurationManager.dll2025-10-29 13:30:53.513NT AUTHORITY\SYSTEM +11241100x800000000000000011906Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.513{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Configuration.dll2025-10-29 13:30:53.513NT AUTHORITY\SYSTEM +11241100x800000000000000011907Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.513{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Console.dll2025-10-29 13:30:53.513NT AUTHORITY\SYSTEM +11241100x800000000000000011908Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.513{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Core.dll2025-10-29 13:30:53.513NT AUTHORITY\SYSTEM +11241100x800000000000000011909Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.515{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Data.Common.dll2025-10-29 13:30:53.515NT AUTHORITY\SYSTEM +11241100x800000000000000011910Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.515{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Data.DataSetExtensions.dll2025-10-29 13:30:53.515NT AUTHORITY\SYSTEM +11241100x800000000000000011911Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.515{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Data.dll2025-10-29 13:30:53.515NT AUTHORITY\SYSTEM +11241100x800000000000000011912Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.515{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Data.Odbc.dll2025-10-29 13:30:53.515NT AUTHORITY\SYSTEM +11241100x800000000000000011913Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.515{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Data.OleDb.dll2025-10-29 13:30:53.515NT AUTHORITY\SYSTEM +11241100x800000000000000011914Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.515{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Data.SqlClient.dll2025-10-29 13:30:53.515NT AUTHORITY\SYSTEM +11241100x800000000000000011915Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.517{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.Contracts.dll2025-10-29 13:30:53.517NT AUTHORITY\SYSTEM +11241100x800000000000000011916Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.517{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.Debug.dll2025-10-29 13:30:53.517NT AUTHORITY\SYSTEM +11241100x800000000000000011917Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.517{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.DiagnosticSource.dll2025-10-29 13:30:53.517NT AUTHORITY\SYSTEM +11241100x800000000000000011918Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.517{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.EventLog.dll2025-10-29 13:30:53.517NT AUTHORITY\SYSTEM +11241100x800000000000000011919Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.519{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.FileVersionInfo.dll2025-10-29 13:30:53.519NT AUTHORITY\SYSTEM +11241100x800000000000000011920Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.519{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.PerformanceCounter.dll2025-10-29 13:30:53.519NT AUTHORITY\SYSTEM +11241100x800000000000000011921Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.519{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.Process.dll2025-10-29 13:30:53.519NT AUTHORITY\SYSTEM +11241100x800000000000000011922Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.519{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.StackTrace.dll2025-10-29 13:30:53.519NT AUTHORITY\SYSTEM +11241100x800000000000000011923Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.519{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.TextWriterTraceListener.dll2025-10-29 13:30:53.519NT AUTHORITY\SYSTEM +11241100x800000000000000011924Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.521{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.Tools.dll2025-10-29 13:30:53.521NT AUTHORITY\SYSTEM +11241100x800000000000000011925Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.521{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.TraceSource.dll2025-10-29 13:30:53.521NT AUTHORITY\SYSTEM +11241100x800000000000000011926Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.521{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Diagnostics.Tracing.dll2025-10-29 13:30:53.521NT AUTHORITY\SYSTEM +11241100x800000000000000011927Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.521{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.DirectoryServices.AccountManagement.dll2025-10-29 13:30:53.521NT AUTHORITY\SYSTEM +11241100x800000000000000011928Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.521{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.DirectoryServices.dll2025-10-29 13:30:53.521NT AUTHORITY\SYSTEM +11241100x800000000000000011929Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.523{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.DirectoryServices.Protocols.dll2025-10-29 13:30:53.523NT AUTHORITY\SYSTEM +11241100x800000000000000011930Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.523{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.dll2025-10-29 13:30:53.523NT AUTHORITY\SYSTEM +11241100x800000000000000011931Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.523{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Drawing.Common.dll2025-10-29 13:30:53.523NT AUTHORITY\SYSTEM +11241100x800000000000000011932Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.523{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Drawing.dll2025-10-29 13:30:53.523NT AUTHORITY\SYSTEM +11241100x800000000000000011933Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.523{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Drawing.Primitives.dll2025-10-29 13:30:53.523NT AUTHORITY\SYSTEM +11241100x800000000000000011934Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.523{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Dynamic.Runtime.dll2025-10-29 13:30:53.523NT AUTHORITY\SYSTEM +11241100x800000000000000011935Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.525{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Formats.Asn1.dll2025-10-29 13:30:53.523NT AUTHORITY\SYSTEM +11241100x800000000000000011936Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.525{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Globalization.Calendars.dll2025-10-29 13:30:53.525NT AUTHORITY\SYSTEM +11241100x800000000000000011937Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.525{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Globalization.dll2025-10-29 13:30:53.525NT AUTHORITY\SYSTEM +11241100x800000000000000011938Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.525{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Globalization.Extensions.dll2025-10-29 13:30:53.525NT AUTHORITY\SYSTEM +11241100x800000000000000011939Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.525{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IdentityModel.Tokens.Jwt.dll2025-10-29 13:30:53.525NT AUTHORITY\SYSTEM +11241100x800000000000000011940Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.527{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Compression.Brotli.dll2025-10-29 13:30:53.527NT AUTHORITY\SYSTEM +11241100x800000000000000011941Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.527{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Compression.dll2025-10-29 13:30:53.527NT AUTHORITY\SYSTEM +11241100x800000000000000011942Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.527{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Compression.FileSystem.dll2025-10-29 13:30:53.527NT AUTHORITY\SYSTEM +11241100x800000000000000011943Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.527{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Compression.Native.dll2025-10-29 13:30:53.527NT AUTHORITY\SYSTEM +11241100x800000000000000011944Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.527{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Compression.ZipFile.dll2025-10-29 13:30:53.527NT AUTHORITY\SYSTEM +11241100x800000000000000011945Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.527{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.dll2025-10-29 13:30:53.527NT AUTHORITY\SYSTEM +11241100x800000000000000011946Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.529{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.AccessControl.dll2025-10-29 13:30:53.529NT AUTHORITY\SYSTEM +11241100x800000000000000011947Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.529{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.dll2025-10-29 13:30:53.529NT AUTHORITY\SYSTEM +11241100x800000000000000011948Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.529{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.DriveInfo.dll2025-10-29 13:30:53.529NT AUTHORITY\SYSTEM +11241100x800000000000000011949Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.529{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.Primitives.dll2025-10-29 13:30:53.529NT AUTHORITY\SYSTEM +11241100x800000000000000011950Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.529{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.Watcher.dll2025-10-29 13:30:53.529NT AUTHORITY\SYSTEM +11241100x800000000000000011951Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.529{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.IsolatedStorage.dll2025-10-29 13:30:53.529NT AUTHORITY\SYSTEM +11241100x800000000000000011952Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.531{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.MemoryMappedFiles.dll2025-10-29 13:30:53.531NT AUTHORITY\SYSTEM +11241100x800000000000000011953Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.531{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Packaging.dll2025-10-29 13:30:53.531NT AUTHORITY\SYSTEM +11241100x800000000000000011954Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.531{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Pipes.AccessControl.dll2025-10-29 13:30:53.531NT AUTHORITY\SYSTEM +11241100x800000000000000011955Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.531{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Pipes.dll2025-10-29 13:30:53.531NT AUTHORITY\SYSTEM +11241100x800000000000000011956Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.533{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.Ports.dll2025-10-29 13:30:53.531NT AUTHORITY\SYSTEM +11241100x800000000000000011957Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.533{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.IO.UnmanagedMemoryStream.dll2025-10-29 13:30:53.533NT AUTHORITY\SYSTEM +11241100x800000000000000011958Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.533{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Linq.dll2025-10-29 13:30:53.533NT AUTHORITY\SYSTEM +11241100x800000000000000011959Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.533{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Linq.Expressions.dll2025-10-29 13:30:53.533NT AUTHORITY\SYSTEM +11241100x800000000000000011960Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.533{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Linq.Parallel.dll2025-10-29 13:30:53.533NT AUTHORITY\SYSTEM +11241100x800000000000000011961Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.533{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Linq.Queryable.dll2025-10-29 13:30:53.533NT AUTHORITY\SYSTEM +11241100x800000000000000011962Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.535{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Management.Automation.dll2025-10-29 13:30:53.533NT AUTHORITY\SYSTEM +11241100x800000000000000011963Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.535{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Management.dll2025-10-29 13:30:53.535NT AUTHORITY\SYSTEM +11241100x800000000000000011964Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.535{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Memory.dll2025-10-29 13:30:53.535NT AUTHORITY\SYSTEM +11241100x800000000000000011965Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.535{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.dll2025-10-29 13:30:53.535NT AUTHORITY\SYSTEM +11241100x800000000000000011966Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.535{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Http.dll2025-10-29 13:30:53.535NT AUTHORITY\SYSTEM +11241100x800000000000000011967Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.535{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Http.Json.dll2025-10-29 13:30:53.535NT AUTHORITY\SYSTEM +11241100x800000000000000011968Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.535{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Http.WinHttpHandler.dll2025-10-29 13:30:53.535NT AUTHORITY\SYSTEM +11241100x800000000000000011969Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.537{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.HttpListener.dll2025-10-29 13:30:53.537NT AUTHORITY\SYSTEM +11241100x800000000000000011970Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.537{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Mail.dll2025-10-29 13:30:53.537NT AUTHORITY\SYSTEM +11241100x800000000000000011971Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.537{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.NameResolution.dll2025-10-29 13:30:53.537NT AUTHORITY\SYSTEM +11241100x800000000000000011972Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.537{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.NetworkInformation.dll2025-10-29 13:30:53.537NT AUTHORITY\SYSTEM +11241100x800000000000000011973Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.537{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Ping.dll2025-10-29 13:30:53.537NT AUTHORITY\SYSTEM +11241100x800000000000000011974Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Primitives.dll2025-10-29 13:30:53.537NT AUTHORITY\SYSTEM +11241100x800000000000000011975Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Quic.dll2025-10-29 13:30:53.539NT AUTHORITY\SYSTEM +11241100x800000000000000011976Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Requests.dll2025-10-29 13:30:53.539NT AUTHORITY\SYSTEM +11241100x800000000000000011977Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Security.dll2025-10-29 13:30:53.539NT AUTHORITY\SYSTEM +11241100x800000000000000011978Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.ServicePoint.dll2025-10-29 13:30:53.539NT AUTHORITY\SYSTEM +11241100x800000000000000011979Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.Sockets.dll2025-10-29 13:30:53.539NT AUTHORITY\SYSTEM +11241100x800000000000000011980Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.WebClient.dll2025-10-29 13:30:53.539NT AUTHORITY\SYSTEM +11241100x800000000000000011981Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.541{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.WebHeaderCollection.dll2025-10-29 13:30:53.541NT AUTHORITY\SYSTEM +11241100x800000000000000011982Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.541{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.WebProxy.dll2025-10-29 13:30:53.541NT AUTHORITY\SYSTEM +11241100x800000000000000011983Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.541{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.WebSockets.Client.dll2025-10-29 13:30:53.541NT AUTHORITY\SYSTEM +11241100x800000000000000011984Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.541{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Net.WebSockets.dll2025-10-29 13:30:53.541NT AUTHORITY\SYSTEM +11241100x800000000000000011985Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.541{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Numerics.dll2025-10-29 13:30:53.541NT AUTHORITY\SYSTEM +11241100x800000000000000011986Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.543{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Numerics.Vectors.dll2025-10-29 13:30:53.543NT AUTHORITY\SYSTEM +11241100x800000000000000011987Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.543{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ObjectModel.dll2025-10-29 13:30:53.543NT AUTHORITY\SYSTEM +11241100x800000000000000011988Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.543{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Private.CoreLib.dll2025-10-29 13:30:53.543NT AUTHORITY\SYSTEM +11241100x800000000000000011989Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.543{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Private.DataContractSerialization.dll2025-10-29 13:30:53.543NT AUTHORITY\SYSTEM +11241100x800000000000000011990Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.543{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Private.ServiceModel.dll2025-10-29 13:30:53.543NT AUTHORITY\SYSTEM +11241100x800000000000000011991Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.545{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Private.Uri.dll2025-10-29 13:30:53.545NT AUTHORITY\SYSTEM +11241100x800000000000000011992Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.545{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Private.Xml.dll2025-10-29 13:30:53.545NT AUTHORITY\SYSTEM +11241100x800000000000000011993Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.545{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Private.Xml.Linq.dll2025-10-29 13:30:53.545NT AUTHORITY\SYSTEM +11241100x800000000000000011994Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.545{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.Context.dll2025-10-29 13:30:53.545NT AUTHORITY\SYSTEM +11241100x800000000000000011995Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.545{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.DispatchProxy.dll2025-10-29 13:30:53.545NT AUTHORITY\SYSTEM +11241100x800000000000000011996Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.547{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.dll2025-10-29 13:30:53.547NT AUTHORITY\SYSTEM +11241100x800000000000000011997Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.547{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.dll2025-10-29 13:30:53.547NT AUTHORITY\SYSTEM +11241100x800000000000000011998Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.547{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.ILGeneration.dll2025-10-29 13:30:53.547NT AUTHORITY\SYSTEM +11241100x800000000000000011999Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.547{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.Lightweight.dll2025-10-29 13:30:53.547NT AUTHORITY\SYSTEM +11241100x800000000000000012000Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.549{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.Extensions.dll2025-10-29 13:30:53.547NT AUTHORITY\SYSTEM +11241100x800000000000000012001Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.549{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.Metadata.dll2025-10-29 13:30:53.549NT AUTHORITY\SYSTEM +11241100x800000000000000012002Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.549{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.Primitives.dll2025-10-29 13:30:53.549NT AUTHORITY\SYSTEM +11241100x800000000000000012003Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.549{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Reflection.TypeExtensions.dll2025-10-29 13:30:53.549NT AUTHORITY\SYSTEM +11241100x800000000000000012004Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.549{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Resources.Reader.dll2025-10-29 13:30:53.549NT AUTHORITY\SYSTEM +11241100x800000000000000012005Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.549{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Resources.ResourceManager.dll2025-10-29 13:30:53.549NT AUTHORITY\SYSTEM +11241100x800000000000000012006Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.551{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Resources.Writer.dll2025-10-29 13:30:53.551NT AUTHORITY\SYSTEM +11241100x800000000000000012007Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.551{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Caching.dll2025-10-29 13:30:53.551NT AUTHORITY\SYSTEM +11241100x800000000000000012008Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.551{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.CompilerServices.Unsafe.dll2025-10-29 13:30:53.551NT AUTHORITY\SYSTEM +11241100x800000000000000012009Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.551{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.CompilerServices.VisualC.dll2025-10-29 13:30:53.551NT AUTHORITY\SYSTEM +11241100x800000000000000012010Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.551{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.dll2025-10-29 13:30:53.551NT AUTHORITY\SYSTEM +11241100x800000000000000012011Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.553{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Extensions.dll2025-10-29 13:30:53.551NT AUTHORITY\SYSTEM +11241100x800000000000000012012Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.553{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Handles.dll2025-10-29 13:30:53.553NT AUTHORITY\SYSTEM +11241100x800000000000000012013Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.553{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.dll2025-10-29 13:30:53.553NT AUTHORITY\SYSTEM +11241100x800000000000000012014Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.553{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.RuntimeInformation.dll2025-10-29 13:30:53.553NT AUTHORITY\SYSTEM +11241100x800000000000000012015Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.553{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Intrinsics.dll2025-10-29 13:30:53.553NT AUTHORITY\SYSTEM +11241100x800000000000000012016Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.553{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Loader.dll2025-10-29 13:30:53.553NT AUTHORITY\SYSTEM +11241100x800000000000000012017Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Numerics.dll2025-10-29 13:30:53.555NT AUTHORITY\SYSTEM +11241100x800000000000000012018Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.dll2025-10-29 13:30:53.555NT AUTHORITY\SYSTEM +11241100x800000000000000012019Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Formatters.dll2025-10-29 13:30:53.555NT AUTHORITY\SYSTEM +11241100x800000000000000012020Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Json.dll2025-10-29 13:30:53.555NT AUTHORITY\SYSTEM +11241100x800000000000000012021Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Primitives.dll2025-10-29 13:30:53.555NT AUTHORITY\SYSTEM +11241100x800000000000000012022Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Xml.dll2025-10-29 13:30:53.555NT AUTHORITY\SYSTEM +11241100x800000000000000012023Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.557{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.AccessControl.dll2025-10-29 13:30:53.557NT AUTHORITY\SYSTEM +11241100x800000000000000012024Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.557{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Claims.dll2025-10-29 13:30:53.557NT AUTHORITY\SYSTEM +11241100x800000000000000012025Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.557{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Algorithms.dll2025-10-29 13:30:53.557NT AUTHORITY\SYSTEM +11241100x800000000000000012026Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.559{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Cng.dll2025-10-29 13:30:53.557NT AUTHORITY\SYSTEM +11241100x800000000000000012027Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.559{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Csp.dll2025-10-29 13:30:53.559NT AUTHORITY\SYSTEM +11241100x800000000000000012028Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.559{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Encoding.dll2025-10-29 13:30:53.559NT AUTHORITY\SYSTEM +11241100x800000000000000012029Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.559{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.OpenSsl.dll2025-10-29 13:30:53.559NT AUTHORITY\SYSTEM +11241100x800000000000000012030Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.559{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Pkcs.dll2025-10-29 13:30:53.559NT AUTHORITY\SYSTEM +11241100x800000000000000012031Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Primitives.dll2025-10-29 13:30:53.561NT AUTHORITY\SYSTEM +11241100x800000000000000012032Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.ProtectedData.dll2025-10-29 13:30:53.561NT AUTHORITY\SYSTEM +11241100x800000000000000012033Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.X509Certificates.dll2025-10-29 13:30:53.561NT AUTHORITY\SYSTEM +11241100x800000000000000012034Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Xml.dll2025-10-29 13:30:53.561NT AUTHORITY\SYSTEM +11241100x800000000000000012035Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.dll2025-10-29 13:30:53.561NT AUTHORITY\SYSTEM +11241100x800000000000000012036Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Permissions.dll2025-10-29 13:30:53.561NT AUTHORITY\SYSTEM +11241100x800000000000000012037Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Principal.dll2025-10-29 13:30:53.563NT AUTHORITY\SYSTEM +11241100x800000000000000012038Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.Principal.Windows.dll2025-10-29 13:30:53.563NT AUTHORITY\SYSTEM +11241100x800000000000000012039Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Security.SecureString.dll2025-10-29 13:30:53.563NT AUTHORITY\SYSTEM +11241100x800000000000000012040Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ServiceModel.Syndication.dll2025-10-29 13:30:53.563NT AUTHORITY\SYSTEM +11241100x800000000000000012041Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ServiceModel.Web.dll2025-10-29 13:30:53.563NT AUTHORITY\SYSTEM +11241100x800000000000000012042Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ServiceProcess.dll2025-10-29 13:30:53.563NT AUTHORITY\SYSTEM +11241100x800000000000000012043Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ServiceProcess.ServiceController.dll2025-10-29 13:30:53.565NT AUTHORITY\SYSTEM +11241100x800000000000000012044Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Speech.dll2025-10-29 13:30:53.565NT AUTHORITY\SYSTEM +11241100x800000000000000012045Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Text.Encoding.CodePages.dll2025-10-29 13:30:53.565NT AUTHORITY\SYSTEM +11241100x800000000000000012046Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Text.Encoding.dll2025-10-29 13:30:53.565NT AUTHORITY\SYSTEM +11241100x800000000000000012047Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Text.Encoding.Extensions.dll2025-10-29 13:30:53.565NT AUTHORITY\SYSTEM +11241100x800000000000000012048Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Text.Encodings.Web.dll2025-10-29 13:30:53.565NT AUTHORITY\SYSTEM +11241100x800000000000000012049Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Text.Json.dll2025-10-29 13:30:53.567NT AUTHORITY\SYSTEM +11241100x800000000000000012050Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Text.RegularExpressions.dll2025-10-29 13:30:53.567NT AUTHORITY\SYSTEM +11241100x800000000000000012051Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.AccessControl.dll2025-10-29 13:30:53.567NT AUTHORITY\SYSTEM +11241100x800000000000000012052Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.Channels.dll2025-10-29 13:30:53.567NT AUTHORITY\SYSTEM +11241100x800000000000000012053Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.dll2025-10-29 13:30:53.567NT AUTHORITY\SYSTEM +11241100x800000000000000012054Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.Overlapped.dll2025-10-29 13:30:53.567NT AUTHORITY\SYSTEM +11241100x800000000000000012055Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Dataflow.dll2025-10-29 13:30:53.567NT AUTHORITY\SYSTEM +11241100x800000000000000012056Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.dll2025-10-29 13:30:53.569NT AUTHORITY\SYSTEM +11241100x800000000000000012057Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Extensions.dll2025-10-29 13:30:53.569NT AUTHORITY\SYSTEM +11241100x800000000000000012058Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Parallel.dll2025-10-29 13:30:53.569NT AUTHORITY\SYSTEM +11241100x800000000000000012059Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.Thread.dll2025-10-29 13:30:53.569NT AUTHORITY\SYSTEM +11241100x800000000000000012060Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.ThreadPool.dll2025-10-29 13:30:53.569NT AUTHORITY\SYSTEM +11241100x800000000000000012061Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Threading.Timer.dll2025-10-29 13:30:53.569NT AUTHORITY\SYSTEM +11241100x800000000000000012062Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.571{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Transactions.dll2025-10-29 13:30:53.571NT AUTHORITY\SYSTEM +11241100x800000000000000012063Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.571{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Transactions.Local.dll2025-10-29 13:30:53.571NT AUTHORITY\SYSTEM +11241100x800000000000000012064Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.571{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.ValueTuple.dll2025-10-29 13:30:53.571NT AUTHORITY\SYSTEM +11241100x800000000000000012065Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.571{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Web.dll2025-10-29 13:30:53.571NT AUTHORITY\SYSTEM +11241100x800000000000000012066Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.573{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Web.HttpUtility.dll2025-10-29 13:30:53.571NT AUTHORITY\SYSTEM +11241100x800000000000000012067Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.573{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Web.Services.Description.dll2025-10-29 13:30:53.573NT AUTHORITY\SYSTEM +11241100x800000000000000012068Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.573{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Windows.dll2025-10-29 13:30:53.573NT AUTHORITY\SYSTEM +11241100x800000000000000012069Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.573{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Windows.Extensions.dll2025-10-29 13:30:53.573NT AUTHORITY\SYSTEM +11241100x800000000000000012070Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.573{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.dll2025-10-29 13:30:53.573NT AUTHORITY\SYSTEM +11241100x800000000000000012071Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.574{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.Linq.dll2025-10-29 13:30:53.574NT AUTHORITY\SYSTEM +11241100x800000000000000012072Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.574{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.ReaderWriter.dll2025-10-29 13:30:53.574NT AUTHORITY\SYSTEM +11241100x800000000000000012073Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.574{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.Serialization.dll2025-10-29 13:30:53.574NT AUTHORITY\SYSTEM +11241100x800000000000000012074Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.576{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.XDocument.dll2025-10-29 13:30:53.576NT AUTHORITY\SYSTEM +11241100x800000000000000012075Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.576{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.XmlDocument.dll2025-10-29 13:30:53.576NT AUTHORITY\SYSTEM +11241100x800000000000000012076Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.576{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.XmlSerializer.dll2025-10-29 13:30:53.576NT AUTHORITY\SYSTEM +11241100x800000000000000012077Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.576{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.XPath.dll2025-10-29 13:30:53.576NT AUTHORITY\SYSTEM +11241100x800000000000000012078Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.578{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\System.Xml.XPath.XDocument.dll2025-10-29 13:30:53.576NT AUTHORITY\SYSTEM +11241100x800000000000000012079Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.578{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\VelocityLibrary.dll2025-10-29 13:30:53.578NT AUTHORITY\SYSTEM +11241100x800000000000000012080Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.578{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\WebView2Loader.dll2025-10-29 13:30:53.578NT AUTHORITY\SYSTEM +11241100x800000000000000012081Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.578{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\WindowsBase.dll2025-10-29 13:30:53.578NT AUTHORITY\SYSTEM +11241100x800000000000000012082Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:53.580{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.32612.0_x64__8wekyb3d8bbwe\WinRT.Runtime.dll2025-10-29 13:30:53.578NT AUTHORITY\SYSTEM +11241100x800000000000000012083Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.197{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\AIServices.dll2025-10-29 13:30:54.197NT AUTHORITY\SYSTEM +11241100x800000000000000012084Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.197{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\AIServicesCS.dll2025-10-29 13:30:54.197NT AUTHORITY\SYSTEM +11241100x800000000000000012085Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.197{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\AIStore.dll2025-10-29 13:30:54.197NT AUTHORITY\SYSTEM +11241100x800000000000000012086Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.199{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\BasePaint.dll2025-10-29 13:30:54.197NT AUTHORITY\SYSTEM +11241100x800000000000000012087Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.199{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\EnumHelper.dll2025-10-29 13:30:54.199NT AUTHORITY\SYSTEM +11241100x800000000000000012088Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.199{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\ExplorerCommand.dll2025-10-29 13:30:54.199NT AUTHORITY\SYSTEM +11241100x800000000000000012089Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.199{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\FeatureStaging.dll2025-10-29 13:30:54.199NT AUTHORITY\SYSTEM +11241100x800000000000000012090Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.199{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\ImageProcessing.dll2025-10-29 13:30:54.199NT AUTHORITY\SYSTEM +11241100x800000000000000012091Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:30:54.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\mspaint.exe2025-10-29 13:30:54.199NT AUTHORITY\SYSTEM +11241100x800000000000000012092Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\PaintAIManager.dll2025-10-29 13:30:54.201NT AUTHORITY\SYSTEM +11241100x800000000000000012093Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\PaintTools.dll2025-10-29 13:30:54.201NT AUTHORITY\SYSTEM +11241100x800000000000000012094Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\PaintUI.dll2025-10-29 13:30:54.201NT AUTHORITY\SYSTEM +11241100x800000000000000012095Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\PerceptiveShell\magerapi.dll2025-10-29 13:30:54.203NT AUTHORITY\SYSTEM +11241100x800000000000000012096Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\PerceptiveShell\NPUDetect.dll2025-10-29 13:30:54.203NT AUTHORITY\SYSTEM +11241100x800000000000000012097Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\PerceptiveShell\segapi.dll2025-10-29 13:30:54.203NT AUTHORITY\SYSTEM +11241100x800000000000000012098Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\PGS.dll2025-10-29 13:30:54.203NT AUTHORITY\SYSTEM +11241100x800000000000000012099Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\PlatformHelpers.dll2025-10-29 13:30:54.205NT AUTHORITY\SYSTEM +11241100x800000000000000012100Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\ProjectFile.dll2025-10-29 13:30:54.205NT AUTHORITY\SYSTEM +11241100x800000000000000012101Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\ProvenanceHelper.dll2025-10-29 13:30:54.205NT AUTHORITY\SYSTEM +11241100x800000000000000012102Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\Reporting.dll2025-10-29 13:30:54.205NT AUTHORITY\SYSTEM +11241100x800000000000000012103Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Paint_11.2508.361.0_x64__8wekyb3d8bbwe\PaintApp\RestartRecovery.dll2025-10-29 13:30:54.205NT AUTHORITY\SYSTEM +11241100x800000000000000012104Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:54.207{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{3A34E2CC-E6B4-441E-9B22-BCEBFCF5E497}\ssshim.dll2025-10-29 13:30:54.207NT AUTHORITY\SYSTEM +11241100x800000000000000012105Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\ConnectedDevicesDevKit.Projection.dll2025-10-29 13:30:56.203NT AUTHORITY\SYSTEM +11241100x800000000000000012106Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Clipboard.dll2025-10-29 13:30:56.203NT AUTHORITY\SYSTEM +11241100x800000000000000012107Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Clipboard.Protocol.dll2025-10-29 13:30:56.205NT AUTHORITY\SYSTEM +11241100x800000000000000012108Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.ConnectedDevicesExperience.dll2025-10-29 13:30:56.205NT AUTHORITY\SYSTEM +11241100x800000000000000012109Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Continuity.dll2025-10-29 13:30:56.205NT AUTHORITY\SYSTEM +11241100x800000000000000012110Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Continuity.Protocol.dll2025-10-29 13:30:56.205NT AUTHORITY\SYSTEM +11241100x800000000000000012111Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Continuity.dll2025-10-29 13:30:56.205NT AUTHORITY\SYSTEM +11241100x800000000000000012112Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.207{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Devices.dll2025-10-29 13:30:56.207NT AUTHORITY\SYSTEM +11241100x800000000000000012113Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.207{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Files.dll2025-10-29 13:30:56.207NT AUTHORITY\SYSTEM +11241100x800000000000000012114Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.207{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Files.ProxyStub.dll2025-10-29 13:30:56.207NT AUTHORITY\SYSTEM +11241100x800000000000000012115Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.207{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Platform.dll2025-10-29 13:30:56.207NT AUTHORITY\SYSTEM +11241100x800000000000000012116Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.207{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Settings.dll2025-10-29 13:30:56.207NT AUTHORITY\SYSTEM +11241100x800000000000000012117Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.207{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Settings.ProxyStub.dll2025-10-29 13:30:56.207NT AUTHORITY\SYSTEM +11241100x800000000000000012118Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.207{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Share.dll2025-10-29 13:30:56.207NT AUTHORITY\SYSTEM +11241100x800000000000000012119Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.209{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Share.ProxyStub.dll2025-10-29 13:30:56.209NT AUTHORITY\SYSTEM +11241100x800000000000000012120Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.209{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Streaming.dll2025-10-29 13:30:56.209NT AUTHORITY\SYSTEM +11241100x800000000000000012121Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.209{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Contracts.Streaming.ProxyStub.dll2025-10-29 13:30:56.209NT AUTHORITY\SYSTEM +11241100x800000000000000012122Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.209{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Core.dll2025-10-29 13:30:56.209NT AUTHORITY\SYSTEM +11241100x800000000000000012123Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.209{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Core.Projection.dll2025-10-29 13:30:56.209NT AUTHORITY\SYSTEM +11241100x800000000000000012124Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.209{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Core.ProxyStub.dll2025-10-29 13:30:56.209NT AUTHORITY\SYSTEM +11241100x800000000000000012125Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.211{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Core.UX.dll2025-10-29 13:30:56.209NT AUTHORITY\SYSTEM +11241100x800000000000000012126Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.211{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Core.WinRT.dll2025-10-29 13:30:56.211NT AUTHORITY\SYSTEM +11241100x800000000000000012127Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.211{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Devices.dll2025-10-29 13:30:56.211NT AUTHORITY\SYSTEM +11241100x800000000000000012128Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.211{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Devices.Protocol.dll2025-10-29 13:30:56.211NT AUTHORITY\SYSTEM +11241100x800000000000000012129Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.213{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.DevKit.ProxyStub.dll2025-10-29 13:30:56.211NT AUTHORITY\SYSTEM +11241100x800000000000000012130Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.213{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Files.dll2025-10-29 13:30:56.213NT AUTHORITY\SYSTEM +11241100x800000000000000012131Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.213{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Files.Protocol.dll2025-10-29 13:30:56.213NT AUTHORITY\SYSTEM +11241100x800000000000000012132Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.213{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Platform.dll2025-10-29 13:30:56.213NT AUTHORITY\SYSTEM +11241100x800000000000000012133Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.213{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Platform.Protocol.dll2025-10-29 13:30:56.213NT AUTHORITY\SYSTEM +11241100x800000000000000012134Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.213{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.RemoteControl.dll2025-10-29 13:30:56.213NT AUTHORITY\SYSTEM +11241100x800000000000000012135Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.214{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.RemoteControl.Protocol.dll2025-10-29 13:30:56.214NT AUTHORITY\SYSTEM +11241100x800000000000000012136Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.214{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.RemoteSnipping.dll2025-10-29 13:30:56.214NT AUTHORITY\SYSTEM +11241100x800000000000000012137Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.214{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.RemoteSnipping.Protocol.dll2025-10-29 13:30:56.214NT AUTHORITY\SYSTEM +11241100x800000000000000012138Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.214{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Settings.dll2025-10-29 13:30:56.214NT AUTHORITY\SYSTEM +11241100x800000000000000012139Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.216{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Share.dll2025-10-29 13:30:56.214NT AUTHORITY\SYSTEM +11241100x800000000000000012140Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.216{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Share.Protocol.dll2025-10-29 13:30:56.216NT AUTHORITY\SYSTEM +11241100x800000000000000012141Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.216{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Streaming.dll2025-10-29 13:30:56.216NT AUTHORITY\SYSTEM +11241100x800000000000000012142Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.216{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Streaming.Projection.dll2025-10-29 13:30:56.216NT AUTHORITY\SYSTEM +11241100x800000000000000012143Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.218{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Streaming.Protocol.dll2025-10-29 13:30:56.218NT AUTHORITY\SYSTEM +11241100x800000000000000012144Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.218{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Streaming.Source.dll2025-10-29 13:30:56.218NT AUTHORITY\SYSTEM +11241100x800000000000000012145Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.218{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDevice.Streaming.WinRT.dll2025-10-29 13:30:56.218NT AUTHORITY\SYSTEM +11241100x800000000000000012146Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.218{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDeviceFilesHost.dll2025-10-29 13:30:56.218NT AUTHORITY\SYSTEM +11241100x800000000000000012147Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:30:56.218{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDeviceFilesHost.exe2025-10-29 13:30:56.218NT AUTHORITY\SYSTEM +11241100x800000000000000012148Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.220{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDeviceService.dll2025-10-29 13:30:56.220NT AUTHORITY\SYSTEM +11241100x800000000000000012149Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:30:56.220{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDeviceService.exe2025-10-29 13:30:56.220NT AUTHORITY\SYSTEM +11241100x800000000000000012150Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.220{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDeviceSettingsHost.dll2025-10-29 13:30:56.220NT AUTHORITY\SYSTEM +11241100x800000000000000012151Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:30:56.220{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDeviceSettingsHost.exe2025-10-29 13:30:56.220NT AUTHORITY\SYSTEM +11241100x800000000000000012152Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.222{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDeviceStreamingHost.dll2025-10-29 13:30:56.222NT AUTHORITY\SYSTEM +11241100x800000000000000012153Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:30:56.222{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\CrossDeviceStreamingHost.exe2025-10-29 13:30:56.222NT AUTHORITY\SYSTEM +11241100x800000000000000012154Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.222{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\LibNanoAPI.Projection.dll2025-10-29 13:30:56.222NT AUTHORITY\SYSTEM +11241100x800000000000000012155Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.224{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\Microsoft.Graphics.Canvas.Interop.dll2025-10-29 13:30:56.222NT AUTHORITY\SYSTEM +11241100x800000000000000012156Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.224{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\Microsoft.InteractiveExperiences.Projection.dll2025-10-29 13:30:56.224NT AUTHORITY\SYSTEM +11241100x800000000000000012157Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.224{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\Microsoft.Windows.ApplicationModel.Resources.Projection.dll2025-10-29 13:30:56.224NT AUTHORITY\SYSTEM +11241100x800000000000000012158Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.224{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\Microsoft.Windows.AppLifecycle.Projection.dll2025-10-29 13:30:56.224NT AUTHORITY\SYSTEM +11241100x800000000000000012159Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.224{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\Microsoft.Windows.SDK.NET.dll2025-10-29 13:30:56.224NT AUTHORITY\SYSTEM +11241100x800000000000000012160Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.224{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\Microsoft.WinUI.dll2025-10-29 13:30:56.224NT AUTHORITY\SYSTEM +11241100x800000000000000012161Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.226{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\SharedUtilities.Controls.dll2025-10-29 13:30:56.224NT AUTHORITY\SYSTEM +11241100x800000000000000012162Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.226{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\SharedUtilities.dll2025-10-29 13:30:56.226NT AUTHORITY\SYSTEM +11241100x800000000000000012163Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.226{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\SharedUtilities.QrCodeGenerator.dll2025-10-29 13:30:56.226NT AUTHORITY\SYSTEM +11241100x800000000000000012164Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.226{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\SharedUtilities.WExp.dll2025-10-29 13:30:56.226NT AUTHORITY\SYSTEM +11241100x800000000000000012165Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.226{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\System.Collections.Concurrent.dll2025-10-29 13:30:56.226NT AUTHORITY\SYSTEM +11241100x800000000000000012166Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.226{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\System.Numerics.Vectors.dll2025-10-29 13:30:56.226NT AUTHORITY\SYSTEM +11241100x800000000000000012167Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.226{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\System.Private.CoreLib.dll2025-10-29 13:30:56.226NT AUTHORITY\SYSTEM +11241100x800000000000000012168Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.229{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\System.Runtime.dll2025-10-29 13:30:56.226NT AUTHORITY\SYSTEM +11241100x800000000000000012169Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.229{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\System.Security.Cryptography.dll2025-10-29 13:30:56.229NT AUTHORITY\SYSTEM +11241100x800000000000000012170Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.229{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\WindowsUdk.dll2025-10-29 13:30:56.229NT AUTHORITY\SYSTEM +11241100x800000000000000012171Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.229{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\WinRT.Runtime.dll2025-10-29 13:30:56.229NT AUTHORITY\SYSTEM +11241100x800000000000000012172Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.229{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.OnboardingSDK.dll2025-10-29 13:30:56.229NT AUTHORITY\SYSTEM +11241100x800000000000000012173Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.229{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.Auth.dll2025-10-29 13:30:56.229NT AUTHORITY\SYSTEM +11241100x800000000000000012174Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.230{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.Bluetooth.dll2025-10-29 13:30:56.229NT AUTHORITY\SYSTEM +11241100x800000000000000012175Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.230{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.Common.dll2025-10-29 13:30:56.230NT AUTHORITY\SYSTEM +11241100x800000000000000012176Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.230{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.dll2025-10-29 13:30:56.230NT AUTHORITY\SYSTEM +11241100x800000000000000012177Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.230{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.Onboarding.dll2025-10-29 13:30:56.230NT AUTHORITY\SYSTEM +11241100x800000000000000012178Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.230{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.PlatformSdk.dll2025-10-29 13:30:56.230NT AUTHORITY\SYSTEM +11241100x800000000000000012179Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.230{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.PlatformSdk.Protocol.dll2025-10-29 13:30:56.230NT AUTHORITY\SYSTEM +11241100x800000000000000012180Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.230{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.ServicesClient.dll2025-10-29 13:30:56.230NT AUTHORITY\SYSTEM +11241100x800000000000000012181Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:30:56.232{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\YourPhone.YPP.Shims.dll2025-10-29 13:30:56.232NT AUTHORITY\SYSTEM +154100x800000000000000012182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:31:01.304{8223a6b9-1715-6902-be02-000000002b00}440C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /ClearActiveNotifications /CV x2sHkZhQTUqT3y32.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +11241100x800000000000000012183Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:37.646{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{BF144E4F-A494-4E6C-B6B1-AA08D46C5D47}\ssshim.dll2025-10-29 13:31:37.646NT AUTHORITY\SYSTEM +11241100x800000000000000012184Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.019{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateCompression.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012185Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.027{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\featurestaging.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012186Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.027{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\updatedeploy.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012187Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.033{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\AppxDeviceInventory.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012188Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.043{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\TurboStack.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012189Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.043{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UAOneSettings.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012190Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.059{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\wcp.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012191Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.090{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\MsixPackageProvisioner.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012192Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.090{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\dpx.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012193Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.106{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\WinREAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012194Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.106{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\ReserveManager.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012195Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.106{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\Mitigation.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000012196Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:38.122{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +13241300x800000000000000012197Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:31:40.216{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\EventsCreateSessionNT AUTHORITY\SYSTEM +11241100x800000000000000012198Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:42.592{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{97FF2C68-D593-4A40-BA77-A4EEFF9942B6}\ssshim.dll2025-10-29 13:31:42.592NT AUTHORITY\SYSTEM +13241300x800000000000000012199Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:31:46.961{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\Events(Empty)NT AUTHORITY\SYSTEM +11241100x800000000000000012200Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:48.509{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{84485E27-8CF1-4406-A708-6007B4AFA951}\ssshim.dll2025-10-29 13:31:48.507NT AUTHORITY\SYSTEM +11241100x800000000000000012201Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:49.639{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\PackagedCom\CrossDevice.Contracts.Settings.ProxyStub.dll2025-10-29 13:31:49.639NT AUTHORITY\SYSTEM +11241100x800000000000000012202Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:49.643{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\PackagedCom\CrossDevice.Contracts.Streaming.ProxyStub.dll2025-10-29 13:31:49.643NT AUTHORITY\SYSTEM +11241100x800000000000000012203Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:49.646{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\PackagedCom\CrossDevice.Contracts.Share.ProxyStub.dll2025-10-29 13:31:49.644NT AUTHORITY\SYSTEM +11241100x800000000000000012204Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:49.648{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\PackagedCom\CrossDevice.Core.ProxyStub.dll2025-10-29 13:31:49.648NT AUTHORITY\SYSTEM +11241100x800000000000000012205Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:49.653{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25092.33.0_x64__cw5n1h2txyewy\PackagedCom\CrossDevice.Contracts.Files.ProxyStub.dll2025-10-29 13:31:49.653NT AUTHORITY\SYSTEM +11241100x800000000000000012206Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:50.023{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D5946C07-D147-4E49-937A-E135534216FB}\ssshim.dll2025-10-29 13:31:50.023NT AUTHORITY\SYSTEM +11241100x800000000000000012207Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:51.426{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{DB18ECF1-4842-4595-A645-92712E2EEE32}\ssshim.dll2025-10-29 13:31:51.426NT AUTHORITY\SYSTEM +11241100x800000000000000012208Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:52.975{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{98399DD0-F475-4089-9DFC-95BB29F8D424}\ssshim.dll2025-10-29 13:31:52.975NT AUTHORITY\SYSTEM +11241100x800000000000000012209Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:54.310{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{476BCC14-4AF5-4A93-B831-83A872846755}\ssshim.dll2025-10-29 13:31:54.310NT AUTHORITY\SYSTEM +11241100x800000000000000012210Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:55.388{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{FA6FD72C-3DB3-4A1B-A283-727C206AD04D}\ssshim.dll2025-10-29 13:31:55.388NT AUTHORITY\SYSTEM +11241100x800000000000000012211Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.744{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\CoreMessagingXP.dll2025-10-29 13:31:57.744NT AUTHORITY\SYSTEM +11241100x800000000000000012212Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.748{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\dcompi.dll2025-10-29 13:31:57.748NT AUTHORITY\SYSTEM +11241100x800000000000000012213Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:31:57.768{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\DeploymentAgent.exe2025-10-29 13:31:57.768NT AUTHORITY\SYSTEM +11241100x800000000000000012214Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.768{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\dwmcorei.dll2025-10-29 13:31:57.768NT AUTHORITY\SYSTEM +11241100x800000000000000012215Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.770{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\DwmSceneI.dll2025-10-29 13:31:57.770NT AUTHORITY\SYSTEM +11241100x800000000000000012216Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.824{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\marshal.dll2025-10-29 13:31:57.824NT AUTHORITY\SYSTEM +11241100x800000000000000012217Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.826{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.DirectManipulation.dll2025-10-29 13:31:57.826NT AUTHORITY\SYSTEM +11241100x800000000000000012218Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.826{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.Graphics.Display.dll2025-10-29 13:31:57.826NT AUTHORITY\SYSTEM +11241100x800000000000000012219Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.828{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.InputStateManager.dll2025-10-29 13:31:57.828NT AUTHORITY\SYSTEM +11241100x800000000000000012220Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.828{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll2025-10-29 13:31:57.828NT AUTHORITY\SYSTEM +11241100x800000000000000012221Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.828{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.UI.Composition.OSSupport.dll2025-10-29 13:31:57.828NT AUTHORITY\SYSTEM +11241100x800000000000000012222Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.828{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.UI.dll2025-10-29 13:31:57.828NT AUTHORITY\SYSTEM +11241100x800000000000000012223Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.830{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.UI.Input.dll2025-10-29 13:31:57.830NT AUTHORITY\SYSTEM +11241100x800000000000000012224Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.830{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll2025-10-29 13:31:57.830NT AUTHORITY\SYSTEM +11241100x800000000000000012225Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.830{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.UI.Windowing.dll2025-10-29 13:31:57.830NT AUTHORITY\SYSTEM +11241100x800000000000000012226Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.832{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll2025-10-29 13:31:57.832NT AUTHORITY\SYSTEM +11241100x800000000000000012227Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.832{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.ui.xaml.dll2025-10-29 13:31:57.832NT AUTHORITY\SYSTEM +11241100x800000000000000012228Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.834{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.UI.Xaml.Internal.dll2025-10-29 13:31:57.834NT AUTHORITY\SYSTEM +11241100x800000000000000012229Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.UI.Xaml.Phone.dll2025-10-29 13:31:57.845NT AUTHORITY\SYSTEM +11241100x800000000000000012230Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.859{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.ui.xaml.resources.19h1.dll2025-10-29 13:31:57.847NT AUTHORITY\SYSTEM +11241100x800000000000000012231Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.861{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.ui.xaml.resources.common.dll2025-10-29 13:31:57.859NT AUTHORITY\SYSTEM +11241100x800000000000000012232Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.863{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll2025-10-29 13:31:57.863NT AUTHORITY\SYSTEM +11241100x800000000000000012233Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.875{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.dll2025-10-29 13:31:57.875NT AUTHORITY\SYSTEM +11241100x800000000000000012234Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.875{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll2025-10-29 13:31:57.875NT AUTHORITY\SYSTEM +11241100x800000000000000012235Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.879{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\MRM.dll2025-10-29 13:31:57.879NT AUTHORITY\SYSTEM +11241100x800000000000000012236Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.893{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\PushNotificationsLongRunningTask.ProxyStub.dll2025-10-29 13:31:57.893NT AUTHORITY\SYSTEM +11241100x800000000000000012237Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:31:57.895{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\RestartAgent.exe2025-10-29 13:31:57.895NT AUTHORITY\SYSTEM +11241100x800000000000000012238Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.919{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll2025-10-29 13:31:57.919NT AUTHORITY\SYSTEM +11241100x800000000000000012239Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.919{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll2025-10-29 13:31:57.919NT AUTHORITY\SYSTEM +11241100x800000000000000012240Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.919{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll2025-10-29 13:31:57.919NT AUTHORITY\SYSTEM +11241100x800000000000000012241Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.921{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\WinUIEdit.dll2025-10-29 13:31:57.921NT AUTHORITY\SYSTEM +11241100x800000000000000012242Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:57.921{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\wuceffectsi.dll2025-10-29 13:31:57.921NT AUTHORITY\SYSTEM +11241100x800000000000000012243Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:58.968{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{08AB403C-5B01-4EA3-8904-13A8D1FFE523}\ssshim.dll2025-10-29 13:31:58.968NT AUTHORITY\SYSTEM +11241100x800000000000000012244Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:31:59.946{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{05A871D0-A3E4-4B8D-9798-A3C0C3E2FD34}\ssshim.dll2025-10-29 13:31:59.946NT AUTHORITY\SYSTEM +154100x800000000000000012245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:32:05.270{8223a6b9-1755-6902-c002-000000002b00}12080C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" uninstall-manifest "C:\WINDOWS\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\EventLog-Instrumentation.man" /unicode:trueC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +12241200x800000000000000012246Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:32:05.437{8223a6b9-1755-6902-c002-000000002b00}12080C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/OperationalNT AUTHORITY\SYSTEM +154100x800000000000000012247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:32:05.464{8223a6b9-1755-6902-c202-000000002b00}7228C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" install-manifest "C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\EventLog-Instrumentation.man" /resourceFilePath:"C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll" /messageFilePath:"C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll" /unicode:trueC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +13241300x800000000000000012248Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:05.616{8223a6b9-1755-6902-c202-000000002b00}7228C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\OwningPublisher{43833e12-078d-4d7d-8aaf-ae8c8520f18c}NT AUTHORITY\SYSTEM +13241300x800000000000000012249Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:05.616{8223a6b9-1755-6902-c202-000000002b00}7228C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000012250Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:05.616{8223a6b9-1755-6902-c202-000000002b00}7228C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\IsolationDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000012251Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:05.616{8223a6b9-1755-6902-c202-000000002b00}7228C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\ChannelAccessO:BAG:SYD:(A;;0x2;;;S-1-15-2-1)(A;;0x2;;;S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x800000000000000012252Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:05.616{8223a6b9-1755-6902-c202-000000002b00}7228C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\MaxSizeDWORD (0x00500000)NT AUTHORITY\SYSTEM +13241300x800000000000000012253Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:05.616{8223a6b9-1755-6902-c202-000000002b00}7228C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000012254Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:05.616{8223a6b9-1755-6902-c202-000000002b00}7228C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +11241100x800000000000000012255Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.652{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\CoreMessagingXP.dll2025-10-29 13:32:06.652NT AUTHORITY\SYSTEM +11241100x800000000000000012256Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.656{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\dcompi.dll2025-10-29 13:32:06.656NT AUTHORITY\SYSTEM +11241100x800000000000000012257Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:32:06.658{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\DeploymentAgent.exe2025-10-29 13:32:06.658NT AUTHORITY\SYSTEM +11241100x800000000000000012258Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.658{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\dwmcorei.dll2025-10-29 13:32:06.658NT AUTHORITY\SYSTEM +11241100x800000000000000012259Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.658{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\DwmSceneI.dll2025-10-29 13:32:06.658NT AUTHORITY\SYSTEM +11241100x800000000000000012260Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.710{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\marshal.dll2025-10-29 13:32:06.710NT AUTHORITY\SYSTEM +11241100x800000000000000012261Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.710{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.DirectManipulation.dll2025-10-29 13:32:06.710NT AUTHORITY\SYSTEM +11241100x800000000000000012262Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.712{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.Graphics.Display.dll2025-10-29 13:32:06.712NT AUTHORITY\SYSTEM +11241100x800000000000000012263Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.712{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.InputStateManager.dll2025-10-29 13:32:06.712NT AUTHORITY\SYSTEM +11241100x800000000000000012264Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.714{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll2025-10-29 13:32:06.712NT AUTHORITY\SYSTEM +11241100x800000000000000012265Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.714{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.UI.Composition.OSSupport.dll2025-10-29 13:32:06.714NT AUTHORITY\SYSTEM +11241100x800000000000000012266Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.714{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.UI.dll2025-10-29 13:32:06.714NT AUTHORITY\SYSTEM +11241100x800000000000000012267Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.UI.Input.dll2025-10-29 13:32:06.714NT AUTHORITY\SYSTEM +11241100x800000000000000012268Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll2025-10-29 13:32:06.716NT AUTHORITY\SYSTEM +11241100x800000000000000012269Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.UI.Windowing.dll2025-10-29 13:32:06.716NT AUTHORITY\SYSTEM +11241100x800000000000000012270Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll2025-10-29 13:32:06.716NT AUTHORITY\SYSTEM +11241100x800000000000000012271Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.ui.xaml.dll2025-10-29 13:32:06.718NT AUTHORITY\SYSTEM +11241100x800000000000000012272Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.Internal.dll2025-10-29 13:32:06.718NT AUTHORITY\SYSTEM +11241100x800000000000000012273Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.Phone.dll2025-10-29 13:32:06.718NT AUTHORITY\SYSTEM +11241100x800000000000000012274Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.ui.xaml.resources.19h1.dll2025-10-29 13:32:06.718NT AUTHORITY\SYSTEM +11241100x800000000000000012275Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.ui.xaml.resources.common.dll2025-10-29 13:32:06.720NT AUTHORITY\SYSTEM +11241100x800000000000000012276Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll2025-10-29 13:32:06.720NT AUTHORITY\SYSTEM +11241100x800000000000000012277Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.dll2025-10-29 13:32:06.720NT AUTHORITY\SYSTEM +11241100x800000000000000012278Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll2025-10-29 13:32:06.720NT AUTHORITY\SYSTEM +11241100x800000000000000012279Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.724{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\MRM.dll2025-10-29 13:32:06.724NT AUTHORITY\SYSTEM +11241100x800000000000000012280Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.740{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\PushNotificationsLongRunningTask.ProxyStub.dll2025-10-29 13:32:06.740NT AUTHORITY\SYSTEM +11241100x800000000000000012281Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:32:06.742{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\RestartAgent.exe2025-10-29 13:32:06.740NT AUTHORITY\SYSTEM +11241100x800000000000000012282Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.768{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll2025-10-29 13:32:06.768NT AUTHORITY\SYSTEM +11241100x800000000000000012283Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.768{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll2025-10-29 13:32:06.768NT AUTHORITY\SYSTEM +11241100x800000000000000012284Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.770{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll2025-10-29 13:32:06.768NT AUTHORITY\SYSTEM +11241100x800000000000000012285Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.770{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\WinUIEdit.dll2025-10-29 13:32:06.770NT AUTHORITY\SYSTEM +11241100x800000000000000012286Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:06.770{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\wuceffectsi.dll2025-10-29 13:32:06.770NT AUTHORITY\SYSTEM +11241100x800000000000000012287Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:07.381{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{E171C959-4143-4767-BB4B-8A0509EA2017}\ssshim.dll2025-10-29 13:32:07.381NT AUTHORITY\SYSTEM +11241100x800000000000000012288Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:08.227{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{95B408D0-8CCE-4F72-B044-5A0621618041}\ssshim.dll2025-10-29 13:32:08.227NT AUTHORITY\SYSTEM +13241300x800000000000000012289Microsoft-Windows-Sysmon/Operationalsoc101win11T1060,RunKeySetValue2025-10-29 13:32:15.436{8223a6b9-14f8-6902-ef01-000000002b00}8788C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exe" --msedgewebview --delete-old-versions --system-level --verbose-logging --on-logonNT AUTHORITY\SYSTEM +154100x800000000000000012290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:32:15.531{8223a6b9-175f-6902-c402-000000002b00}1916C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" uninstall-manifest "C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x86__8wekyb3d8bbwe\EventLog-Instrumentation.man" /unicode:trueC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +12241200x800000000000000012291Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:32:15.624{8223a6b9-175f-6902-c402-000000002b00}1916C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/OperationalNT AUTHORITY\SYSTEM +154100x800000000000000012292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:32:15.651{8223a6b9-175f-6902-c602-000000002b00}9940C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" install-manifest "C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\EventLog-Instrumentation.man" /resourceFilePath:"C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll" /messageFilePath:"C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll" /unicode:trueC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +13241300x800000000000000012293Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:15.753{8223a6b9-175f-6902-c602-000000002b00}9940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\OwningPublisher{43833e12-078d-4d7d-8aaf-ae8c8520f18c}NT AUTHORITY\SYSTEM +13241300x800000000000000012294Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:15.753{8223a6b9-175f-6902-c602-000000002b00}9940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000012295Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:15.753{8223a6b9-175f-6902-c602-000000002b00}9940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\IsolationDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000012296Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:15.753{8223a6b9-175f-6902-c602-000000002b00}9940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\ChannelAccessO:BAG:SYD:(A;;0x2;;;S-1-15-2-1)(A;;0x2;;;S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x800000000000000012297Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:15.753{8223a6b9-175f-6902-c602-000000002b00}9940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\MaxSizeDWORD (0x00500000)NT AUTHORITY\SYSTEM +13241300x800000000000000012298Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:15.753{8223a6b9-175f-6902-c602-000000002b00}9940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000012299Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:32:15.753{8223a6b9-175f-6902-c602-000000002b00}9940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +11241100x800000000000000012300Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.396{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\CoreMessagingXP.dll2025-10-29 13:32:16.396NT AUTHORITY\SYSTEM +11241100x800000000000000012301Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.400{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\dcompi.dll2025-10-29 13:32:16.400NT AUTHORITY\SYSTEM +11241100x800000000000000012302Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:32:16.402{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\DeploymentAgent.exe2025-10-29 13:32:16.402NT AUTHORITY\SYSTEM +11241100x800000000000000012303Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.402{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\DirectML.dll2025-10-29 13:32:16.402NT AUTHORITY\SYSTEM +11241100x800000000000000012304Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.402{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\dwmcorei.dll2025-10-29 13:32:16.402NT AUTHORITY\SYSTEM +11241100x800000000000000012305Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.404{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\DwmSceneI.dll2025-10-29 13:32:16.402NT AUTHORITY\SYSTEM +11241100x800000000000000012306Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.404{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\DWriteCore.dll2025-10-29 13:32:16.404NT AUTHORITY\SYSTEM +11241100x800000000000000012307Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.446{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\marshal.dll2025-10-29 13:32:16.446NT AUTHORITY\SYSTEM +11241100x800000000000000012308Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.450{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.DirectManipulation.dll2025-10-29 13:32:16.448NT AUTHORITY\SYSTEM +11241100x800000000000000012309Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.450{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Graphics.Display.dll2025-10-29 13:32:16.450NT AUTHORITY\SYSTEM +11241100x800000000000000012310Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.450{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Graphics.Imaging.dll2025-10-29 13:32:16.450NT AUTHORITY\SYSTEM +11241100x800000000000000012311Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.InputStateManager.dll2025-10-29 13:32:16.456NT AUTHORITY\SYSTEM +11241100x800000000000000012312Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll2025-10-29 13:32:16.458NT AUTHORITY\SYSTEM +11241100x800000000000000012313Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.Composition.OSSupport.dll2025-10-29 13:32:16.458NT AUTHORITY\SYSTEM +11241100x800000000000000012314Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.Designer.dll2025-10-29 13:32:16.458NT AUTHORITY\SYSTEM +11241100x800000000000000012315Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.460{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.dll2025-10-29 13:32:16.458NT AUTHORITY\SYSTEM +11241100x800000000000000012316Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.460{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.Input.dll2025-10-29 13:32:16.460NT AUTHORITY\SYSTEM +11241100x800000000000000012317Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll2025-10-29 13:32:16.460NT AUTHORITY\SYSTEM +11241100x800000000000000012318Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.Windowing.dll2025-10-29 13:32:16.462NT AUTHORITY\SYSTEM +11241100x800000000000000012319Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll2025-10-29 13:32:16.462NT AUTHORITY\SYSTEM +11241100x800000000000000012320Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.ui.xaml.dll2025-10-29 13:32:16.462NT AUTHORITY\SYSTEM +11241100x800000000000000012321Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.Internal.dll2025-10-29 13:32:16.464NT AUTHORITY\SYSTEM +11241100x800000000000000012322Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.Phone.dll2025-10-29 13:32:16.464NT AUTHORITY\SYSTEM +11241100x800000000000000012323Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.ui.xaml.resources.19h1.dll2025-10-29 13:32:16.464NT AUTHORITY\SYSTEM +11241100x800000000000000012324Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.ui.xaml.resources.common.dll2025-10-29 13:32:16.464NT AUTHORITY\SYSTEM +11241100x800000000000000012325Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.466{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.ContentSafety.dll2025-10-29 13:32:16.466NT AUTHORITY\SYSTEM +11241100x800000000000000012326Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.470{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Imaging.dll2025-10-29 13:32:16.470NT AUTHORITY\SYSTEM +11241100x800000000000000012327Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.470{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.MachineLearning.dll2025-10-29 13:32:16.470NT AUTHORITY\SYSTEM +11241100x800000000000000012328Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.470{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Text.dll2025-10-29 13:32:16.470NT AUTHORITY\SYSTEM +11241100x800000000000000012329Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.474{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll2025-10-29 13:32:16.474NT AUTHORITY\SYSTEM +11241100x800000000000000012330Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.dll2025-10-29 13:32:16.487NT AUTHORITY\SYSTEM +11241100x800000000000000012331Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Workloads.dll2025-10-29 13:32:16.487NT AUTHORITY\SYSTEM +11241100x800000000000000012332Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Workloads.Resources.dll2025-10-29 13:32:16.489NT AUTHORITY\SYSTEM +11241100x800000000000000012333Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Workloads.Resources_ec.dll2025-10-29 13:32:16.489NT AUTHORITY\SYSTEM +11241100x800000000000000012334Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.dll2025-10-29 13:32:16.489NT AUTHORITY\SYSTEM +11241100x800000000000000012335Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll2025-10-29 13:32:16.489NT AUTHORITY\SYSTEM +11241100x800000000000000012336Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\MRM.dll2025-10-29 13:32:16.495NT AUTHORITY\SYSTEM +11241100x800000000000000012337Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.519{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\NpuDetect\NPUDetect.dll2025-10-29 13:32:16.519NT AUTHORITY\SYSTEM +11241100x800000000000000012338Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.519{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\onnxruntime.dll2025-10-29 13:32:16.519NT AUTHORITY\SYSTEM +11241100x800000000000000012339Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.521{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\onnxruntime_providers_shared.dll2025-10-29 13:32:16.519NT AUTHORITY\SYSTEM +11241100x800000000000000012340Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.529{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\PushNotificationsLongRunningTask.ProxyStub.dll2025-10-29 13:32:16.527NT AUTHORITY\SYSTEM +11241100x800000000000000012341Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:32:16.531{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\RestartAgent.exe2025-10-29 13:32:16.531NT AUTHORITY\SYSTEM +11241100x800000000000000012342Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.533{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\SessionHandleIPCProxyStub.dll2025-10-29 13:32:16.533NT AUTHORITY\SYSTEM +11241100x800000000000000012343Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll2025-10-29 13:32:16.555NT AUTHORITY\SYSTEM +11241100x800000000000000012344Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.557{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll2025-10-29 13:32:16.557NT AUTHORITY\SYSTEM +11241100x800000000000000012345Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.557{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll2025-10-29 13:32:16.557NT AUTHORITY\SYSTEM +11241100x800000000000000012346Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.557{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\WinUIEdit.dll2025-10-29 13:32:16.557NT AUTHORITY\SYSTEM +11241100x800000000000000012347Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:32:16.577{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\wuceffectsi.dll2025-10-29 13:32:16.577NT AUTHORITY\SYSTEM +154100x800000000000000012348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:32:58.133{8223a6b9-178a-6902-c802-000000002b00}960C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe1407.2506.11012.0Windows UpdateMicrosoft® Windows® Operating SystemMicrosoft Corporationwuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 7fea9080-e2ae-4f64-a72f-f8b2d77269fc /RunHandlerComServerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=EA98A3ECEF7902605B361FC16D3D8081,SHA256=9C685412986F3939E7A84E62B09E319F4FA5B5C2B7006DE3441F6D4BB0CAC02D,IMPHASH=5FB5459A8931EA77DFAA79FC37CD9756{8223a6b9-1317-6902-3f00-000000002b00}3008C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauservNT AUTHORITY\SYSTEM +154100x800000000000000012349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:33:00.003{8223a6b9-178c-6902-ca02-000000002b00}904C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /ClearActiveNotifications /CV x2sHkZhQTUqT3y32.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +11241100x800000000000000012350Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:33:17.511{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{B12FCDAD-5425-405F-AF6B-C7921DF04044}\ssshim.dll2025-10-29 13:33:17.511NT AUTHORITY\SYSTEM +11241100x800000000000000012351Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:33:18.331{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{1FEC6F74-5D5D-4450-A1C9-705BE2C81FCD}\ssshim.dll2025-10-29 13:33:18.331NT AUTHORITY\SYSTEM +11241100x800000000000000012352Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:33:19.133{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{DFEE3ABB-3494-42D5-9201-A104717503B2}\ssshim.dll2025-10-29 13:33:19.133NT AUTHORITY\SYSTEM +154100x800000000000000012353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:33:56.037{8223a6b9-17c4-6902-cb02-000000002b00}11260C:\Windows\System32\backgroundTaskHost.exe10.0.26100.1 (WinBuild.160101.0800)Background Task HostMicrosoft® Windows® Operating SystemMicrosoft CorporationbackgroundTaskHost.exe"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXapskvk16gk8da8kch5g4qxh42vxccved.mcaC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25082.136.0_x64__8wekyb3d8bbwe\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=8BDE0AE40012BD639FC60E494CC32356,SHA256=B7D2C17E0038945AA4B72AE7A89E54D29B04CCC0FEB62DF5C9B7B67DE43C2530,IMPHASH=DC601E2593053A84A6989DE251407AA7{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000012354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:14.688{8223a6b9-17d6-6902-cc02-000000002b00}10216C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000012355Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:18.368{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{2D1D6F77-0CD5-49BB-A4F4-CAEE98667557}\ssshim.dll2025-10-29 13:34:18.368NT AUTHORITY\SYSTEM +11241100x800000000000000012356Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:19.166{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{EE45737E-0F82-4B11-851B-92383241130D}\ssshim.dll2025-10-29 13:34:19.166NT AUTHORITY\SYSTEM +11241100x800000000000000012357Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:20.053{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{71919C14-3A03-45EF-AB3F-12191854C1CE}\ssshim.dll2025-10-29 13:34:20.053NT AUTHORITY\SYSTEM +11241100x800000000000000012358Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:20.787{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{9A60AB5B-A4C5-4526-BF1B-4D72E5A536F2}\ssshim.dll2025-10-29 13:34:20.787NT AUTHORITY\SYSTEM +154100x800000000000000012359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:30.085{8223a6b9-17e6-6902-cd02-000000002b00}10536C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" uninstall-manifest "C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.652.1806.0_x64__8wekyb3d8bbwe\EventLog-Instrumentation.man" /unicode:trueC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +12241200x800000000000000012360Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:34:30.236{8223a6b9-17e6-6902-cd02-000000002b00}10536C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/OperationalNT AUTHORITY\SYSTEM +154100x800000000000000012361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:30.259{8223a6b9-17e6-6902-cf02-000000002b00}3940C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" install-manifest "C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\EventLog-Instrumentation.man" /resourceFilePath:"C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll" /messageFilePath:"C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll" /unicode:trueC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +13241300x800000000000000012362Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:30.379{8223a6b9-17e6-6902-cf02-000000002b00}3940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\OwningPublisher{43833e12-078d-4d7d-8aaf-ae8c8520f18c}NT AUTHORITY\SYSTEM +13241300x800000000000000012363Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:30.379{8223a6b9-17e6-6902-cf02-000000002b00}3940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000012364Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:30.379{8223a6b9-17e6-6902-cf02-000000002b00}3940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\IsolationDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000012365Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:30.379{8223a6b9-17e6-6902-cf02-000000002b00}3940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\ChannelAccessO:BAG:SYD:(A;;0x2;;;S-1-15-2-1)(A;;0x2;;;S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x800000000000000012366Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:30.379{8223a6b9-17e6-6902-cf02-000000002b00}3940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\MaxSizeDWORD (0x00500000)NT AUTHORITY\SYSTEM +13241300x800000000000000012367Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:30.379{8223a6b9-17e6-6902-cf02-000000002b00}3940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000012368Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:30.379{8223a6b9-17e6-6902-cf02-000000002b00}3940C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +11241100x800000000000000012369Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.130{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\CoreMessagingXP.dll2025-10-29 13:34:31.130NT AUTHORITY\SYSTEM +11241100x800000000000000012370Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.132{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\dcompi.dll2025-10-29 13:34:31.132NT AUTHORITY\SYSTEM +11241100x800000000000000012371Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:31.134{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\DeploymentAgent.exe2025-10-29 13:34:31.134NT AUTHORITY\SYSTEM +11241100x800000000000000012372Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.136{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\dwmcorei.dll2025-10-29 13:34:31.134NT AUTHORITY\SYSTEM +11241100x800000000000000012373Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.136{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\DwmSceneI.dll2025-10-29 13:34:31.136NT AUTHORITY\SYSTEM +11241100x800000000000000012374Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.136{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\DWriteCore.dll2025-10-29 13:34:31.136NT AUTHORITY\SYSTEM +11241100x800000000000000012375Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.174{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\marshal.dll2025-10-29 13:34:31.174NT AUTHORITY\SYSTEM +11241100x800000000000000012376Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.174{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.DirectManipulation.dll2025-10-29 13:34:31.174NT AUTHORITY\SYSTEM +11241100x800000000000000012377Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.176{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.Graphics.Display.dll2025-10-29 13:34:31.176NT AUTHORITY\SYSTEM +11241100x800000000000000012378Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.176{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.InputStateManager.dll2025-10-29 13:34:31.176NT AUTHORITY\SYSTEM +11241100x800000000000000012379Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.176{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll2025-10-29 13:34:31.176NT AUTHORITY\SYSTEM +11241100x800000000000000012380Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.176{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.Composition.OSSupport.dll2025-10-29 13:34:31.176NT AUTHORITY\SYSTEM +11241100x800000000000000012381Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.192{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.Designer.dll2025-10-29 13:34:31.176NT AUTHORITY\SYSTEM +11241100x800000000000000012382Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.192{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.dll2025-10-29 13:34:31.192NT AUTHORITY\SYSTEM +11241100x800000000000000012383Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.194{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.Input.dll2025-10-29 13:34:31.194NT AUTHORITY\SYSTEM +11241100x800000000000000012384Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.194{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll2025-10-29 13:34:31.194NT AUTHORITY\SYSTEM +11241100x800000000000000012385Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.194{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.Windowing.dll2025-10-29 13:34:31.194NT AUTHORITY\SYSTEM +11241100x800000000000000012386Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.196{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll2025-10-29 13:34:31.196NT AUTHORITY\SYSTEM +11241100x800000000000000012387Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.196{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.ui.xaml.dll2025-10-29 13:34:31.196NT AUTHORITY\SYSTEM +11241100x800000000000000012388Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.196{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.Xaml.Internal.dll2025-10-29 13:34:31.196NT AUTHORITY\SYSTEM +11241100x800000000000000012389Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.196{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.UI.Xaml.Phone.dll2025-10-29 13:34:31.196NT AUTHORITY\SYSTEM +11241100x800000000000000012390Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.196{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.ui.xaml.resources.19h1.dll2025-10-29 13:34:31.196NT AUTHORITY\SYSTEM +11241100x800000000000000012391Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.196{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.ui.xaml.resources.common.dll2025-10-29 13:34:31.196NT AUTHORITY\SYSTEM +11241100x800000000000000012392Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.198{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll2025-10-29 13:34:31.198NT AUTHORITY\SYSTEM +11241100x800000000000000012393Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.198{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.Windows.Widgets.dll2025-10-29 13:34:31.198NT AUTHORITY\SYSTEM +11241100x800000000000000012394Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.198{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.dll2025-10-29 13:34:31.198NT AUTHORITY\SYSTEM +11241100x800000000000000012395Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.198{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll2025-10-29 13:34:31.198NT AUTHORITY\SYSTEM +11241100x800000000000000012396Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.202{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\MRM.dll2025-10-29 13:34:31.202NT AUTHORITY\SYSTEM +11241100x800000000000000012397Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.212{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\PushNotificationsLongRunningTask.ProxyStub.dll2025-10-29 13:34:31.212NT AUTHORITY\SYSTEM +11241100x800000000000000012398Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:31.214{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\RestartAgent.exe2025-10-29 13:34:31.214NT AUTHORITY\SYSTEM +11241100x800000000000000012399Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.236{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll2025-10-29 13:34:31.236NT AUTHORITY\SYSTEM +11241100x800000000000000012400Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.236{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll2025-10-29 13:34:31.236NT AUTHORITY\SYSTEM +11241100x800000000000000012401Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.236{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll2025-10-29 13:34:31.236NT AUTHORITY\SYSTEM +11241100x800000000000000012402Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.236{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\WinUIEdit.dll2025-10-29 13:34:31.236NT AUTHORITY\SYSTEM +11241100x800000000000000012403Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.238{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\wuceffectsi.dll2025-10-29 13:34:31.236NT AUTHORITY\SYSTEM +11241100x800000000000000012404Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:31.363{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{82CDA888-A56D-40B5-B03A-A1718C639340}\ssshim.dll2025-10-29 13:34:31.363NT AUTHORITY\SYSTEM +11241100x800000000000000012405Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:32.063{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{C93C69FB-0D53-4705-BF72-9C9900CB54BF}\ssshim.dll2025-10-29 13:34:32.063NT AUTHORITY\SYSTEM +11241100x800000000000000012406Microsoft-Windows-Sysmon/Operationalsoc101win11T10532025-10-29 13:34:34.592{8223a6b9-1316-6902-1c00-000000002b00}1588C:\WINDOWS\system32\svchost.exeC:\Windows\System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification2024-11-11 18:43:45.093NT AUTHORITY\SYSTEM +154100x800000000000000012407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:34.584{8223a6b9-17ea-6902-d102-000000002b00}7480C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe4.18.25090.3009 (eca5bedb954af928bf12cba51015d5b3e0195e2e)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivilegesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4A97718C3D21C275DF1DF85BF7F758B7,SHA256=3FD551FC5995EC5985573B2F5DFAEF40316685F75AC3D9FB0EDC97A31AE7C3EE,IMPHASH=7902D3C560F5DB06F26CF34464340E07{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +11241100x800000000000000012408Microsoft-Windows-Sysmon/Operationalsoc101win11T10532025-10-29 13:34:34.627{8223a6b9-1316-6902-1c00-000000002b00}1588C:\WINDOWS\system32\svchost.exeC:\Windows\System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance2024-11-11 18:43:44.932NT AUTHORITY\SYSTEM +11241100x800000000000000012409Microsoft-Windows-Sysmon/Operationalsoc101win11T10532025-10-29 13:34:34.665{8223a6b9-1316-6902-1c00-000000002b00}1588C:\WINDOWS\system32\svchost.exeC:\Windows\System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup2024-11-11 18:43:45.161NT AUTHORITY\SYSTEM +11241100x800000000000000012410Microsoft-Windows-Sysmon/Operationalsoc101win11T10532025-10-29 13:34:34.709{8223a6b9-1316-6902-1c00-000000002b00}1588C:\WINDOWS\system32\svchost.exeC:\Windows\System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan2024-11-11 18:43:45.246NT AUTHORITY\SYSTEM +154100x800000000000000012411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:34.783{8223a6b9-17ea-6902-d302-000000002b00}9852C:\Windows\System32\smartscreen.exe10.0.26100.4652 (WinBuild.160101.0800)Windows Defender SmartScreenMicrosoft® Windows® Operating SystemMicrosoft Corporationsmartscreen.exeC:\Windows\System32\smartscreen.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4B9FD8FEFBA636B66F81E0CDBD12B3DA,SHA256=86530447A3E2B502FE2AC164434B13137E5505A86743A96A091EC18A9377D9D9,IMPHASH=C84171DF6E7F087EA4E625CCCE2AB167{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000012412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:34.818{8223a6b9-17ea-6902-d402-000000002b00}1712C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe4.18.25090.3009 (eca5bedb954af928bf12cba51015d5b3e0195e2e)Microsoft Malware Protection Command Line UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationMpCmdRun.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe" SignaturesUpdateService -ScheduleJob -UnmanagedUpdateC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4A97718C3D21C275DF1DF85BF7F758B7,SHA256=3FD551FC5995EC5985573B2F5DFAEF40316685F75AC3D9FB0EDC97A31AE7C3EE,IMPHASH=7902D3C560F5DB06F26CF34464340E07{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe"NT AUTHORITY\SYSTEM +13241300x800000000000000012413Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 13:34:35.212{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpcmdrun.exe|a385d87b283bb235\LowerCaseLongPathc:\programdata\microsoft\windows defender\platform\4.18.25090.3009-0\mpcmdrun.exeNT AUTHORITY\SYSTEM +13241300x800000000000000012414Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 13:34:35.212{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpcmdrun.exe|a385d87b283bb235\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000012415Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 13:34:35.212{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpcmdrun.exe|a385d87b283bb235\LinkDate02/01/2054 15:06:23NT AUTHORITY\SYSTEM +13241300x800000000000000012416Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 13:34:35.212{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpcmdrun.exe|a385d87b283bb235\BinProductVersion4.18.25090.3009NT AUTHORITY\SYSTEM +154100x800000000000000012417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:36.448{8223a6b9-17ec-6902-d602-000000002b00}11000C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" uninstall-manifest "C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x64__8wekyb3d8bbwe\EventLog-Instrumentation.man" /unicode:trueC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +12241200x800000000000000012418Microsoft-Windows-Sysmon/Operationalsoc101win11-DeleteKey2025-10-29 13:34:36.585{8223a6b9-17ec-6902-d602-000000002b00}11000C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/OperationalNT AUTHORITY\SYSTEM +154100x800000000000000012419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:36.611{8223a6b9-17ec-6902-d802-000000002b00}6004C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" install-manifest "C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\EventLog-Instrumentation.man" /resourceFilePath:"C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll" /messageFilePath:"C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.642.119.0_x86__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop-EventLog-Instrumentation.dll" /unicode:trueC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +13241300x800000000000000012420Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:36.740{8223a6b9-17ec-6902-d802-000000002b00}6004C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\OwningPublisher{43833e12-078d-4d7d-8aaf-ae8c8520f18c}NT AUTHORITY\SYSTEM +13241300x800000000000000012421Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:36.740{8223a6b9-17ec-6902-d802-000000002b00}6004C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\EnabledDWORD (0x00000001)NT AUTHORITY\SYSTEM +13241300x800000000000000012422Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:36.740{8223a6b9-17ec-6902-d802-000000002b00}6004C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\IsolationDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000012423Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:36.740{8223a6b9-17ec-6902-d802-000000002b00}6004C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\ChannelAccessO:BAG:SYD:(A;;0x2;;;S-1-15-2-1)(A;;0x2;;;S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)NT AUTHORITY\SYSTEM +13241300x800000000000000012424Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:36.740{8223a6b9-17ec-6902-d802-000000002b00}6004C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\MaxSizeDWORD (0x00500000)NT AUTHORITY\SYSTEM +13241300x800000000000000012425Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:36.740{8223a6b9-17ec-6902-d802-000000002b00}6004C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\MaxSizeUpperDWORD (0x00000000)NT AUTHORITY\SYSTEM +13241300x800000000000000012426Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 13:34:36.740{8223a6b9-17ec-6902-d802-000000002b00}6004C:\WINDOWS\system32\wevtutil.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-AppXDeployment-Server/Operational\TypeDWORD (0x00000001)NT AUTHORITY\SYSTEM +11241100x800000000000000012427Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:38.128{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{936C537A-B03F-4BE5-8C32-E3B8237CA82F}\ssshim.dll2025-10-29 13:34:38.128NT AUTHORITY\SYSTEM +11241100x800000000000000012428Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:39.046{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{4925E40E-A4EF-4C25-82DD-0C296B926DD2}\ssshim.dll2025-10-29 13:34:39.046NT AUTHORITY\SYSTEM +11241100x800000000000000012429Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:39.992{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{DD1EC8FF-3F4B-4800-8FC6-6AA9592E3D99}\ssshim.dll2025-10-29 13:34:39.992NT AUTHORITY\SYSTEM +11241100x800000000000000012430Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:40.635{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\elevate-shim.exe2025-10-29 13:34:40.635NT AUTHORITY\SYSTEM +11241100x800000000000000012431Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.637{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\Microsoft.Terminal.Control.dll2025-10-29 13:34:40.635NT AUTHORITY\SYSTEM +11241100x800000000000000012432Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.637{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\Microsoft.Terminal.Settings.Editor.dll2025-10-29 13:34:40.637NT AUTHORITY\SYSTEM +11241100x800000000000000012433Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.637{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\Microsoft.Terminal.Settings.Model.dll2025-10-29 13:34:40.637NT AUTHORITY\SYSTEM +11241100x800000000000000012434Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.639{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\Microsoft.Terminal.UI.dll2025-10-29 13:34:40.639NT AUTHORITY\SYSTEM +11241100x800000000000000012435Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.639{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\Microsoft.Terminal.UI.Markdown.dll2025-10-29 13:34:40.639NT AUTHORITY\SYSTEM +11241100x800000000000000012436Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:40.641{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exe2025-10-29 13:34:40.639NT AUTHORITY\SYSTEM +11241100x800000000000000012437Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.641{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsoleProxy.dll2025-10-29 13:34:40.641NT AUTHORITY\SYSTEM +11241100x800000000000000012438Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.641{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\TerminalApp.dll2025-10-29 13:34:40.641NT AUTHORITY\SYSTEM +11241100x800000000000000012439Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:40.641{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\TerminalAzBridge.exe2025-10-29 13:34:40.641NT AUTHORITY\SYSTEM +11241100x800000000000000012440Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.643{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\TerminalConnection.dll2025-10-29 13:34:40.643NT AUTHORITY\SYSTEM +11241100x800000000000000012441Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.643{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\TerminalThemeHelpers.dll2025-10-29 13:34:40.643NT AUTHORITY\SYSTEM +11241100x800000000000000012442Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:40.643{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe2025-10-29 13:34:40.643NT AUTHORITY\SYSTEM +11241100x800000000000000012443Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:40.643{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\WindowsTerminalShellExt.dll2025-10-29 13:34:40.643NT AUTHORITY\SYSTEM +11241100x800000000000000012444Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:40.645{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\wt.exe2025-10-29 13:34:40.645NT AUTHORITY\SYSTEM +11241100x800000000000000012445Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:41.131{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{8F51BF0B-CE6C-4007-ACF4-30C14322010D}\ssshim.dll2025-10-29 13:34:41.131NT AUTHORITY\SYSTEM +11241100x800000000000000012446Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:41.906{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{C68C3183-87AE-4036-9B4E-86CAE8F51D7D}\ssshim.dll2025-10-29 13:34:41.906NT AUTHORITY\SYSTEM +11241100x800000000000000012447Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:45.953{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\PackagedCom\OpenConsoleProxy.dll2025-10-29 13:34:45.953NT AUTHORITY\SYSTEM +11241100x800000000000000012448Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:47.353{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{32B703A6-C377-4543-90FE-0FED0BD26B48}\ssshim.dll2025-10-29 13:34:47.351NT AUTHORITY\SYSTEM +11241100x800000000000000012449Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:47.554{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\wt.exe2025-09-03 13:55:18.831NT AUTHORITY\SYSTEM +11241100x800000000000000012450Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:47.556{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.WindowsTerminal_8wekyb3d8bbwe\wt.exe2025-10-29 13:34:47.554NT AUTHORITY\SYSTEM +154100x800000000000000012451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:34:47.611{8223a6b9-17f7-6902-da02-000000002b00}10836C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXEC:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\AppXDeploymentExtensions.OneCore.dll,ShellRefreshC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +11241100x800000000000000012452Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:48.461{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{39414D50-FD46-4ABC-AA6C-BA1F18B3EEB4}\ssshim.dll2025-10-29 13:34:48.461NT AUTHORITY\SYSTEM +11241100x800000000000000012453Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:49.269{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{32B8A7C2-14AE-4B5A-933A-8B174FEF1725}\ssshim.dll2025-10-29 13:34:49.269NT AUTHORITY\SYSTEM +11241100x800000000000000012454Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:50.516{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D249AA43-9635-47E9-B61B-0DE57A4E48BE}\ssshim.dll2025-10-29 13:34:50.516NT AUTHORITY\SYSTEM +11241100x800000000000000012455Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:51.346{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{C223D956-31DD-4C7A-A213-C51A0E6CEC0E}\ssshim.dll2025-10-29 13:34:51.346NT AUTHORITY\SYSTEM +11241100x800000000000000012456Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.769{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\AdaptiveCards.ObjectModel.WinUI3.dll2025-10-29 13:34:52.769NT AUTHORITY\SYSTEM +11241100x800000000000000012457Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.769{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\AdaptiveCards.Rendering.WinUI3.dll2025-10-29 13:34:52.769NT AUTHORITY\SYSTEM +11241100x800000000000000012458Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.771{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Microsoft.Windows.Widgets.dll2025-10-29 13:34:52.771NT AUTHORITY\SYSTEM +11241100x800000000000000012459Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.814{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll2025-10-29 13:34:52.814NT AUTHORITY\SYSTEM +11241100x800000000000000012460Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.814{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\WidgetPicker.dll2025-10-29 13:34:52.814NT AUTHORITY\SYSTEM +11241100x800000000000000012461Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:52.814{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe2025-10-29 13:34:52.814NT AUTHORITY\SYSTEM +11241100x800000000000000012462Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.814{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\wv2winrt.dll2025-10-29 13:34:52.814NT AUTHORITY\SYSTEM +11241100x800000000000000012463Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.814{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\DynamicLottieWinUI3.dll2025-10-29 13:34:52.814NT AUTHORITY\SYSTEM +11241100x800000000000000012464Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.816{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Microsoft.Windows.Widgets.dll2025-10-29 13:34:52.816NT AUTHORITY\SYSTEM +11241100x800000000000000012465Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.816{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\TemplateExpander.dll2025-10-29 13:34:52.816NT AUTHORITY\SYSTEM +11241100x800000000000000012466Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:52.816{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe2025-10-29 13:34:52.816NT AUTHORITY\SYSTEM +11241100x800000000000000012467Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.816{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\WidgetBoardView.dll2025-10-29 13:34:52.816NT AUTHORITY\SYSTEM +11241100x800000000000000012468Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.816{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Widgets.dll2025-10-29 13:34:52.816NT AUTHORITY\SYSTEM +11241100x800000000000000012469Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:52.818{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\WidgetsWin2DWinUI3\Microsoft.Graphics.Canvas.dll2025-10-29 13:34:52.818NT AUTHORITY\SYSTEM +11241100x800000000000000012470Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:53.530{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{BF48B839-3C4F-4265-AD6A-4A493A53D893}\ssshim.dll2025-10-29 13:34:53.530NT AUTHORITY\SYSTEM +11241100x800000000000000012471Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:54.429{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{3E286826-CCFE-4B86-9465-DAE0AC749624}\ssshim.dll2025-10-29 13:34:54.429NT AUTHORITY\SYSTEM +11241100x800000000000000012472Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:55.257{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{5AE1E823-128A-4C6A-9830-0EFB5A4781AB}\ssshim.dll2025-10-29 13:34:55.257NT AUTHORITY\SYSTEM +11241100x800000000000000012473Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:56.133{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{72E9B2E2-3977-4EB3-80FF-B77AC5003809}\ssshim.dll2025-10-29 13:34:56.131NT AUTHORITY\SYSTEM +11241100x800000000000000012474Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:56.442{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.BingWeather_4.54.63029.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.dll2025-10-29 13:34:56.442NT AUTHORITY\SYSTEM +11241100x800000000000000012475Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:34:56.442{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.BingWeather_4.54.63029.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe2025-10-29 13:34:56.442NT AUTHORITY\SYSTEM +11241100x800000000000000012476Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:56.444{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.BingWeather_4.54.63029.0_x64__8wekyb3d8bbwe\sqlite3.dll2025-10-29 13:34:56.444NT AUTHORITY\SYSTEM +11241100x800000000000000012477Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:56.444{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.BingWeather_4.54.63029.0_x64__8wekyb3d8bbwe\WinRTAdapter.dll2025-10-29 13:34:56.444NT AUTHORITY\SYSTEM +11241100x800000000000000012478Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:57.729{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{B44142EF-DB9E-4DFE-A084-BADEBD0F2F14}\ssshim.dll2025-10-29 13:34:57.729NT AUTHORITY\SYSTEM +11241100x800000000000000012479Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:34:58.599{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{8951EDB2-3E81-4B5A-9603-134F5ECC04D1}\ssshim.dll2025-10-29 13:34:58.599NT AUTHORITY\SYSTEM +11241100x800000000000000012480Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:04.157{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{805CAD5F-FA3C-4672-96C5-495CEA6C46F9}\ssshim.dll2025-10-29 13:35:04.155NT AUTHORITY\SYSTEM +154100x800000000000000012481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:35:04.765{8223a6b9-1808-6902-dc02-000000002b00}12276C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe -RegisterDevice -ProtectionStateChanged -FreeNetworkOnlyC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000012482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:35:04.903{8223a6b9-1808-6902-dd02-000000002b00}5148C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe10.0.27840.1000 (WinBuild.160101.0800)Windows Security Health HostMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=478FBFDA6A51CF9F0D5BFD50B72DFB08,SHA256=272896B88C6C30DD41E8D44FD54A676FDC6A675BE3F38AAA7434F51B98B822E0,IMPHASH=E8960CAF12CF621B3CA78988264C27F1{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x800000000000000012483Microsoft-Windows-Sysmon/Operationalsoc101win11Suspicious,ImageBeginWithBackslashSetValue2025-10-29 13:35:05.004{8223a6b9-1808-6902-dd02-000000002b00}5148\\?\C:\Windows\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\418A073AA3BC1C75Binary Datasoc101win11\Administrator +11241100x800000000000000012484Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:05.317{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{7BA3F9EB-D522-4A87-B11A-04F5C7AFE71E}\ssshim.dll2025-10-29 13:35:05.317NT AUTHORITY\SYSTEM +154100x800000000000000012485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:35:05.413{8223a6b9-1809-6902-de02-000000002b00}1716C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXEC:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\AppXDeploymentExtensions.OneCore.dll,ShellRefreshC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +11241100x800000000000000012486Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:06.761{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{0DE2B147-D300-447F-9D25-44237C142958}\ssshim.dll2025-10-29 13:35:06.759NT AUTHORITY\SYSTEM +11241100x800000000000000012487Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:07.591{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\pbrush.exe2025-09-03 13:55:24.118NT AUTHORITY\SYSTEM +11241100x800000000000000012488Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:07.591{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.Paint_8wekyb3d8bbwe\pbrush.exe2025-09-03 13:55:24.118NT AUTHORITY\SYSTEM +11241100x800000000000000012489Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:07.593{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\mspaint.exe2025-09-03 13:55:24.120NT AUTHORITY\SYSTEM +11241100x800000000000000012490Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:07.593{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.Paint_8wekyb3d8bbwe\mspaint.exe2025-09-03 13:55:24.121NT AUTHORITY\SYSTEM +11241100x800000000000000012491Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:07.968{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{549FBAD1-6C51-4E27-8C20-452FEEDF5BA1}\ssshim.dll2025-10-29 13:35:07.968NT AUTHORITY\SYSTEM +154100x800000000000000012492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:35:08.241{8223a6b9-180c-6902-e002-000000002b00}8408C:\Windows\System32\wermgr.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Problem ReportingMicrosoft® Windows® Operating SystemMicrosoft CorporationWerMgr"C:\WINDOWS\system32\wermgr.exe" -uploadC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ABE1D752643419A8252520AABF75C29D,SHA256=1707CB793B8F64B65CA5C2FEEB05CB7198349354E9E67ADE0671EEC3647F351B,IMPHASH=2FEAC3143808B4542A16622000CCFCAE{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000012493Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:09.013{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{64D2613D-A7ED-4A47-84C0-3DAF0DCAA716}\ssshim.dll2025-10-29 13:35:09.013NT AUTHORITY\SYSTEM +11241100x800000000000000012494Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:09.815{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{87922F04-5F6F-4E72-BDD4-804A721113D9}\ssshim.dll2025-10-29 13:35:09.815NT AUTHORITY\SYSTEM +11241100x800000000000000012495Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:10.798{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{6AE7B2A7-B0DB-4CDC-BA20-9444C663461C}\ssshim.dll2025-10-29 13:35:10.798NT AUTHORITY\SYSTEM +11241100x800000000000000012496Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:11.682{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{6BB6DA22-510D-4554-9588-4CF0FF1839D4}\ssshim.dll2025-10-29 13:35:11.682NT AUTHORITY\SYSTEM +11241100x800000000000000012497Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:12.492{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{9EBC1085-A1E4-4DB2-9290-958DDA805BF9}\ssshim.dll2025-10-29 13:35:12.492NT AUTHORITY\SYSTEM +11241100x800000000000000012498Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.786{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D023A94F-BA33-4F43-B6A9-44C0ECA56614}\ssshim.dll2025-10-29 13:35:13.786NT AUTHORITY\SYSTEM +11241100x800000000000000012499Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.789{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\ScreenSketchAppService\ScreenSketchAppService.dll2025-10-29 13:35:13.789NT AUTHORITY\SYSTEM +11241100x800000000000000012500Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.789{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\libpng16.dll2025-10-29 13:35:13.789NT AUTHORITY\SYSTEM +11241100x800000000000000012501Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.791{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\oneocr.dll2025-10-29 13:35:13.791NT AUTHORITY\SYSTEM +11241100x800000000000000012502Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.791{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\onnxruntime.dll2025-10-29 13:35:13.791NT AUTHORITY\SYSTEM +11241100x800000000000000012503Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.791{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\opencv_core4.dll2025-10-29 13:35:13.791NT AUTHORITY\SYSTEM +11241100x800000000000000012504Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.791{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\opencv_highgui4.dll2025-10-29 13:35:13.791NT AUTHORITY\SYSTEM +11241100x800000000000000012505Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.793{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\opencv_imgcodecs4.dll2025-10-29 13:35:13.791NT AUTHORITY\SYSTEM +11241100x800000000000000012506Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.793{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\opencv_imgproc4.dll2025-10-29 13:35:13.793NT AUTHORITY\SYSTEM +11241100x800000000000000012507Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.793{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\opencv_videoio4.dll2025-10-29 13:35:13.793NT AUTHORITY\SYSTEM +11241100x800000000000000012508Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.793{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\SnippingToolSandbox.dll2025-10-29 13:35:13.793NT AUTHORITY\SYSTEM +11241100x800000000000000012509Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.801{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingToolSandbox\zlib1.dll2025-10-29 13:35:13.801NT AUTHORITY\SYSTEM +11241100x800000000000000012510Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.801{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\libpng16.dll2025-10-29 13:35:13.801NT AUTHORITY\SYSTEM +11241100x800000000000000012511Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\oneocr.dll2025-10-29 13:35:13.803NT AUTHORITY\SYSTEM +11241100x800000000000000012512Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\onnxruntime.dll2025-10-29 13:35:13.803NT AUTHORITY\SYSTEM +11241100x800000000000000012513Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\opencv_core4.dll2025-10-29 13:35:13.803NT AUTHORITY\SYSTEM +11241100x800000000000000012514Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\opencv_highgui4.dll2025-10-29 13:35:13.803NT AUTHORITY\SYSTEM +11241100x800000000000000012515Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\opencv_imgcodecs4.dll2025-10-29 13:35:13.803NT AUTHORITY\SYSTEM +11241100x800000000000000012516Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\opencv_imgproc4.dll2025-10-29 13:35:13.805NT AUTHORITY\SYSTEM +11241100x800000000000000012517Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\opencv_videoio4.dll2025-10-29 13:35:13.805NT AUTHORITY\SYSTEM +11241100x800000000000000012518Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\PerceptiveShell\ps-onnxruntime.dll2025-10-29 13:35:13.805NT AUTHORITY\SYSTEM +11241100x800000000000000012519Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\PerceptiveShell\segapi.dll2025-10-29 13:35:13.805NT AUTHORITY\SYSTEM +11241100x800000000000000012520Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:13.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\SnippingTool.exe2025-10-29 13:35:13.807NT AUTHORITY\SYSTEM +11241100x800000000000000012521Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\SnippingToolUI.dll2025-10-29 13:35:13.807NT AUTHORITY\SYSTEM +11241100x800000000000000012522Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:13.815{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2508.29.0_x64__8wekyb3d8bbwe\SnippingTool\zlib1.dll2025-10-29 13:35:13.815NT AUTHORITY\SYSTEM +11241100x800000000000000012523Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:14.614{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D219353C-F33D-468B-9549-019F981CD07A}\ssshim.dll2025-10-29 13:35:14.614NT AUTHORITY\SYSTEM +11241100x800000000000000012524Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.110{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.App.dll2025-10-29 13:35:15.110NT AUTHORITY\SYSTEM +11241100x800000000000000012525Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:15.112{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.App.exe2025-10-29 13:35:15.112NT AUTHORITY\SYSTEM +11241100x800000000000000012526Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.114{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\Microsoft.Marketplace.Storefront.Telemetry.Contracts.dll2025-10-29 13:35:15.114NT AUTHORITY\SYSTEM +11241100x800000000000000012527Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.116{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\Microsoft.Telemetry.Metadata.dll2025-10-29 13:35:15.114NT AUTHORITY\SYSTEM +11241100x800000000000000012528Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.116{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\Shared.Instrumentation.dll2025-10-29 13:35:15.116NT AUTHORITY\SYSTEM +11241100x800000000000000012529Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.116{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\Shared.Models.dll2025-10-29 13:35:15.116NT AUTHORITY\SYSTEM +11241100x800000000000000012530Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.118{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\Shared.Services.dll2025-10-29 13:35:15.116NT AUTHORITY\SYSTEM +11241100x800000000000000012531Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.118{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\Shmuelie.WinRTServer.dll2025-10-29 13:35:15.118NT AUTHORITY\SYSTEM +11241100x800000000000000012532Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:15.120{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exe2025-10-29 13:35:15.120NT AUTHORITY\SYSTEM +11241100x800000000000000012533Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.120{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\System.Diagnostics.EventLog.dll2025-10-29 13:35:15.120NT AUTHORITY\SYSTEM +11241100x800000000000000012534Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.122{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\System.Security.Principal.Windows.dll2025-10-29 13:35:15.122NT AUTHORITY\SYSTEM +11241100x800000000000000012535Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.122{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\System.ServiceProcess.ServiceController.dll2025-10-29 13:35:15.122NT AUTHORITY\SYSTEM +11241100x800000000000000012536Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.122{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\WinStore.Common.dll2025-10-29 13:35:15.122NT AUTHORITY\SYSTEM +11241100x800000000000000012537Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.124{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\WinStore.DesktopExtension.Contracts.dll2025-10-29 13:35:15.122NT AUTHORITY\SYSTEM +11241100x800000000000000012538Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.124{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\WinStore.Instrumentation.dll2025-10-29 13:35:15.124NT AUTHORITY\SYSTEM +11241100x800000000000000012539Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.124{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\WinStore.Interop.dll2025-10-29 13:35:15.124NT AUTHORITY\SYSTEM +11241100x800000000000000012540Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.124{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\WinStore.Polyfills.dll2025-10-29 13:35:15.124NT AUTHORITY\SYSTEM +11241100x800000000000000012541Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.126{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\WinStore.Services.Abstractions.dll2025-10-29 13:35:15.126NT AUTHORITY\SYSTEM +11241100x800000000000000012542Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.126{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\WinStore.Services.dll2025-10-29 13:35:15.126NT AUTHORITY\SYSTEM +11241100x800000000000000012543Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.126{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\WinStore.Services.Instrumentation.dll2025-10-29 13:35:15.126NT AUTHORITY\SYSTEM +11241100x800000000000000012544Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:15.600{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Clipchamp.Clipchamp_4.4.10420.0_x64__yxz26nhyzhsrt\Clipchamp.ShellExtension.dll2025-10-29 13:35:15.600NT AUTHORITY\SYSTEM +11241100x800000000000000012545Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:15.604{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Clipchamp.Clipchamp_4.4.10420.0_x64__yxz26nhyzhsrt\Clipchamp\Clipchamp.exe2025-10-29 13:35:15.604NT AUTHORITY\SYSTEM +11241100x800000000000000012546Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:16.270{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{1B5520E2-14BE-446B-BA1B-24E67DB997A9}\ssshim.dll2025-10-29 13:35:16.270NT AUTHORITY\SYSTEM +11241100x800000000000000012547Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:17.076{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{503D91B6-E80E-4055-AB87-1105ECE4046D}\ssshim.dll2025-10-29 13:35:17.076NT AUTHORITY\SYSTEM +11241100x800000000000000012548Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:27.832{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{395D8DEB-5D1E-4DC8-BF97-EEDDE74BA780}\ssshim.dll2025-10-29 13:35:27.832NT AUTHORITY\SYSTEM +11241100x800000000000000012549Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:28.609{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\SnippingTool.exe2025-09-03 13:55:22.305NT AUTHORITY\SYSTEM +11241100x800000000000000012550Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:28.611{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.ScreenSketch_8wekyb3d8bbwe\SnippingTool.exe2025-10-29 13:35:28.611NT AUTHORITY\SYSTEM +11241100x800000000000000012551Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:28.863{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{8EEC2F22-B64C-486D-8BBA-E8AA1B32CAF8}\ssshim.dll2025-10-29 13:35:28.863NT AUTHORITY\SYSTEM +11241100x800000000000000012552Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:30.979{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{24BB0A51-05CD-4E8E-8377-B5E46137A41A}\ssshim.dll2025-10-29 13:35:30.979NT AUTHORITY\SYSTEM +11241100x800000000000000012553Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:31.846{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{F725BADD-0E43-4198-857B-9D902E3DB54F}\ssshim.dll2025-10-29 13:35:31.846NT AUTHORITY\SYSTEM +11241100x800000000000000012554Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:32.963{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{BED5F566-DD6D-4025-8772-2103A60E0888}\ssshim.dll2025-10-29 13:35:32.963NT AUTHORITY\SYSTEM +154100x800000000000000012555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:35:33.515{8223a6b9-1825-6902-e202-000000002b00}3196C:\Windows\System32\wermgr.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Problem ReportingMicrosoft® Windows® Operating SystemMicrosoft CorporationWerMgr"C:\WINDOWS\system32\wermgr.exe" -uploadC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ABE1D752643419A8252520AABF75C29D,SHA256=1707CB793B8F64B65CA5C2FEEB05CB7198349354E9E67ADE0671EEC3647F351B,IMPHASH=2FEAC3143808B4542A16622000CCFCAE{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000012556Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:33.858{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{04C5AD0E-0AF0-4DC7-9DED-88E94D6178B8}\ssshim.dll2025-10-29 13:35:33.858NT AUTHORITY\SYSTEM +11241100x800000000000000012557Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:34.695{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{9D2AF69A-55CC-43C5-9030-62CB5D2A032F}\ssshim.dll2025-10-29 13:35:34.695NT AUTHORITY\SYSTEM +11241100x800000000000000012558Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:36.180{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{B07723CB-3F31-4188-99C3-E77B31EF4DD8}\ssshim.dll2025-10-29 13:35:36.180NT AUTHORITY\SYSTEM +11241100x800000000000000012559Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:37.008{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{BAF118C3-E7AE-4C6F-AB9C-F53E41A6E7C7}\ssshim.dll2025-10-29 13:35:37.008NT AUTHORITY\SYSTEM +11241100x800000000000000012560Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.128{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{B470FAC8-6416-44A2-9970-C57A968078D8}\ssshim.dll2025-10-29 13:35:38.128NT AUTHORITY\SYSTEM +11241100x800000000000000012561Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.294{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2508.1.0_x64__8wekyb3d8bbwe\CalculatorApp.dll2025-10-29 13:35:38.294NT AUTHORITY\SYSTEM +11241100x800000000000000012562Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:38.294{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2508.1.0_x64__8wekyb3d8bbwe\CalculatorApp.exe2025-10-29 13:35:38.294NT AUTHORITY\SYSTEM +11241100x800000000000000012563Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.294{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2508.1.0_x64__8wekyb3d8bbwe\CalcViewModel.dll2025-10-29 13:35:38.294NT AUTHORITY\SYSTEM +11241100x800000000000000012564Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.294{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2508.1.0_x64__8wekyb3d8bbwe\GraphControl.dll2025-10-29 13:35:38.294NT AUTHORITY\SYSTEM +11241100x800000000000000012565Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.296{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2508.1.0_x64__8wekyb3d8bbwe\GraphingImpl.dll2025-10-29 13:35:38.296NT AUTHORITY\SYSTEM +11241100x800000000000000012566Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.296{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2508.1.0_x64__8wekyb3d8bbwe\TraceLogging.dll2025-10-29 13:35:38.296NT AUTHORITY\SYSTEM +11241100x800000000000000012567Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.777{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\bg-BG\PAD.Console.Host.resources.dll2025-10-29 13:35:38.777NT AUTHORITY\SYSTEM +11241100x800000000000000012568Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.777{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\ca-ES\PAD.Console.Host.resources.dll2025-10-29 13:35:38.777NT AUTHORITY\SYSTEM +11241100x800000000000000012569Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.777{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\cs-CZ\PAD.Console.Host.resources.dll2025-10-29 13:35:38.777NT AUTHORITY\SYSTEM +11241100x800000000000000012570Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.781{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\da-DK\PAD.Console.Host.resources.dll2025-10-29 13:35:38.781NT AUTHORITY\SYSTEM +11241100x800000000000000012571Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.783{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\de-DE\PAD.Console.Host.resources.dll2025-10-29 13:35:38.783NT AUTHORITY\SYSTEM +11241100x800000000000000012572Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.785{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\el-GR\PAD.Console.Host.resources.dll2025-10-29 13:35:38.785NT AUTHORITY\SYSTEM +11241100x800000000000000012573Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.785{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\es-ES\PAD.Console.Host.resources.dll2025-10-29 13:35:38.785NT AUTHORITY\SYSTEM +11241100x800000000000000012574Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.785{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\et-EE\PAD.Console.Host.resources.dll2025-10-29 13:35:38.785NT AUTHORITY\SYSTEM +11241100x800000000000000012575Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.787{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\eu-ES\PAD.Console.Host.resources.dll2025-10-29 13:35:38.787NT AUTHORITY\SYSTEM +11241100x800000000000000012576Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.789{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\fi-FI\PAD.Console.Host.resources.dll2025-10-29 13:35:38.789NT AUTHORITY\SYSTEM +11241100x800000000000000012577Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.791{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\fr-FR\PAD.Console.Host.resources.dll2025-10-29 13:35:38.791NT AUTHORITY\SYSTEM +11241100x800000000000000012578Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.793{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\gl-ES\PAD.Console.Host.resources.dll2025-10-29 13:35:38.793NT AUTHORITY\SYSTEM +11241100x800000000000000012579Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.793{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\hi-IN\PAD.Console.Host.resources.dll2025-10-29 13:35:38.793NT AUTHORITY\SYSTEM +11241100x800000000000000012580Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.795{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\hr-HR\PAD.Console.Host.resources.dll2025-10-29 13:35:38.795NT AUTHORITY\SYSTEM +11241100x800000000000000012581Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.797{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\hu-HU\PAD.Console.Host.resources.dll2025-10-29 13:35:38.797NT AUTHORITY\SYSTEM +11241100x800000000000000012582Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.797{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\id-ID\PAD.Console.Host.resources.dll2025-10-29 13:35:38.797NT AUTHORITY\SYSTEM +11241100x800000000000000012583Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.799{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\it-IT\PAD.Console.Host.resources.dll2025-10-29 13:35:38.799NT AUTHORITY\SYSTEM +11241100x800000000000000012584Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.801{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\ja-JP\PAD.Console.Host.resources.dll2025-10-29 13:35:38.801NT AUTHORITY\SYSTEM +11241100x800000000000000012585Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.801{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\kk-KZ\PAD.Console.Host.resources.dll2025-10-29 13:35:38.801NT AUTHORITY\SYSTEM +11241100x800000000000000012586Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\ko-KR\PAD.Console.Host.resources.dll2025-10-29 13:35:38.801NT AUTHORITY\SYSTEM +11241100x800000000000000012587Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\lt-LT\PAD.Console.Host.resources.dll2025-10-29 13:35:38.803NT AUTHORITY\SYSTEM +11241100x800000000000000012588Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\lv-LV\PAD.Console.Host.resources.dll2025-10-29 13:35:38.803NT AUTHORITY\SYSTEM +11241100x800000000000000012589Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\ms-MY\PAD.Console.Host.resources.dll2025-10-29 13:35:38.807NT AUTHORITY\SYSTEM +11241100x800000000000000012590Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\nb-NO\PAD.Console.Host.resources.dll2025-10-29 13:35:38.807NT AUTHORITY\SYSTEM +11241100x800000000000000012591Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\nl-NL\PAD.Console.Host.resources.dll2025-10-29 13:35:38.809NT AUTHORITY\SYSTEM +11241100x800000000000000012592Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:38.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\PAD.Console.Host.exe2025-10-29 13:35:38.809NT AUTHORITY\SYSTEM +11241100x800000000000000012593Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\pl-PL\PAD.Console.Host.resources.dll2025-10-29 13:35:38.809NT AUTHORITY\SYSTEM +11241100x800000000000000012594Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.811{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\pt-BR\PAD.Console.Host.resources.dll2025-10-29 13:35:38.811NT AUTHORITY\SYSTEM +11241100x800000000000000012595Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.811{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\pt-PT\PAD.Console.Host.resources.dll2025-10-29 13:35:38.811NT AUTHORITY\SYSTEM +11241100x800000000000000012596Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.813{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\ro-RO\PAD.Console.Host.resources.dll2025-10-29 13:35:38.813NT AUTHORITY\SYSTEM +11241100x800000000000000012597Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.813{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\ru-RU\PAD.Console.Host.resources.dll2025-10-29 13:35:38.813NT AUTHORITY\SYSTEM +11241100x800000000000000012598Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.813{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\sk-SK\PAD.Console.Host.resources.dll2025-10-29 13:35:38.813NT AUTHORITY\SYSTEM +11241100x800000000000000012599Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.815{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\sl-SI\PAD.Console.Host.resources.dll2025-10-29 13:35:38.815NT AUTHORITY\SYSTEM +11241100x800000000000000012600Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.815{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\sr-Cyrl-RS\PAD.Console.Host.resources.dll2025-10-29 13:35:38.815NT AUTHORITY\SYSTEM +11241100x800000000000000012601Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.816{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\sr-Latn-RS\PAD.Console.Host.resources.dll2025-10-29 13:35:38.816NT AUTHORITY\SYSTEM +11241100x800000000000000012602Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.816{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\sv-SE\PAD.Console.Host.resources.dll2025-10-29 13:35:38.816NT AUTHORITY\SYSTEM +11241100x800000000000000012603Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.818{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\th-TH\PAD.Console.Host.resources.dll2025-10-29 13:35:38.818NT AUTHORITY\SYSTEM +11241100x800000000000000012604Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.818{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\tr-TR\PAD.Console.Host.resources.dll2025-10-29 13:35:38.818NT AUTHORITY\SYSTEM +11241100x800000000000000012605Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.818{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\uk-UA\PAD.Console.Host.resources.dll2025-10-29 13:35:38.818NT AUTHORITY\SYSTEM +11241100x800000000000000012606Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.820{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\vi-VN\PAD.Console.Host.resources.dll2025-10-29 13:35:38.820NT AUTHORITY\SYSTEM +11241100x800000000000000012607Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.824{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\zh-CN\PAD.Console.Host.resources.dll2025-10-29 13:35:38.824NT AUTHORITY\SYSTEM +11241100x800000000000000012608Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.826{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.2021.0_x64__8wekyb3d8bbwe\dotnet\zh-TW\PAD.Console.Host.resources.dll2025-10-29 13:35:38.826NT AUTHORITY\SYSTEM +11241100x800000000000000012609Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:38.950{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.23.10160.0_x64__8wekyb3d8bbwe\Microsoft.MicrosoftSolitaireCollection.dll2025-10-29 13:35:38.950NT AUTHORITY\SYSTEM +11241100x800000000000000012610Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:38.952{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.23.10160.0_x64__8wekyb3d8bbwe\Microsoft.MicrosoftSolitaireCollection.exe2025-10-29 13:35:38.950NT AUTHORITY\SYSTEM +11241100x800000000000000012611Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:38.952{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.23.10160.0_x64__8wekyb3d8bbwe\Solitaire.exe2025-10-29 13:35:38.952NT AUTHORITY\SYSTEM +11241100x800000000000000012612Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:39.394{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{9DA6954F-EBCF-416B-B962-8BAEFBEC80D5}\ssshim.dll2025-10-29 13:35:39.394NT AUTHORITY\SYSTEM +11241100x800000000000000012613Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:40.375{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{2B1807EB-3135-44D0-A3EE-E42F13D3ED26}\ssshim.dll2025-10-29 13:35:40.375NT AUTHORITY\SYSTEM +11241100x800000000000000012614Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:41.444{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{EC66AE4F-5E7A-4D98-ADE4-47B37B4DA912}\ssshim.dll2025-10-29 13:35:41.444NT AUTHORITY\SYSTEM +11241100x800000000000000012615Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:42.635{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D698DACC-F9BC-43BA-94B1-BC90E14E77CB}\ssshim.dll2025-10-29 13:35:42.635NT AUTHORITY\SYSTEM +11241100x800000000000000012616Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:43.723{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{C2176EDA-7D8B-4615-AD7D-E6E95658CCC1}\ssshim.dll2025-10-29 13:35:43.723NT AUTHORITY\SYSTEM +11241100x800000000000000012617Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:44.936{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{031F896C-0F0E-4C1E-B067-27D32FDAB75C}\ssshim.dll2025-10-29 13:35:44.936NT AUTHORITY\SYSTEM +11241100x800000000000000012618Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:45.679{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{C3E3C9A7-40A8-43B8-BE57-67D54880F383}\ssshim.dll2025-10-29 13:35:45.679NT AUTHORITY\SYSTEM +11241100x800000000000000012619Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:46.704{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{1A5B9E58-47F6-4E61-8565-15A0B8415813}\ssshim.dll2025-10-29 13:35:46.704NT AUTHORITY\SYSTEM +11241100x800000000000000012620Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:47.771{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{70EF3F22-7A07-4E59-A672-6AEE277595F0}\ssshim.dll2025-10-29 13:35:47.771NT AUTHORITY\SYSTEM +11241100x800000000000000012621Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:48.382{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2510.14102.0_x64__8wekyb3d8bbwe\PilotshubApp.dll2025-10-29 13:35:48.382NT AUTHORITY\SYSTEM +11241100x800000000000000012622Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:48.382{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2510.14102.0_x64__8wekyb3d8bbwe\PilotshubApp.exe2025-10-29 13:35:48.382NT AUTHORITY\SYSTEM +11241100x800000000000000012623Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:48.603{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{30CF1222-6C5D-4F4E-BDD7-79204DC049E2}\ssshim.dll2025-10-29 13:35:48.603NT AUTHORITY\SYSTEM +11241100x800000000000000012624Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:49.614{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D38ABB24-05ED-4B9D-BDAD-4B29B373A08B}\ssshim.dll2025-10-29 13:35:49.614NT AUTHORITY\SYSTEM +11241100x800000000000000012625Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:50.133{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe2025-10-29 13:35:50.133NT AUTHORITY\SYSTEM +11241100x800000000000000012626Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:50.496{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{F3D9115A-FEEB-4163-87D3-65372BDF5778}\ssshim.dll2025-10-29 13:35:50.496NT AUTHORITY\SYSTEM +11241100x800000000000000012627Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:51.392{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{36DA7CF6-6C8F-4E29-8F76-1899EAC7AA87}\ssshim.dll2025-10-29 13:35:51.392NT AUTHORITY\SYSTEM +11241100x800000000000000012628Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:52.393{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{FBDC56CB-4B35-4E1C-95D4-29A85261A435}\ssshim.dll2025-10-29 13:35:52.391NT AUTHORITY\SYSTEM +11241100x800000000000000012629Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:53.398{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{6AE47429-E771-498A-A7F5-D491ECB56359}\ssshim.dll2025-10-29 13:35:53.396NT AUTHORITY\SYSTEM +11241100x800000000000000012630Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:54.165{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22509.1401.1.0_x64__8wekyb3d8bbwe\hermes.dll2025-10-29 13:35:54.165NT AUTHORITY\SYSTEM +11241100x800000000000000012631Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:54.165{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22509.1401.1.0_x64__8wekyb3d8bbwe\Microsoft.ReactNative.dll2025-10-29 13:35:54.165NT AUTHORITY\SYSTEM +11241100x800000000000000012632Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:54.165{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22509.1401.1.0_x64__8wekyb3d8bbwe\Payments.dll2025-10-29 13:35:54.165NT AUTHORITY\SYSTEM +11241100x800000000000000012633Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:54.165{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22509.1401.1.0_x64__8wekyb3d8bbwe\ReactNativeWebView.dll2025-10-29 13:35:54.165NT AUTHORITY\SYSTEM +11241100x800000000000000012634Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:54.169{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22509.1401.1.0_x64__8wekyb3d8bbwe\Saturn.dll2025-10-29 13:35:54.169NT AUTHORITY\SYSTEM +11241100x800000000000000012635Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:54.171{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22509.1401.1.0_x64__8wekyb3d8bbwe\StoreExperienceHost.dll2025-10-29 13:35:54.171NT AUTHORITY\SYSTEM +11241100x800000000000000012636Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:35:54.171{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22509.1401.1.0_x64__8wekyb3d8bbwe\StoreExperienceHost.exe2025-10-29 13:35:54.171NT AUTHORITY\SYSTEM +11241100x800000000000000012637Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:55.188{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{46325527-F165-4FD5-9AF3-FB8597E2CEFF}\ssshim.dll2025-10-29 13:35:55.188NT AUTHORITY\SYSTEM +11241100x800000000000000012638Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:56.402{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{4CC8D2C0-FBF8-45BD-8CE1-67F9D6E0A087}\ssshim.dll2025-10-29 13:35:56.402NT AUTHORITY\SYSTEM +11241100x800000000000000012639Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:57.700{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{0BBFEF98-AA0D-47A6-931F-8A5E5C9EB06D}\ssshim.dll2025-10-29 13:35:57.700NT AUTHORITY\SYSTEM +11241100x800000000000000012640Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:58.861{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{EB53008A-F101-41B5-9E65-D9ACC40BBDA1}\ssshim.dll2025-10-29 13:35:58.861NT AUTHORITY\SYSTEM +11241100x800000000000000012641Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:35:59.708{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{42120D9A-4368-4B31-90A3-4CD25EB138F5}\ssshim.dll2025-10-29 13:35:59.708NT AUTHORITY\SYSTEM +11241100x800000000000000012642Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:01.126{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{FB0870AC-0BFA-4E98-93C0-B9C0708701F4}\ssshim.dll2025-10-29 13:36:01.126NT AUTHORITY\SYSTEM +11241100x800000000000000012643Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:02.303{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{F08A79D1-B9B0-4835-B2D7-AAA70E00A124}\ssshim.dll2025-10-29 13:36:02.303NT AUTHORITY\SYSTEM +11241100x800000000000000012644Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:03.457{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{3E137482-8510-4137-AC56-FFB077C5C018}\ssshim.dll2025-10-29 13:36:03.457NT AUTHORITY\SYSTEM +11241100x800000000000000012645Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:04.657{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{3C185104-37D2-4876-86C8-B1D3CFD9A04B}\ssshim.dll2025-10-29 13:36:04.657NT AUTHORITY\SYSTEM +11241100x800000000000000012646Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.AgentProxy\AgentIsolationEnvironment.NativeInterop.dll2025-10-29 13:36:05.201NT AUTHORITY\SYSTEM +11241100x800000000000000012647Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:05.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.AgentProxy\AgentProxy.exe2025-10-29 13:36:05.201NT AUTHORITY\SYSTEM +11241100x800000000000000012648Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:05.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.AgentRelay\AgentRelay.exe2025-10-29 13:36:05.201NT AUTHORITY\SYSTEM +11241100x800000000000000012649Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.Auditing.dll2025-10-29 13:36:05.201NT AUTHORITY\SYSTEM +11241100x800000000000000012650Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.201{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.Grpc.dll2025-10-29 13:36:05.201NT AUTHORITY\SYSTEM +11241100x800000000000000012651Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.NativeInterop.dll2025-10-29 13:36:05.203NT AUTHORITY\SYSTEM +11241100x800000000000000012652Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.NativeInterop.Projection.dll2025-10-29 13:36:05.203NT AUTHORITY\SYSTEM +11241100x800000000000000012653Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.PlatformSDK.Projection.dll2025-10-29 13:36:05.203NT AUTHORITY\SYSTEM +11241100x800000000000000012654Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.203{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\AgentIsolationEnvironment.Telemetry.dll2025-10-29 13:36:05.203NT AUTHORITY\SYSTEM +11241100x800000000000000012655Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.205{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\aspnetcorev2_inprocess.dll2025-10-29 13:36:05.205NT AUTHORITY\SYSTEM +11241100x800000000000000012656Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.264{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Azure.Core.dll2025-10-29 13:36:05.264NT AUTHORITY\SYSTEM +11241100x800000000000000012657Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.264{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\clretwrc.dll2025-10-29 13:36:05.264NT AUTHORITY\SYSTEM +11241100x800000000000000012658Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.264{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\clrgc.dll2025-10-29 13:36:05.264NT AUTHORITY\SYSTEM +11241100x800000000000000012659Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.264{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\clrgcexp.dll2025-10-29 13:36:05.264NT AUTHORITY\SYSTEM +11241100x800000000000000012660Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.264{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\clrjit.dll2025-10-29 13:36:05.264NT AUTHORITY\SYSTEM +11241100x800000000000000012661Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.266{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Copilot.dll2025-10-29 13:36:05.266NT AUTHORITY\SYSTEM +11241100x800000000000000012662Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:05.266{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Copilot.exe2025-10-29 13:36:05.266NT AUTHORITY\SYSTEM +11241100x800000000000000012663Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.266{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotContext.dll2025-10-29 13:36:05.266NT AUTHORITY\SYSTEM +11241100x800000000000000012664Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:05.266{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotContext.exe2025-10-29 13:36:05.266NT AUTHORITY\SYSTEM +11241100x800000000000000012665Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.268{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.AgentEnvironment.dll2025-10-29 13:36:05.266NT AUTHORITY\SYSTEM +11241100x800000000000000012666Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.268{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.Chat.Controls.dll2025-10-29 13:36:05.268NT AUTHORITY\SYSTEM +11241100x800000000000000012667Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.274{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.Contracts.dll2025-10-29 13:36:05.274NT AUTHORITY\SYSTEM +11241100x800000000000000012668Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.274{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.Core.dll2025-10-29 13:36:05.274NT AUTHORITY\SYSTEM +11241100x800000000000000012669Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.274{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.Core.UX.dll2025-10-29 13:36:05.274NT AUTHORITY\SYSTEM +11241100x800000000000000012670Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.276{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.Features.dll2025-10-29 13:36:05.276NT AUTHORITY\SYSTEM +11241100x800000000000000012671Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.320{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.FileExplorerExtension.dll2025-10-29 13:36:05.320NT AUTHORITY\SYSTEM +11241100x800000000000000012672Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.320{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.Platform.Contracts.dll2025-10-29 13:36:05.320NT AUTHORITY\SYSTEM +11241100x800000000000000012673Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.322{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.Platform.dll2025-10-29 13:36:05.322NT AUTHORITY\SYSTEM +11241100x800000000000000012674Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.324{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotNative.Voice.dll2025-10-29 13:36:05.324NT AUTHORITY\SYSTEM +11241100x800000000000000012675Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.326{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotWidgets.dll2025-10-29 13:36:05.326NT AUTHORITY\SYSTEM +11241100x800000000000000012676Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:05.326{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\CopilotWidgets.exe2025-10-29 13:36:05.326NT AUTHORITY\SYSTEM +11241100x800000000000000012677Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.326{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\coreclr.dll2025-10-29 13:36:05.326NT AUTHORITY\SYSTEM +11241100x800000000000000012678Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:05.326{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\createdump.exe2025-10-29 13:36:05.326NT AUTHORITY\SYSTEM +11241100x800000000000000012679Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.328{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\hostfxr.dll2025-10-29 13:36:05.328NT AUTHORITY\SYSTEM +11241100x800000000000000012680Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.328{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\hostpolicy.dll2025-10-29 13:36:05.328NT AUTHORITY\SYSTEM +11241100x800000000000000012681Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.328{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Antiforgery.dll2025-10-29 13:36:05.328NT AUTHORITY\SYSTEM +11241100x800000000000000012682Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.328{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Authentication.Abstractions.dll2025-10-29 13:36:05.328NT AUTHORITY\SYSTEM +11241100x800000000000000012683Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.328{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Authentication.BearerToken.dll2025-10-29 13:36:05.328NT AUTHORITY\SYSTEM +11241100x800000000000000012684Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.330{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Authentication.Cookies.dll2025-10-29 13:36:05.330NT AUTHORITY\SYSTEM +11241100x800000000000000012685Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.330{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Authentication.Core.dll2025-10-29 13:36:05.330NT AUTHORITY\SYSTEM +11241100x800000000000000012686Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.330{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Authentication.dll2025-10-29 13:36:05.330NT AUTHORITY\SYSTEM +11241100x800000000000000012687Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.330{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Authentication.OAuth.dll2025-10-29 13:36:05.330NT AUTHORITY\SYSTEM +11241100x800000000000000012688Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.330{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Authorization.dll2025-10-29 13:36:05.330NT AUTHORITY\SYSTEM +11241100x800000000000000012689Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.330{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Authorization.Policy.dll2025-10-29 13:36:05.330NT AUTHORITY\SYSTEM +11241100x800000000000000012690Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.332{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Components.Authorization.dll2025-10-29 13:36:05.330NT AUTHORITY\SYSTEM +11241100x800000000000000012691Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.332{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Components.dll2025-10-29 13:36:05.332NT AUTHORITY\SYSTEM +11241100x800000000000000012692Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.332{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Components.Endpoints.dll2025-10-29 13:36:05.332NT AUTHORITY\SYSTEM +11241100x800000000000000012693Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.332{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Components.Forms.dll2025-10-29 13:36:05.332NT AUTHORITY\SYSTEM +11241100x800000000000000012694Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.332{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Components.Server.dll2025-10-29 13:36:05.332NT AUTHORITY\SYSTEM +11241100x800000000000000012695Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.332{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Components.Web.dll2025-10-29 13:36:05.332NT AUTHORITY\SYSTEM +11241100x800000000000000012696Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.332{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Connections.Abstractions.dll2025-10-29 13:36:05.332NT AUTHORITY\SYSTEM +11241100x800000000000000012697Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.CookiePolicy.dll2025-10-29 13:36:05.334NT AUTHORITY\SYSTEM +11241100x800000000000000012698Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Cors.dll2025-10-29 13:36:05.334NT AUTHORITY\SYSTEM +11241100x800000000000000012699Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Cryptography.Internal.dll2025-10-29 13:36:05.334NT AUTHORITY\SYSTEM +11241100x800000000000000012700Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Cryptography.KeyDerivation.dll2025-10-29 13:36:05.334NT AUTHORITY\SYSTEM +11241100x800000000000000012701Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.DataProtection.Abstractions.dll2025-10-29 13:36:05.334NT AUTHORITY\SYSTEM +11241100x800000000000000012702Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.335{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.DataProtection.dll2025-10-29 13:36:05.335NT AUTHORITY\SYSTEM +11241100x800000000000000012703Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.335{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.DataProtection.Extensions.dll2025-10-29 13:36:05.335NT AUTHORITY\SYSTEM +11241100x800000000000000012704Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.335{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Diagnostics.Abstractions.dll2025-10-29 13:36:05.335NT AUTHORITY\SYSTEM +11241100x800000000000000012705Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.335{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Diagnostics.dll2025-10-29 13:36:05.335NT AUTHORITY\SYSTEM +11241100x800000000000000012706Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.335{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Diagnostics.HealthChecks.dll2025-10-29 13:36:05.335NT AUTHORITY\SYSTEM +11241100x800000000000000012707Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.335{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.dll2025-10-29 13:36:05.335NT AUTHORITY\SYSTEM +11241100x800000000000000012708Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.337{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.HostFiltering.dll2025-10-29 13:36:05.335NT AUTHORITY\SYSTEM +11241100x800000000000000012709Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.337{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Hosting.Abstractions.dll2025-10-29 13:36:05.337NT AUTHORITY\SYSTEM +11241100x800000000000000012710Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.337{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Hosting.dll2025-10-29 13:36:05.337NT AUTHORITY\SYSTEM +11241100x800000000000000012711Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.337{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Hosting.Server.Abstractions.dll2025-10-29 13:36:05.337NT AUTHORITY\SYSTEM +11241100x800000000000000012712Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.337{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Html.Abstractions.dll2025-10-29 13:36:05.337NT AUTHORITY\SYSTEM +11241100x800000000000000012713Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.339{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Abstractions.dll2025-10-29 13:36:05.339NT AUTHORITY\SYSTEM +11241100x800000000000000012714Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.339{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Connections.Common.dll2025-10-29 13:36:05.339NT AUTHORITY\SYSTEM +11241100x800000000000000012715Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.339{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Connections.dll2025-10-29 13:36:05.339NT AUTHORITY\SYSTEM +11241100x800000000000000012716Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.dll2025-10-29 13:36:05.341NT AUTHORITY\SYSTEM +11241100x800000000000000012717Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Extensions.dll2025-10-29 13:36:05.341NT AUTHORITY\SYSTEM +11241100x800000000000000012718Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Features.dll2025-10-29 13:36:05.341NT AUTHORITY\SYSTEM +11241100x800000000000000012719Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Results.dll2025-10-29 13:36:05.341NT AUTHORITY\SYSTEM +11241100x800000000000000012720Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.HttpLogging.dll2025-10-29 13:36:05.341NT AUTHORITY\SYSTEM +11241100x800000000000000012721Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.HttpOverrides.dll2025-10-29 13:36:05.341NT AUTHORITY\SYSTEM +11241100x800000000000000012722Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.HttpsPolicy.dll2025-10-29 13:36:05.343NT AUTHORITY\SYSTEM +11241100x800000000000000012723Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Identity.dll2025-10-29 13:36:05.343NT AUTHORITY\SYSTEM +11241100x800000000000000012724Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Localization.dll2025-10-29 13:36:05.343NT AUTHORITY\SYSTEM +11241100x800000000000000012725Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Localization.Routing.dll2025-10-29 13:36:05.343NT AUTHORITY\SYSTEM +11241100x800000000000000012726Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Metadata.dll2025-10-29 13:36:05.343NT AUTHORITY\SYSTEM +11241100x800000000000000012727Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.346{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.Abstractions.dll2025-10-29 13:36:05.343NT AUTHORITY\SYSTEM +11241100x800000000000000012728Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.346{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.ApiExplorer.dll2025-10-29 13:36:05.346NT AUTHORITY\SYSTEM +11241100x800000000000000012729Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.346{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.Core.dll2025-10-29 13:36:05.346NT AUTHORITY\SYSTEM +11241100x800000000000000012730Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.346{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.Cors.dll2025-10-29 13:36:05.346NT AUTHORITY\SYSTEM +11241100x800000000000000012731Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.346{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.DataAnnotations.dll2025-10-29 13:36:05.346NT AUTHORITY\SYSTEM +11241100x800000000000000012732Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.346{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.dll2025-10-29 13:36:05.346NT AUTHORITY\SYSTEM +11241100x800000000000000012733Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.348{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.Formatters.Json.dll2025-10-29 13:36:05.346NT AUTHORITY\SYSTEM +11241100x800000000000000012734Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.348{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.Formatters.Xml.dll2025-10-29 13:36:05.348NT AUTHORITY\SYSTEM +11241100x800000000000000012735Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.348{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.Localization.dll2025-10-29 13:36:05.348NT AUTHORITY\SYSTEM +11241100x800000000000000012736Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.348{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.Razor.dll2025-10-29 13:36:05.348NT AUTHORITY\SYSTEM +11241100x800000000000000012737Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.348{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.RazorPages.dll2025-10-29 13:36:05.348NT AUTHORITY\SYSTEM +11241100x800000000000000012738Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.348{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.TagHelpers.dll2025-10-29 13:36:05.348NT AUTHORITY\SYSTEM +11241100x800000000000000012739Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.350{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Mvc.ViewFeatures.dll2025-10-29 13:36:05.350NT AUTHORITY\SYSTEM +11241100x800000000000000012740Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.350{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.OutputCaching.dll2025-10-29 13:36:05.350NT AUTHORITY\SYSTEM +11241100x800000000000000012741Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.350{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.RateLimiting.dll2025-10-29 13:36:05.350NT AUTHORITY\SYSTEM +11241100x800000000000000012742Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.350{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Razor.dll2025-10-29 13:36:05.350NT AUTHORITY\SYSTEM +11241100x800000000000000012743Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.350{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Razor.Runtime.dll2025-10-29 13:36:05.350NT AUTHORITY\SYSTEM +11241100x800000000000000012744Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.RequestDecompression.dll2025-10-29 13:36:05.351NT AUTHORITY\SYSTEM +11241100x800000000000000012745Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.ResponseCaching.Abstractions.dll2025-10-29 13:36:05.351NT AUTHORITY\SYSTEM +11241100x800000000000000012746Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.ResponseCaching.dll2025-10-29 13:36:05.351NT AUTHORITY\SYSTEM +11241100x800000000000000012747Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.ResponseCompression.dll2025-10-29 13:36:05.351NT AUTHORITY\SYSTEM +11241100x800000000000000012748Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Rewrite.dll2025-10-29 13:36:05.351NT AUTHORITY\SYSTEM +11241100x800000000000000012749Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.353{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Routing.Abstractions.dll2025-10-29 13:36:05.351NT AUTHORITY\SYSTEM +11241100x800000000000000012750Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.353{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Routing.dll2025-10-29 13:36:05.353NT AUTHORITY\SYSTEM +11241100x800000000000000012751Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.353{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Server.HttpSys.dll2025-10-29 13:36:05.353NT AUTHORITY\SYSTEM +11241100x800000000000000012752Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.353{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Server.IIS.dll2025-10-29 13:36:05.353NT AUTHORITY\SYSTEM +11241100x800000000000000012753Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.355{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Server.IISIntegration.dll2025-10-29 13:36:05.353NT AUTHORITY\SYSTEM +11241100x800000000000000012754Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.355{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Server.Kestrel.Core.dll2025-10-29 13:36:05.355NT AUTHORITY\SYSTEM +11241100x800000000000000012755Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.355{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Server.Kestrel.dll2025-10-29 13:36:05.355NT AUTHORITY\SYSTEM +11241100x800000000000000012756Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.355{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Server.Kestrel.Transport.NamedPipes.dll2025-10-29 13:36:05.355NT AUTHORITY\SYSTEM +11241100x800000000000000012757Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.355{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll2025-10-29 13:36:05.355NT AUTHORITY\SYSTEM +11241100x800000000000000012758Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.dll2025-10-29 13:36:05.355NT AUTHORITY\SYSTEM +11241100x800000000000000012759Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Session.dll2025-10-29 13:36:05.357NT AUTHORITY\SYSTEM +11241100x800000000000000012760Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Common.dll2025-10-29 13:36:05.357NT AUTHORITY\SYSTEM +11241100x800000000000000012761Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Core.dll2025-10-29 13:36:05.357NT AUTHORITY\SYSTEM +11241100x800000000000000012762Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.dll2025-10-29 13:36:05.357NT AUTHORITY\SYSTEM +11241100x800000000000000012763Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Protocols.Json.dll2025-10-29 13:36:05.357NT AUTHORITY\SYSTEM +11241100x800000000000000012764Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.StaticAssets.dll2025-10-29 13:36:05.359NT AUTHORITY\SYSTEM +11241100x800000000000000012765Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.StaticFiles.dll2025-10-29 13:36:05.359NT AUTHORITY\SYSTEM +11241100x800000000000000012766Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.WebSockets.dll2025-10-29 13:36:05.359NT AUTHORITY\SYSTEM +11241100x800000000000000012767Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.WebUtilities.dll2025-10-29 13:36:05.359NT AUTHORITY\SYSTEM +11241100x800000000000000012768Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.CognitiveServices.Speech.core.dll2025-10-29 13:36:05.359NT AUTHORITY\SYSTEM +11241100x800000000000000012769Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.CognitiveServices.Speech.csharp.dll2025-10-29 13:36:05.359NT AUTHORITY\SYSTEM +11241100x800000000000000012770Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.CognitiveServices.Speech.extension.audio.sys.dll2025-10-29 13:36:05.361NT AUTHORITY\SYSTEM +11241100x800000000000000012771Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.CognitiveServices.Speech.extension.codec.dll2025-10-29 13:36:05.361NT AUTHORITY\SYSTEM +11241100x800000000000000012772Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.CognitiveServices.Speech.extension.kws.dll2025-10-29 13:36:05.361NT AUTHORITY\SYSTEM +11241100x800000000000000012773Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.CognitiveServices.Speech.extension.kws.ort.dll2025-10-29 13:36:05.361NT AUTHORITY\SYSTEM +11241100x800000000000000012774Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.CognitiveServices.Speech.extension.lu.dll2025-10-29 13:36:05.361NT AUTHORITY\SYSTEM +11241100x800000000000000012775Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.CSharp.dll2025-10-29 13:36:05.363NT AUTHORITY\SYSTEM +11241100x800000000000000012776Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Caching.Abstractions.dll2025-10-29 13:36:05.363NT AUTHORITY\SYSTEM +11241100x800000000000000012777Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Caching.Memory.dll2025-10-29 13:36:05.363NT AUTHORITY\SYSTEM +11241100x800000000000000012778Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Abstractions.dll2025-10-29 13:36:05.363NT AUTHORITY\SYSTEM +11241100x800000000000000012779Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Binder.dll2025-10-29 13:36:05.363NT AUTHORITY\SYSTEM +11241100x800000000000000012780Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.CommandLine.dll2025-10-29 13:36:05.365NT AUTHORITY\SYSTEM +11241100x800000000000000012781Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.dll2025-10-29 13:36:05.365NT AUTHORITY\SYSTEM +11241100x800000000000000012782Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.EnvironmentVariables.dll2025-10-29 13:36:05.365NT AUTHORITY\SYSTEM +11241100x800000000000000012783Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.FileExtensions.dll2025-10-29 13:36:05.367NT AUTHORITY\SYSTEM +11241100x800000000000000012784Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Ini.dll2025-10-29 13:36:05.367NT AUTHORITY\SYSTEM +11241100x800000000000000012785Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Json.dll2025-10-29 13:36:05.367NT AUTHORITY\SYSTEM +11241100x800000000000000012786Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.KeyPerFile.dll2025-10-29 13:36:05.367NT AUTHORITY\SYSTEM +11241100x800000000000000012787Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.UserSecrets.dll2025-10-29 13:36:05.369NT AUTHORITY\SYSTEM +11241100x800000000000000012788Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Xml.dll2025-10-29 13:36:05.369NT AUTHORITY\SYSTEM +11241100x800000000000000012789Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.Abstractions.dll2025-10-29 13:36:05.369NT AUTHORITY\SYSTEM +11241100x800000000000000012790Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.dll2025-10-29 13:36:05.369NT AUTHORITY\SYSTEM +11241100x800000000000000012791Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Diagnostics.Abstractions.dll2025-10-29 13:36:05.369NT AUTHORITY\SYSTEM +11241100x800000000000000012792Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Diagnostics.dll2025-10-29 13:36:05.371NT AUTHORITY\SYSTEM +11241100x800000000000000012793Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll2025-10-29 13:36:05.371NT AUTHORITY\SYSTEM +11241100x800000000000000012794Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Diagnostics.HealthChecks.dll2025-10-29 13:36:05.371NT AUTHORITY\SYSTEM +11241100x800000000000000012795Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Features.dll2025-10-29 13:36:05.371NT AUTHORITY\SYSTEM +11241100x800000000000000012796Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileProviders.Abstractions.dll2025-10-29 13:36:05.371NT AUTHORITY\SYSTEM +11241100x800000000000000012797Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileProviders.Composite.dll2025-10-29 13:36:05.373NT AUTHORITY\SYSTEM +11241100x800000000000000012798Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileProviders.Embedded.dll2025-10-29 13:36:05.373NT AUTHORITY\SYSTEM +11241100x800000000000000012799Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileProviders.Physical.dll2025-10-29 13:36:05.373NT AUTHORITY\SYSTEM +11241100x800000000000000012800Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileSystemGlobbing.dll2025-10-29 13:36:05.373NT AUTHORITY\SYSTEM +11241100x800000000000000012801Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Hosting.Abstractions.dll2025-10-29 13:36:05.373NT AUTHORITY\SYSTEM +11241100x800000000000000012802Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Hosting.dll2025-10-29 13:36:05.375NT AUTHORITY\SYSTEM +11241100x800000000000000012803Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Hosting.WindowsServices.dll2025-10-29 13:36:05.375NT AUTHORITY\SYSTEM +11241100x800000000000000012804Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Http.dll2025-10-29 13:36:05.375NT AUTHORITY\SYSTEM +11241100x800000000000000012805Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Identity.Core.dll2025-10-29 13:36:05.375NT AUTHORITY\SYSTEM +11241100x800000000000000012806Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Identity.Stores.dll2025-10-29 13:36:05.375NT AUTHORITY\SYSTEM +11241100x800000000000000012807Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Localization.Abstractions.dll2025-10-29 13:36:05.375NT AUTHORITY\SYSTEM +11241100x800000000000000012808Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Localization.dll2025-10-29 13:36:05.377NT AUTHORITY\SYSTEM +11241100x800000000000000012809Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Abstractions.dll2025-10-29 13:36:05.377NT AUTHORITY\SYSTEM +11241100x800000000000000012810Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Configuration.dll2025-10-29 13:36:05.377NT AUTHORITY\SYSTEM +11241100x800000000000000012811Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Console.dll2025-10-29 13:36:05.377NT AUTHORITY\SYSTEM +11241100x800000000000000012812Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Debug.dll2025-10-29 13:36:05.377NT AUTHORITY\SYSTEM +11241100x800000000000000012813Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.dll2025-10-29 13:36:05.377NT AUTHORITY\SYSTEM +11241100x800000000000000012814Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.EventLog.dll2025-10-29 13:36:05.379NT AUTHORITY\SYSTEM +11241100x800000000000000012815Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.EventSource.dll2025-10-29 13:36:05.379NT AUTHORITY\SYSTEM +11241100x800000000000000012816Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.TraceSource.dll2025-10-29 13:36:05.379NT AUTHORITY\SYSTEM +11241100x800000000000000012817Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.ObjectPool.dll2025-10-29 13:36:05.379NT AUTHORITY\SYSTEM +11241100x800000000000000012818Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.ConfigurationExtensions.dll2025-10-29 13:36:05.379NT AUTHORITY\SYSTEM +11241100x800000000000000012819Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.DataAnnotations.dll2025-10-29 13:36:05.381NT AUTHORITY\SYSTEM +11241100x800000000000000012820Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.dll2025-10-29 13:36:05.381NT AUTHORITY\SYSTEM +11241100x800000000000000012821Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Primitives.dll2025-10-29 13:36:05.381NT AUTHORITY\SYSTEM +11241100x800000000000000012822Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.WebEncoders.dll2025-10-29 13:36:05.381NT AUTHORITY\SYSTEM +11241100x800000000000000012823Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.JSInterop.dll2025-10-29 13:36:05.381NT AUTHORITY\SYSTEM +11241100x800000000000000012824Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Net.Http.Headers.dll2025-10-29 13:36:05.383NT AUTHORITY\SYSTEM +11241100x800000000000000012825Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Telemetry.dll2025-10-29 13:36:05.383NT AUTHORITY\SYSTEM +11241100x800000000000000012826Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.VisualBasic.Core.dll2025-10-29 13:36:05.383NT AUTHORITY\SYSTEM +11241100x800000000000000012827Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.VisualBasic.dll2025-10-29 13:36:05.383NT AUTHORITY\SYSTEM +11241100x800000000000000012828Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Primitives.dll2025-10-29 13:36:05.383NT AUTHORITY\SYSTEM +11241100x800000000000000012829Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Registry.dll2025-10-29 13:36:05.385NT AUTHORITY\SYSTEM +11241100x800000000000000012830Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Microsoft.Windows.SDK.NET.dll2025-10-29 13:36:05.385NT AUTHORITY\SYSTEM +11241100x800000000000000012831Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\mscordaccore.dll2025-10-29 13:36:05.385NT AUTHORITY\SYSTEM +11241100x800000000000000012832Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\mscordaccore_amd64_amd64_9.0.625.26613.dll2025-10-29 13:36:05.385NT AUTHORITY\SYSTEM +11241100x800000000000000012833Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\mscordbi.dll2025-10-29 13:36:05.385NT AUTHORITY\SYSTEM +11241100x800000000000000012834Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\mscorlib.dll2025-10-29 13:36:05.385NT AUTHORITY\SYSTEM +11241100x800000000000000012835Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\mscorrc.dll2025-10-29 13:36:05.387NT AUTHORITY\SYSTEM +11241100x800000000000000012836Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\netstandard.dll2025-10-29 13:36:05.387NT AUTHORITY\SYSTEM +11241100x800000000000000012837Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.AppContext.dll2025-10-29 13:36:05.387NT AUTHORITY\SYSTEM +11241100x800000000000000012838Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Buffers.dll2025-10-29 13:36:05.387NT AUTHORITY\SYSTEM +11241100x800000000000000012839Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ClientModel.dll2025-10-29 13:36:05.387NT AUTHORITY\SYSTEM +11241100x800000000000000012840Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Collections.Concurrent.dll2025-10-29 13:36:05.389NT AUTHORITY\SYSTEM +11241100x800000000000000012841Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Collections.dll2025-10-29 13:36:05.389NT AUTHORITY\SYSTEM +11241100x800000000000000012842Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Collections.Immutable.dll2025-10-29 13:36:05.389NT AUTHORITY\SYSTEM +11241100x800000000000000012843Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Collections.NonGeneric.dll2025-10-29 13:36:05.389NT AUTHORITY\SYSTEM +11241100x800000000000000012844Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Collections.Specialized.dll2025-10-29 13:36:05.391NT AUTHORITY\SYSTEM +11241100x800000000000000012845Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ComponentModel.Annotations.dll2025-10-29 13:36:05.391NT AUTHORITY\SYSTEM +11241100x800000000000000012846Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ComponentModel.DataAnnotations.dll2025-10-29 13:36:05.391NT AUTHORITY\SYSTEM +11241100x800000000000000012847Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ComponentModel.dll2025-10-29 13:36:05.391NT AUTHORITY\SYSTEM +11241100x800000000000000012848Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ComponentModel.EventBasedAsync.dll2025-10-29 13:36:05.391NT AUTHORITY\SYSTEM +11241100x800000000000000012849Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ComponentModel.Primitives.dll2025-10-29 13:36:05.391NT AUTHORITY\SYSTEM +11241100x800000000000000012850Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ComponentModel.TypeConverter.dll2025-10-29 13:36:05.393NT AUTHORITY\SYSTEM +11241100x800000000000000012851Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Configuration.dll2025-10-29 13:36:05.393NT AUTHORITY\SYSTEM +11241100x800000000000000012852Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Console.dll2025-10-29 13:36:05.393NT AUTHORITY\SYSTEM +11241100x800000000000000012853Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Core.dll2025-10-29 13:36:05.393NT AUTHORITY\SYSTEM +11241100x800000000000000012854Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Data.Common.dll2025-10-29 13:36:05.393NT AUTHORITY\SYSTEM +11241100x800000000000000012855Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.395{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Data.DataSetExtensions.dll2025-10-29 13:36:05.393NT AUTHORITY\SYSTEM +11241100x800000000000000012856Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.395{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Data.dll2025-10-29 13:36:05.395NT AUTHORITY\SYSTEM +11241100x800000000000000012857Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.395{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.Contracts.dll2025-10-29 13:36:05.395NT AUTHORITY\SYSTEM +11241100x800000000000000012858Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.397{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.Debug.dll2025-10-29 13:36:05.397NT AUTHORITY\SYSTEM +11241100x800000000000000012859Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.397{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.DiagnosticSource.dll2025-10-29 13:36:05.397NT AUTHORITY\SYSTEM +11241100x800000000000000012860Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.397{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.EventLog.dll2025-10-29 13:36:05.397NT AUTHORITY\SYSTEM +11241100x800000000000000012861Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.397{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.EventLog.Messages.dll2025-10-29 13:36:05.397NT AUTHORITY\SYSTEM +11241100x800000000000000012862Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.399{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.FileVersionInfo.dll2025-10-29 13:36:05.397NT AUTHORITY\SYSTEM +11241100x800000000000000012863Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.399{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.Process.dll2025-10-29 13:36:05.399NT AUTHORITY\SYSTEM +11241100x800000000000000012864Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.399{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.StackTrace.dll2025-10-29 13:36:05.399NT AUTHORITY\SYSTEM +11241100x800000000000000012865Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.399{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.TextWriterTraceListener.dll2025-10-29 13:36:05.399NT AUTHORITY\SYSTEM +11241100x800000000000000012866Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.399{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.Tools.dll2025-10-29 13:36:05.399NT AUTHORITY\SYSTEM +11241100x800000000000000012867Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.399{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.TraceSource.dll2025-10-29 13:36:05.399NT AUTHORITY\SYSTEM +11241100x800000000000000012868Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.401{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Diagnostics.Tracing.dll2025-10-29 13:36:05.399NT AUTHORITY\SYSTEM +11241100x800000000000000012869Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.405{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.dll2025-10-29 13:36:05.403NT AUTHORITY\SYSTEM +11241100x800000000000000012870Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.405{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Drawing.dll2025-10-29 13:36:05.405NT AUTHORITY\SYSTEM +11241100x800000000000000012871Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.405{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Drawing.Primitives.dll2025-10-29 13:36:05.405NT AUTHORITY\SYSTEM +11241100x800000000000000012872Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.405{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Dynamic.Runtime.dll2025-10-29 13:36:05.405NT AUTHORITY\SYSTEM +11241100x800000000000000012873Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.407{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Formats.Asn1.dll2025-10-29 13:36:05.405NT AUTHORITY\SYSTEM +11241100x800000000000000012874Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.407{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Formats.Tar.dll2025-10-29 13:36:05.407NT AUTHORITY\SYSTEM +11241100x800000000000000012875Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.407{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Globalization.Calendars.dll2025-10-29 13:36:05.407NT AUTHORITY\SYSTEM +11241100x800000000000000012876Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.407{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Globalization.dll2025-10-29 13:36:05.407NT AUTHORITY\SYSTEM +11241100x800000000000000012877Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Globalization.Extensions.dll2025-10-29 13:36:05.409NT AUTHORITY\SYSTEM +11241100x800000000000000012878Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.Compression.Brotli.dll2025-10-29 13:36:05.409NT AUTHORITY\SYSTEM +11241100x800000000000000012879Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.Compression.dll2025-10-29 13:36:05.409NT AUTHORITY\SYSTEM +11241100x800000000000000012880Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.Compression.FileSystem.dll2025-10-29 13:36:05.409NT AUTHORITY\SYSTEM +11241100x800000000000000012881Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.Compression.Native.dll2025-10-29 13:36:05.409NT AUTHORITY\SYSTEM +11241100x800000000000000012882Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.Compression.ZipFile.dll2025-10-29 13:36:05.411NT AUTHORITY\SYSTEM +11241100x800000000000000012883Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.dll2025-10-29 13:36:05.411NT AUTHORITY\SYSTEM +11241100x800000000000000012884Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.AccessControl.dll2025-10-29 13:36:05.411NT AUTHORITY\SYSTEM +11241100x800000000000000012885Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.dll2025-10-29 13:36:05.411NT AUTHORITY\SYSTEM +11241100x800000000000000012886Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.DriveInfo.dll2025-10-29 13:36:05.411NT AUTHORITY\SYSTEM +11241100x800000000000000012887Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.Primitives.dll2025-10-29 13:36:05.411NT AUTHORITY\SYSTEM +11241100x800000000000000012888Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.Watcher.dll2025-10-29 13:36:05.411NT AUTHORITY\SYSTEM +11241100x800000000000000012889Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.IsolatedStorage.dll2025-10-29 13:36:05.413NT AUTHORITY\SYSTEM +11241100x800000000000000012890Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.MemoryMappedFiles.dll2025-10-29 13:36:05.413NT AUTHORITY\SYSTEM +11241100x800000000000000012891Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.Pipelines.dll2025-10-29 13:36:05.413NT AUTHORITY\SYSTEM +11241100x800000000000000012892Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.Pipes.AccessControl.dll2025-10-29 13:36:05.413NT AUTHORITY\SYSTEM +11241100x800000000000000012893Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.Pipes.dll2025-10-29 13:36:05.413NT AUTHORITY\SYSTEM +11241100x800000000000000012894Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.IO.UnmanagedMemoryStream.dll2025-10-29 13:36:05.415NT AUTHORITY\SYSTEM +11241100x800000000000000012895Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Linq.dll2025-10-29 13:36:05.415NT AUTHORITY\SYSTEM +11241100x800000000000000012896Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Linq.Expressions.dll2025-10-29 13:36:05.415NT AUTHORITY\SYSTEM +11241100x800000000000000012897Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Linq.Parallel.dll2025-10-29 13:36:05.415NT AUTHORITY\SYSTEM +11241100x800000000000000012898Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Linq.Queryable.dll2025-10-29 13:36:05.415NT AUTHORITY\SYSTEM +11241100x800000000000000012899Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Memory.Data.dll2025-10-29 13:36:05.415NT AUTHORITY\SYSTEM +11241100x800000000000000012900Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Memory.dll2025-10-29 13:36:05.417NT AUTHORITY\SYSTEM +11241100x800000000000000012901Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.dll2025-10-29 13:36:05.417NT AUTHORITY\SYSTEM +11241100x800000000000000012902Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Http.dll2025-10-29 13:36:05.417NT AUTHORITY\SYSTEM +11241100x800000000000000012903Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Http.Json.dll2025-10-29 13:36:05.417NT AUTHORITY\SYSTEM +11241100x800000000000000012904Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.HttpListener.dll2025-10-29 13:36:05.417NT AUTHORITY\SYSTEM +11241100x800000000000000012905Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Mail.dll2025-10-29 13:36:05.417NT AUTHORITY\SYSTEM +11241100x800000000000000012906Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.NameResolution.dll2025-10-29 13:36:05.419NT AUTHORITY\SYSTEM +11241100x800000000000000012907Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.NetworkInformation.dll2025-10-29 13:36:05.419NT AUTHORITY\SYSTEM +11241100x800000000000000012908Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Ping.dll2025-10-29 13:36:05.419NT AUTHORITY\SYSTEM +11241100x800000000000000012909Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Primitives.dll2025-10-29 13:36:05.419NT AUTHORITY\SYSTEM +11241100x800000000000000012910Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Quic.dll2025-10-29 13:36:05.419NT AUTHORITY\SYSTEM +11241100x800000000000000012911Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Requests.dll2025-10-29 13:36:05.419NT AUTHORITY\SYSTEM +11241100x800000000000000012912Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Security.dll2025-10-29 13:36:05.419NT AUTHORITY\SYSTEM +11241100x800000000000000012913Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.ServicePoint.dll2025-10-29 13:36:05.421NT AUTHORITY\SYSTEM +11241100x800000000000000012914Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.Sockets.dll2025-10-29 13:36:05.421NT AUTHORITY\SYSTEM +11241100x800000000000000012915Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.WebClient.dll2025-10-29 13:36:05.421NT AUTHORITY\SYSTEM +11241100x800000000000000012916Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.WebHeaderCollection.dll2025-10-29 13:36:05.421NT AUTHORITY\SYSTEM +11241100x800000000000000012917Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.WebProxy.dll2025-10-29 13:36:05.421NT AUTHORITY\SYSTEM +11241100x800000000000000012918Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.WebSockets.Client.dll2025-10-29 13:36:05.423NT AUTHORITY\SYSTEM +11241100x800000000000000012919Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Net.WebSockets.dll2025-10-29 13:36:05.423NT AUTHORITY\SYSTEM +11241100x800000000000000012920Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Numerics.dll2025-10-29 13:36:05.423NT AUTHORITY\SYSTEM +11241100x800000000000000012921Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Numerics.Vectors.dll2025-10-29 13:36:05.423NT AUTHORITY\SYSTEM +11241100x800000000000000012922Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ObjectModel.dll2025-10-29 13:36:05.423NT AUTHORITY\SYSTEM +11241100x800000000000000012923Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Private.CoreLib.dll2025-10-29 13:36:05.425NT AUTHORITY\SYSTEM +11241100x800000000000000012924Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Private.DataContractSerialization.dll2025-10-29 13:36:05.425NT AUTHORITY\SYSTEM +11241100x800000000000000012925Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Private.Uri.dll2025-10-29 13:36:05.425NT AUTHORITY\SYSTEM +11241100x800000000000000012926Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Private.Xml.dll2025-10-29 13:36:05.425NT AUTHORITY\SYSTEM +11241100x800000000000000012927Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Private.Xml.Linq.dll2025-10-29 13:36:05.425NT AUTHORITY\SYSTEM +11241100x800000000000000012928Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.DispatchProxy.dll2025-10-29 13:36:05.425NT AUTHORITY\SYSTEM +11241100x800000000000000012929Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.dll2025-10-29 13:36:05.427NT AUTHORITY\SYSTEM +11241100x800000000000000012930Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.dll2025-10-29 13:36:05.427NT AUTHORITY\SYSTEM +11241100x800000000000000012931Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.ILGeneration.dll2025-10-29 13:36:05.427NT AUTHORITY\SYSTEM +11241100x800000000000000012932Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.Lightweight.dll2025-10-29 13:36:05.427NT AUTHORITY\SYSTEM +11241100x800000000000000012933Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.Extensions.dll2025-10-29 13:36:05.429NT AUTHORITY\SYSTEM +11241100x800000000000000012934Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.Metadata.dll2025-10-29 13:36:05.429NT AUTHORITY\SYSTEM +11241100x800000000000000012935Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.Primitives.dll2025-10-29 13:36:05.429NT AUTHORITY\SYSTEM +11241100x800000000000000012936Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Reflection.TypeExtensions.dll2025-10-29 13:36:05.429NT AUTHORITY\SYSTEM +11241100x800000000000000012937Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Resources.Reader.dll2025-10-29 13:36:05.429NT AUTHORITY\SYSTEM +11241100x800000000000000012938Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.430{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Resources.ResourceManager.dll2025-10-29 13:36:05.430NT AUTHORITY\SYSTEM +11241100x800000000000000012939Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.430{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Resources.Writer.dll2025-10-29 13:36:05.430NT AUTHORITY\SYSTEM +11241100x800000000000000012940Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.430{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.CompilerServices.Unsafe.dll2025-10-29 13:36:05.430NT AUTHORITY\SYSTEM +11241100x800000000000000012941Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.430{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.CompilerServices.VisualC.dll2025-10-29 13:36:05.430NT AUTHORITY\SYSTEM +11241100x800000000000000012942Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.432{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.dll2025-10-29 13:36:05.430NT AUTHORITY\SYSTEM +11241100x800000000000000012943Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.432{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Extensions.dll2025-10-29 13:36:05.432NT AUTHORITY\SYSTEM +11241100x800000000000000012944Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.432{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Handles.dll2025-10-29 13:36:05.432NT AUTHORITY\SYSTEM +11241100x800000000000000012945Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.432{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.dll2025-10-29 13:36:05.432NT AUTHORITY\SYSTEM +11241100x800000000000000012946Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.432{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.JavaScript.dll2025-10-29 13:36:05.432NT AUTHORITY\SYSTEM +11241100x800000000000000012947Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.432{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.RuntimeInformation.dll2025-10-29 13:36:05.432NT AUTHORITY\SYSTEM +11241100x800000000000000012948Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.434{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Intrinsics.dll2025-10-29 13:36:05.434NT AUTHORITY\SYSTEM +11241100x800000000000000012949Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.434{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Loader.dll2025-10-29 13:36:05.434NT AUTHORITY\SYSTEM +11241100x800000000000000012950Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.434{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Numerics.dll2025-10-29 13:36:05.434NT AUTHORITY\SYSTEM +11241100x800000000000000012951Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.434{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.dll2025-10-29 13:36:05.434NT AUTHORITY\SYSTEM +11241100x800000000000000012952Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.434{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Formatters.dll2025-10-29 13:36:05.434NT AUTHORITY\SYSTEM +11241100x800000000000000012953Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Json.dll2025-10-29 13:36:05.434NT AUTHORITY\SYSTEM +11241100x800000000000000012954Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Primitives.dll2025-10-29 13:36:05.436NT AUTHORITY\SYSTEM +11241100x800000000000000012955Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Xml.dll2025-10-29 13:36:05.436NT AUTHORITY\SYSTEM +11241100x800000000000000012956Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.AccessControl.dll2025-10-29 13:36:05.436NT AUTHORITY\SYSTEM +11241100x800000000000000012957Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Claims.dll2025-10-29 13:36:05.436NT AUTHORITY\SYSTEM +11241100x800000000000000012958Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Algorithms.dll2025-10-29 13:36:05.438NT AUTHORITY\SYSTEM +11241100x800000000000000012959Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Cng.dll2025-10-29 13:36:05.438NT AUTHORITY\SYSTEM +11241100x800000000000000012960Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Csp.dll2025-10-29 13:36:05.438NT AUTHORITY\SYSTEM +11241100x800000000000000012961Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.dll2025-10-29 13:36:05.438NT AUTHORITY\SYSTEM +11241100x800000000000000012962Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Encoding.dll2025-10-29 13:36:05.438NT AUTHORITY\SYSTEM +11241100x800000000000000012963Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.OpenSsl.dll2025-10-29 13:36:05.441NT AUTHORITY\SYSTEM +11241100x800000000000000012964Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Pkcs.dll2025-10-29 13:36:05.441NT AUTHORITY\SYSTEM +11241100x800000000000000012965Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Primitives.dll2025-10-29 13:36:05.441NT AUTHORITY\SYSTEM +11241100x800000000000000012966Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.X509Certificates.dll2025-10-29 13:36:05.441NT AUTHORITY\SYSTEM +11241100x800000000000000012967Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Xml.dll2025-10-29 13:36:05.441NT AUTHORITY\SYSTEM +11241100x800000000000000012968Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.dll2025-10-29 13:36:05.443NT AUTHORITY\SYSTEM +11241100x800000000000000012969Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Principal.dll2025-10-29 13:36:05.443NT AUTHORITY\SYSTEM +11241100x800000000000000012970Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.Principal.Windows.dll2025-10-29 13:36:05.443NT AUTHORITY\SYSTEM +11241100x800000000000000012971Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Security.SecureString.dll2025-10-29 13:36:05.443NT AUTHORITY\SYSTEM +11241100x800000000000000012972Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ServiceModel.Web.dll2025-10-29 13:36:05.443NT AUTHORITY\SYSTEM +11241100x800000000000000012973Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ServiceProcess.dll2025-10-29 13:36:05.443NT AUTHORITY\SYSTEM +11241100x800000000000000012974Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ServiceProcess.ServiceController.dll2025-10-29 13:36:05.445NT AUTHORITY\SYSTEM +11241100x800000000000000012975Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Text.Encoding.CodePages.dll2025-10-29 13:36:05.445NT AUTHORITY\SYSTEM +11241100x800000000000000012976Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Text.Encoding.dll2025-10-29 13:36:05.445NT AUTHORITY\SYSTEM +11241100x800000000000000012977Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Text.Encoding.Extensions.dll2025-10-29 13:36:05.445NT AUTHORITY\SYSTEM +11241100x800000000000000012978Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Text.Encodings.Web.dll2025-10-29 13:36:05.445NT AUTHORITY\SYSTEM +11241100x800000000000000012979Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.446{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Text.Json.dll2025-10-29 13:36:05.446NT AUTHORITY\SYSTEM +11241100x800000000000000012980Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.446{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Text.RegularExpressions.dll2025-10-29 13:36:05.446NT AUTHORITY\SYSTEM +11241100x800000000000000012981Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.446{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.Channels.dll2025-10-29 13:36:05.446NT AUTHORITY\SYSTEM +11241100x800000000000000012982Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.446{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.dll2025-10-29 13:36:05.446NT AUTHORITY\SYSTEM +11241100x800000000000000012983Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.448{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.Overlapped.dll2025-10-29 13:36:05.446NT AUTHORITY\SYSTEM +11241100x800000000000000012984Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.448{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.RateLimiting.dll2025-10-29 13:36:05.448NT AUTHORITY\SYSTEM +11241100x800000000000000012985Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.448{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Dataflow.dll2025-10-29 13:36:05.448NT AUTHORITY\SYSTEM +11241100x800000000000000012986Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.450{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.dll2025-10-29 13:36:05.450NT AUTHORITY\SYSTEM +11241100x800000000000000012987Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.450{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Extensions.dll2025-10-29 13:36:05.450NT AUTHORITY\SYSTEM +11241100x800000000000000012988Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.450{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Parallel.dll2025-10-29 13:36:05.450NT AUTHORITY\SYSTEM +11241100x800000000000000012989Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.450{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.Thread.dll2025-10-29 13:36:05.450NT AUTHORITY\SYSTEM +11241100x800000000000000012990Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.450{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.ThreadPool.dll2025-10-29 13:36:05.450NT AUTHORITY\SYSTEM +11241100x800000000000000012991Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Threading.Timer.dll2025-10-29 13:36:05.452NT AUTHORITY\SYSTEM +11241100x800000000000000012992Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Transactions.dll2025-10-29 13:36:05.452NT AUTHORITY\SYSTEM +11241100x800000000000000012993Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Transactions.Local.dll2025-10-29 13:36:05.452NT AUTHORITY\SYSTEM +11241100x800000000000000012994Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.ValueTuple.dll2025-10-29 13:36:05.452NT AUTHORITY\SYSTEM +11241100x800000000000000012995Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Web.dll2025-10-29 13:36:05.452NT AUTHORITY\SYSTEM +11241100x800000000000000012996Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Web.HttpUtility.dll2025-10-29 13:36:05.452NT AUTHORITY\SYSTEM +11241100x800000000000000012997Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Windows.dll2025-10-29 13:36:05.454NT AUTHORITY\SYSTEM +11241100x800000000000000012998Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.dll2025-10-29 13:36:05.454NT AUTHORITY\SYSTEM +11241100x800000000000000012999Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.Linq.dll2025-10-29 13:36:05.454NT AUTHORITY\SYSTEM +11241100x800000000000000013000Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.ReaderWriter.dll2025-10-29 13:36:05.454NT AUTHORITY\SYSTEM +11241100x800000000000000013001Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.Serialization.dll2025-10-29 13:36:05.454NT AUTHORITY\SYSTEM +11241100x800000000000000013002Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.XDocument.dll2025-10-29 13:36:05.456NT AUTHORITY\SYSTEM +11241100x800000000000000013003Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.XmlDocument.dll2025-10-29 13:36:05.456NT AUTHORITY\SYSTEM +11241100x800000000000000013004Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.XmlSerializer.dll2025-10-29 13:36:05.456NT AUTHORITY\SYSTEM +11241100x800000000000000013005Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.XPath.dll2025-10-29 13:36:05.456NT AUTHORITY\SYSTEM +11241100x800000000000000013006Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\System.Xml.XPath.XDocument.dll2025-10-29 13:36:05.456NT AUTHORITY\SYSTEM +11241100x800000000000000013007Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\VoiceClarity.dll2025-10-29 13:36:05.458NT AUTHORITY\SYSTEM +11241100x800000000000000013008Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\VoiceClarityManaged.dll2025-10-29 13:36:05.458NT AUTHORITY\SYSTEM +11241100x800000000000000013009Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\VoiceFabric.dll2025-10-29 13:36:05.458NT AUTHORITY\SYSTEM +11241100x800000000000000013010Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\VoiceFabricManaged.dll2025-10-29 13:36:05.458NT AUTHORITY\SYSTEM +11241100x800000000000000013011Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\Windows.AI.AgentIsolationEnvironment.dll2025-10-29 13:36:05.458NT AUTHORITY\SYSTEM +11241100x800000000000000013012Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Copilot_1.25102.233.0_x64__8wekyb3d8bbwe\WindowsBase.dll2025-10-29 13:36:05.458NT AUTHORITY\SYSTEM +11241100x800000000000000013013Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:05.993{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{062BEE2E-0FD7-4E1D-93C8-6F35C3799E48}\ssshim.dll2025-10-29 13:36:05.993NT AUTHORITY\SYSTEM +11241100x800000000000000013014Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:07.122{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{BD62A0E9-DE99-447C-8D9A-81B8F6B17091}\ssshim.dll2025-10-29 13:36:07.120NT AUTHORITY\SYSTEM +11241100x800000000000000013015Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:08.272{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{E5FE2BCC-4508-4977-AA1C-30CBCF40CE8B}\ssshim.dll2025-10-29 13:36:08.272NT AUTHORITY\SYSTEM +11241100x800000000000000013016Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:09.413{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{C6F4BC8A-AE62-4712-BBD2-F2BA26C2A354}\ssshim.dll2025-10-29 13:36:09.411NT AUTHORITY\SYSTEM +154100x800000000000000013017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:36:10.623{8223a6b9-184a-6902-eb02-000000002b00}9764C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000013018Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:10.830{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{F390AFE1-79FB-4CCD-AF15-B01320CA5DE8}\ssshim.dll2025-10-29 13:36:10.828NT AUTHORITY\SYSTEM +11241100x800000000000000013019Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.629{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Accessibility.dll2025-10-29 13:36:11.629NT AUTHORITY\SYSTEM +11241100x800000000000000013020Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.629{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Clipper2Lib.dll2025-10-29 13:36:11.629NT AUTHORITY\SYSTEM +11241100x800000000000000013021Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.629{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\clretwrc.dll2025-10-29 13:36:11.629NT AUTHORITY\SYSTEM +11241100x800000000000000013022Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.631{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\clrgc.dll2025-10-29 13:36:11.631NT AUTHORITY\SYSTEM +11241100x800000000000000013023Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.631{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\clrgcexp.dll2025-10-29 13:36:11.631NT AUTHORITY\SYSTEM +11241100x800000000000000013024Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.631{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\clrjit.dll2025-10-29 13:36:11.631NT AUTHORITY\SYSTEM +11241100x800000000000000013025Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.631{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ConnectedDevicesDevKit.Projection.dll2025-10-29 13:36:11.631NT AUTHORITY\SYSTEM +11241100x800000000000000013026Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.647{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\coreclr.dll2025-10-29 13:36:11.631NT AUTHORITY\SYSTEM +11241100x800000000000000013027Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:11.647{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\createdump.exe2025-10-29 13:36:11.647NT AUTHORITY\SYSTEM +11241100x800000000000000013028Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.649{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\PresentationCore.resources.dll2025-10-29 13:36:11.649NT AUTHORITY\SYSTEM +11241100x800000000000000013029Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.649{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\PresentationFramework.resources.dll2025-10-29 13:36:11.649NT AUTHORITY\SYSTEM +11241100x800000000000000013030Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.651{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\PresentationUI.resources.dll2025-10-29 13:36:11.651NT AUTHORITY\SYSTEM +11241100x800000000000000013031Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.651{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\ReachFramework.resources.dll2025-10-29 13:36:11.651NT AUTHORITY\SYSTEM +11241100x800000000000000013032Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.653{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.653NT AUTHORITY\SYSTEM +11241100x800000000000000013033Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.653{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.653NT AUTHORITY\SYSTEM +11241100x800000000000000013034Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.655{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\System.Xaml.resources.dll2025-10-29 13:36:11.653NT AUTHORITY\SYSTEM +11241100x800000000000000013035Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.655{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\UIAutomationClient.resources.dll2025-10-29 13:36:11.655NT AUTHORITY\SYSTEM +11241100x800000000000000013036Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.655{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.655NT AUTHORITY\SYSTEM +11241100x800000000000000013037Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.657{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\UIAutomationProvider.resources.dll2025-10-29 13:36:11.657NT AUTHORITY\SYSTEM +11241100x800000000000000013038Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.657{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\UIAutomationTypes.resources.dll2025-10-29 13:36:11.657NT AUTHORITY\SYSTEM +11241100x800000000000000013039Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.659{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\cs\WindowsBase.resources.dll2025-10-29 13:36:11.659NT AUTHORITY\SYSTEM +11241100x800000000000000013040Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.659{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\PresentationCore.resources.dll2025-10-29 13:36:11.659NT AUTHORITY\SYSTEM +11241100x800000000000000013041Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.661{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\PresentationFramework.resources.dll2025-10-29 13:36:11.661NT AUTHORITY\SYSTEM +11241100x800000000000000013042Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.661{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\PresentationUI.resources.dll2025-10-29 13:36:11.661NT AUTHORITY\SYSTEM +11241100x800000000000000013043Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.663{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\ReachFramework.resources.dll2025-10-29 13:36:11.663NT AUTHORITY\SYSTEM +11241100x800000000000000013044Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.663{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.663NT AUTHORITY\SYSTEM +11241100x800000000000000013045Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.665{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.665NT AUTHORITY\SYSTEM +11241100x800000000000000013046Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.665{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\System.Xaml.resources.dll2025-10-29 13:36:11.665NT AUTHORITY\SYSTEM +11241100x800000000000000013047Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.665{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\UIAutomationClient.resources.dll2025-10-29 13:36:11.665NT AUTHORITY\SYSTEM +11241100x800000000000000013048Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.667{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.667NT AUTHORITY\SYSTEM +11241100x800000000000000013049Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.667{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\UIAutomationProvider.resources.dll2025-10-29 13:36:11.667NT AUTHORITY\SYSTEM +11241100x800000000000000013050Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.667{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\UIAutomationTypes.resources.dll2025-10-29 13:36:11.667NT AUTHORITY\SYSTEM +11241100x800000000000000013051Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.669{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\de\WindowsBase.resources.dll2025-10-29 13:36:11.669NT AUTHORITY\SYSTEM +11241100x800000000000000013052Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.669{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\DirectWriteForwarder.dll2025-10-29 13:36:11.669NT AUTHORITY\SYSTEM +11241100x800000000000000013053Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.671{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\DotNetty.Buffers.dll2025-10-29 13:36:11.671NT AUTHORITY\SYSTEM +11241100x800000000000000013054Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.671{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\DotNetty.Codecs.dll2025-10-29 13:36:11.671NT AUTHORITY\SYSTEM +11241100x800000000000000013055Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.673{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\DotNetty.Codecs.Protobuf.dll2025-10-29 13:36:11.671NT AUTHORITY\SYSTEM +11241100x800000000000000013056Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.673{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\DotNetty.Common.dll2025-10-29 13:36:11.673NT AUTHORITY\SYSTEM +11241100x800000000000000013057Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.675{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\DotNetty.Transport.dll2025-10-29 13:36:11.673NT AUTHORITY\SYSTEM +11241100x800000000000000013058Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.677{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\PresentationCore.resources.dll2025-10-29 13:36:11.675NT AUTHORITY\SYSTEM +11241100x800000000000000013059Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.677{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\PresentationFramework.resources.dll2025-10-29 13:36:11.677NT AUTHORITY\SYSTEM +11241100x800000000000000013060Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.679{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\PresentationUI.resources.dll2025-10-29 13:36:11.677NT AUTHORITY\SYSTEM +11241100x800000000000000013061Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.679{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\ReachFramework.resources.dll2025-10-29 13:36:11.679NT AUTHORITY\SYSTEM +11241100x800000000000000013062Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.679{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.679NT AUTHORITY\SYSTEM +11241100x800000000000000013063Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.681{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.681NT AUTHORITY\SYSTEM +11241100x800000000000000013064Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.681{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\System.Xaml.resources.dll2025-10-29 13:36:11.681NT AUTHORITY\SYSTEM +11241100x800000000000000013065Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.681{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\UIAutomationClient.resources.dll2025-10-29 13:36:11.681NT AUTHORITY\SYSTEM +11241100x800000000000000013066Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.683{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.683NT AUTHORITY\SYSTEM +11241100x800000000000000013067Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.683{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\UIAutomationProvider.resources.dll2025-10-29 13:36:11.683NT AUTHORITY\SYSTEM +11241100x800000000000000013068Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.685{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\UIAutomationTypes.resources.dll2025-10-29 13:36:11.683NT AUTHORITY\SYSTEM +11241100x800000000000000013069Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.685{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\es\WindowsBase.resources.dll2025-10-29 13:36:11.685NT AUTHORITY\SYSTEM +11241100x800000000000000013070Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.685{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\PresentationCore.resources.dll2025-10-29 13:36:11.685NT AUTHORITY\SYSTEM +11241100x800000000000000013071Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.687{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\PresentationFramework.resources.dll2025-10-29 13:36:11.687NT AUTHORITY\SYSTEM +11241100x800000000000000013072Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.687{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\PresentationUI.resources.dll2025-10-29 13:36:11.687NT AUTHORITY\SYSTEM +11241100x800000000000000013073Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.687{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\ReachFramework.resources.dll2025-10-29 13:36:11.687NT AUTHORITY\SYSTEM +11241100x800000000000000013074Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.687{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.687NT AUTHORITY\SYSTEM +11241100x800000000000000013075Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.689{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.689NT AUTHORITY\SYSTEM +11241100x800000000000000013076Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.689{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\System.Xaml.resources.dll2025-10-29 13:36:11.689NT AUTHORITY\SYSTEM +11241100x800000000000000013077Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.689{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\UIAutomationClient.resources.dll2025-10-29 13:36:11.689NT AUTHORITY\SYSTEM +11241100x800000000000000013078Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.689{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.689NT AUTHORITY\SYSTEM +11241100x800000000000000013079Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.691{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\UIAutomationProvider.resources.dll2025-10-29 13:36:11.689NT AUTHORITY\SYSTEM +11241100x800000000000000013080Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.691{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\UIAutomationTypes.resources.dll2025-10-29 13:36:11.691NT AUTHORITY\SYSTEM +11241100x800000000000000013081Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.691{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\fr\WindowsBase.resources.dll2025-10-29 13:36:11.691NT AUTHORITY\SYSTEM +11241100x800000000000000013082Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.691{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Google.Protobuf.dll2025-10-29 13:36:11.691NT AUTHORITY\SYSTEM +11241100x800000000000000013083Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.693{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Hali4831.MixERP.Net.VCards.dll2025-10-29 13:36:11.691NT AUTHORITY\SYSTEM +11241100x800000000000000013084Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.693{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\hostfxr.dll2025-10-29 13:36:11.693NT AUTHORITY\SYSTEM +11241100x800000000000000013085Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.693{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\hostpolicy.dll2025-10-29 13:36:11.693NT AUTHORITY\SYSTEM +11241100x800000000000000013086Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.693{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\HtmlAgilityPack.dll2025-10-29 13:36:11.693NT AUTHORITY\SYSTEM +11241100x800000000000000013087Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.693{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\PresentationCore.resources.dll2025-10-29 13:36:11.693NT AUTHORITY\SYSTEM +11241100x800000000000000013088Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.694{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\PresentationFramework.resources.dll2025-10-29 13:36:11.694NT AUTHORITY\SYSTEM +11241100x800000000000000013089Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.694{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\PresentationUI.resources.dll2025-10-29 13:36:11.694NT AUTHORITY\SYSTEM +11241100x800000000000000013090Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.694{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\ReachFramework.resources.dll2025-10-29 13:36:11.694NT AUTHORITY\SYSTEM +11241100x800000000000000013091Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.696{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.696NT AUTHORITY\SYSTEM +11241100x800000000000000013092Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.696{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.696NT AUTHORITY\SYSTEM +11241100x800000000000000013093Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.698{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\System.Xaml.resources.dll2025-10-29 13:36:11.696NT AUTHORITY\SYSTEM +11241100x800000000000000013094Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.698{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\UIAutomationClient.resources.dll2025-10-29 13:36:11.698NT AUTHORITY\SYSTEM +11241100x800000000000000013095Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.698{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.698NT AUTHORITY\SYSTEM +11241100x800000000000000013096Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.700{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\UIAutomationProvider.resources.dll2025-10-29 13:36:11.700NT AUTHORITY\SYSTEM +11241100x800000000000000013097Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.700{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\UIAutomationTypes.resources.dll2025-10-29 13:36:11.700NT AUTHORITY\SYSTEM +11241100x800000000000000013098Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.700{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\it\WindowsBase.resources.dll2025-10-29 13:36:11.700NT AUTHORITY\SYSTEM +11241100x800000000000000013099Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.703{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\PresentationCore.resources.dll2025-10-29 13:36:11.703NT AUTHORITY\SYSTEM +11241100x800000000000000013100Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.703{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\PresentationFramework.resources.dll2025-10-29 13:36:11.703NT AUTHORITY\SYSTEM +11241100x800000000000000013101Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.703{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\PresentationUI.resources.dll2025-10-29 13:36:11.703NT AUTHORITY\SYSTEM +11241100x800000000000000013102Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.703{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\ReachFramework.resources.dll2025-10-29 13:36:11.703NT AUTHORITY\SYSTEM +11241100x800000000000000013103Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.705{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.705NT AUTHORITY\SYSTEM +11241100x800000000000000013104Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.705{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.705NT AUTHORITY\SYSTEM +11241100x800000000000000013105Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.705{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\System.Xaml.resources.dll2025-10-29 13:36:11.705NT AUTHORITY\SYSTEM +11241100x800000000000000013106Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.705{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\UIAutomationClient.resources.dll2025-10-29 13:36:11.705NT AUTHORITY\SYSTEM +11241100x800000000000000013107Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.705{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.705NT AUTHORITY\SYSTEM +11241100x800000000000000013108Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.707{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\UIAutomationProvider.resources.dll2025-10-29 13:36:11.707NT AUTHORITY\SYSTEM +11241100x800000000000000013109Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.707{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\UIAutomationTypes.resources.dll2025-10-29 13:36:11.707NT AUTHORITY\SYSTEM +11241100x800000000000000013110Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.707{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ja\WindowsBase.resources.dll2025-10-29 13:36:11.707NT AUTHORITY\SYSTEM +11241100x800000000000000013111Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.707{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\PresentationCore.resources.dll2025-10-29 13:36:11.707NT AUTHORITY\SYSTEM +11241100x800000000000000013112Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.709{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\PresentationFramework.resources.dll2025-10-29 13:36:11.709NT AUTHORITY\SYSTEM +11241100x800000000000000013113Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.709{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\PresentationUI.resources.dll2025-10-29 13:36:11.709NT AUTHORITY\SYSTEM +11241100x800000000000000013114Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.710{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\ReachFramework.resources.dll2025-10-29 13:36:11.710NT AUTHORITY\SYSTEM +11241100x800000000000000013115Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.710{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.710NT AUTHORITY\SYSTEM +11241100x800000000000000013116Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.710{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.710NT AUTHORITY\SYSTEM +11241100x800000000000000013117Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.710{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\System.Xaml.resources.dll2025-10-29 13:36:11.710NT AUTHORITY\SYSTEM +11241100x800000000000000013118Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.710{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\UIAutomationClient.resources.dll2025-10-29 13:36:11.710NT AUTHORITY\SYSTEM +11241100x800000000000000013119Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.710{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.710NT AUTHORITY\SYSTEM +11241100x800000000000000013120Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.712{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\UIAutomationProvider.resources.dll2025-10-29 13:36:11.712NT AUTHORITY\SYSTEM +11241100x800000000000000013121Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.712{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\UIAutomationTypes.resources.dll2025-10-29 13:36:11.712NT AUTHORITY\SYSTEM +11241100x800000000000000013122Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.712{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ko\WindowsBase.resources.dll2025-10-29 13:36:11.712NT AUTHORITY\SYSTEM +11241100x800000000000000013123Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.714{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\LibNanoAPI.Projection.dll2025-10-29 13:36:11.712NT AUTHORITY\SYSTEM +11241100x800000000000000013124Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.714{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\MessagePack.Annotations.dll2025-10-29 13:36:11.714NT AUTHORITY\SYSTEM +11241100x800000000000000013125Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.714{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\MessagePack.dll2025-10-29 13:36:11.714NT AUTHORITY\SYSTEM +11241100x800000000000000013126Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.714{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Connections.Abstractions.dll2025-10-29 13:36:11.714NT AUTHORITY\SYSTEM +11241100x800000000000000013127Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.714{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Connections.Client.dll2025-10-29 13:36:11.714NT AUTHORITY\SYSTEM +11241100x800000000000000013128Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Connections.Common.dll2025-10-29 13:36:11.716NT AUTHORITY\SYSTEM +11241100x800000000000000013129Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Client.Core.dll2025-10-29 13:36:11.716NT AUTHORITY\SYSTEM +11241100x800000000000000013130Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Client.dll2025-10-29 13:36:11.716NT AUTHORITY\SYSTEM +11241100x800000000000000013131Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Common.dll2025-10-29 13:36:11.716NT AUTHORITY\SYSTEM +11241100x800000000000000013132Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.716{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Protocols.Json.dll2025-10-29 13:36:11.716NT AUTHORITY\SYSTEM +11241100x800000000000000013133Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Protocols.MessagePack.dll2025-10-29 13:36:11.716NT AUTHORITY\SYSTEM +11241100x800000000000000013134Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.CSharp.dll2025-10-29 13:36:11.718NT AUTHORITY\SYSTEM +11241100x800000000000000013135Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Data.Sqlite.dll2025-10-29 13:36:11.718NT AUTHORITY\SYSTEM +11241100x800000000000000013136Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Caching.Abstractions.dll2025-10-29 13:36:11.718NT AUTHORITY\SYSTEM +11241100x800000000000000013137Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Caching.Memory.dll2025-10-29 13:36:11.718NT AUTHORITY\SYSTEM +11241100x800000000000000013138Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.718{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Abstractions.dll2025-10-29 13:36:11.718NT AUTHORITY\SYSTEM +11241100x800000000000000013139Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Binder.dll2025-10-29 13:36:11.720NT AUTHORITY\SYSTEM +11241100x800000000000000013140Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.CommandLine.dll2025-10-29 13:36:11.720NT AUTHORITY\SYSTEM +11241100x800000000000000013141Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.dll2025-10-29 13:36:11.720NT AUTHORITY\SYSTEM +11241100x800000000000000013142Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.EnvironmentVariables.dll2025-10-29 13:36:11.720NT AUTHORITY\SYSTEM +11241100x800000000000000013143Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.FileExtensions.dll2025-10-29 13:36:11.720NT AUTHORITY\SYSTEM +11241100x800000000000000013144Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.720{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Json.dll2025-10-29 13:36:11.720NT AUTHORITY\SYSTEM +11241100x800000000000000013145Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.722{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.UserSecrets.dll2025-10-29 13:36:11.722NT AUTHORITY\SYSTEM +11241100x800000000000000013146Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.724{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.Abstractions.dll2025-10-29 13:36:11.722NT AUTHORITY\SYSTEM +11241100x800000000000000013147Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.724{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.dll2025-10-29 13:36:11.724NT AUTHORITY\SYSTEM +11241100x800000000000000013148Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.724{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Diagnostics.Abstractions.dll2025-10-29 13:36:11.724NT AUTHORITY\SYSTEM +11241100x800000000000000013149Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.726{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Diagnostics.dll2025-10-29 13:36:11.724NT AUTHORITY\SYSTEM +11241100x800000000000000013150Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.726{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Features.dll2025-10-29 13:36:11.726NT AUTHORITY\SYSTEM +11241100x800000000000000013151Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.726{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileProviders.Abstractions.dll2025-10-29 13:36:11.726NT AUTHORITY\SYSTEM +11241100x800000000000000013152Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.726{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileProviders.Physical.dll2025-10-29 13:36:11.726NT AUTHORITY\SYSTEM +11241100x800000000000000013153Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.726{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileSystemGlobbing.dll2025-10-29 13:36:11.726NT AUTHORITY\SYSTEM +11241100x800000000000000013154Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.728{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Hosting.Abstractions.dll2025-10-29 13:36:11.726NT AUTHORITY\SYSTEM +11241100x800000000000000013155Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.728{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Hosting.dll2025-10-29 13:36:11.728NT AUTHORITY\SYSTEM +11241100x800000000000000013156Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.728{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Http.dll2025-10-29 13:36:11.728NT AUTHORITY\SYSTEM +11241100x800000000000000013157Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.728{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Http.Polly.dll2025-10-29 13:36:11.728NT AUTHORITY\SYSTEM +11241100x800000000000000013158Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.728{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Abstractions.dll2025-10-29 13:36:11.728NT AUTHORITY\SYSTEM +11241100x800000000000000013159Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.728{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Configuration.dll2025-10-29 13:36:11.728NT AUTHORITY\SYSTEM +11241100x800000000000000013160Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.730{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Console.dll2025-10-29 13:36:11.730NT AUTHORITY\SYSTEM +11241100x800000000000000013161Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.730{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Debug.dll2025-10-29 13:36:11.730NT AUTHORITY\SYSTEM +11241100x800000000000000013162Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.730{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.dll2025-10-29 13:36:11.730NT AUTHORITY\SYSTEM +11241100x800000000000000013163Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.730{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.EventLog.dll2025-10-29 13:36:11.730NT AUTHORITY\SYSTEM +11241100x800000000000000013164Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.730{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.EventSource.dll2025-10-29 13:36:11.730NT AUTHORITY\SYSTEM +11241100x800000000000000013165Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.732{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.ConfigurationExtensions.dll2025-10-29 13:36:11.730NT AUTHORITY\SYSTEM +11241100x800000000000000013166Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.732{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.dll2025-10-29 13:36:11.732NT AUTHORITY\SYSTEM +11241100x800000000000000013167Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.732{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Primitives.dll2025-10-29 13:36:11.732NT AUTHORITY\SYSTEM +11241100x800000000000000013168Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.732{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Graphics.Imaging.Projection.dll2025-10-29 13:36:11.732NT AUTHORITY\SYSTEM +11241100x800000000000000013169Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.732{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Abstractions.dll2025-10-29 13:36:11.732NT AUTHORITY\SYSTEM +11241100x800000000000000013170Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.732{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.JsonWebTokens.dll2025-10-29 13:36:11.732NT AUTHORITY\SYSTEM +11241100x800000000000000013171Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.734{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Logging.dll2025-10-29 13:36:11.734NT AUTHORITY\SYSTEM +11241100x800000000000000013172Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.734{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Tokens.dll2025-10-29 13:36:11.734NT AUTHORITY\SYSTEM +11241100x800000000000000013173Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.734{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.InteractiveExperiences.Projection.dll2025-10-29 13:36:11.734NT AUTHORITY\SYSTEM +11241100x800000000000000013174Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.734{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Internal.Bluetooth.Map.BMessage.dll2025-10-29 13:36:11.734NT AUTHORITY\SYSTEM +11241100x800000000000000013175Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.734{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Internal.Bluetooth.Map.dll2025-10-29 13:36:11.734NT AUTHORITY\SYSTEM +11241100x800000000000000013176Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.736{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Internal.Bluetooth.Pal.dll2025-10-29 13:36:11.734NT AUTHORITY\SYSTEM +11241100x800000000000000013177Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.736{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Internal.Bluetooth.Pbap.dll2025-10-29 13:36:11.736NT AUTHORITY\SYSTEM +11241100x800000000000000013178Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.736{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Internal.Bluetooth.Profiles.dll2025-10-29 13:36:11.736NT AUTHORITY\SYSTEM +11241100x800000000000000013179Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.736{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Internal.Diagnostics.dll2025-10-29 13:36:11.736NT AUTHORITY\SYSTEM +11241100x800000000000000013180Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.738{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Internal.Obex.dll2025-10-29 13:36:11.736NT AUTHORITY\SYSTEM +11241100x800000000000000013181Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.738{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.ML.OnnxRuntime.dll2025-10-29 13:36:11.738NT AUTHORITY\SYSTEM +11241100x800000000000000013182Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.738{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.NET.StringTools.dll2025-10-29 13:36:11.738NT AUTHORITY\SYSTEM +11241100x800000000000000013183Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.740{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Rest.ClientRuntime.dll2025-10-29 13:36:11.738NT AUTHORITY\SYSTEM +11241100x800000000000000013184Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.740{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Security.Authentication.OAuth.Projection.dll2025-10-29 13:36:11.740NT AUTHORITY\SYSTEM +11241100x800000000000000013185Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.740{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Toolkit.Uwp.Notifications.dll2025-10-29 13:36:11.740NT AUTHORITY\SYSTEM +11241100x800000000000000013186Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.742{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.VisualBasic.Core.dll2025-10-29 13:36:11.740NT AUTHORITY\SYSTEM +11241100x800000000000000013187Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.742{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.VisualBasic.dll2025-10-29 13:36:11.742NT AUTHORITY\SYSTEM +11241100x800000000000000013188Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.742{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Web.WebView2.Core.Projection.dll2025-10-29 13:36:11.742NT AUTHORITY\SYSTEM +11241100x800000000000000013189Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.744{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Primitives.dll2025-10-29 13:36:11.744NT AUTHORITY\SYSTEM +11241100x800000000000000013190Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.744{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Registry.AccessControl.dll2025-10-29 13:36:11.744NT AUTHORITY\SYSTEM +11241100x800000000000000013191Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.744{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Registry.dll2025-10-29 13:36:11.744NT AUTHORITY\SYSTEM +11241100x800000000000000013192Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.744{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Win32.SystemEvents.dll2025-10-29 13:36:11.744NT AUTHORITY\SYSTEM +11241100x800000000000000013193Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.746{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.ContentSafety.Projection.dll2025-10-29 13:36:11.744NT AUTHORITY\SYSTEM +11241100x800000000000000013194Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.746{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Foundation.Projection.dll2025-10-29 13:36:11.746NT AUTHORITY\SYSTEM +11241100x800000000000000013195Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.746{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Imaging.Projection.dll2025-10-29 13:36:11.746NT AUTHORITY\SYSTEM +11241100x800000000000000013196Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.746{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Projection.dll2025-10-29 13:36:11.746NT AUTHORITY\SYSTEM +11241100x800000000000000013197Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.746{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Text.Projection.dll2025-10-29 13:36:11.746NT AUTHORITY\SYSTEM +11241100x800000000000000013198Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.748{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Background.Projection.dll2025-10-29 13:36:11.748NT AUTHORITY\SYSTEM +11241100x800000000000000013199Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.748{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll2025-10-29 13:36:11.748NT AUTHORITY\SYSTEM +11241100x800000000000000013200Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.748{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.dll2025-10-29 13:36:11.748NT AUTHORITY\SYSTEM +11241100x800000000000000013201Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.748{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.Projection.dll2025-10-29 13:36:11.748NT AUTHORITY\SYSTEM +11241100x800000000000000013202Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.748{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.dll2025-10-29 13:36:11.748NT AUTHORITY\SYSTEM +11241100x800000000000000013203Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.748{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppLifecycle.Projection.dll2025-10-29 13:36:11.748NT AUTHORITY\SYSTEM +11241100x800000000000000013204Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.750{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppNotifications.Builder.Projection.dll2025-10-29 13:36:11.750NT AUTHORITY\SYSTEM +11241100x800000000000000013205Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.750{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppNotifications.Projection.dll2025-10-29 13:36:11.750NT AUTHORITY\SYSTEM +11241100x800000000000000013206Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.750{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Apps.TraceLogging.dll2025-10-29 13:36:11.750NT AUTHORITY\SYSTEM +11241100x800000000000000013207Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.750{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.BadgeNotifications.Projection.dll2025-10-29 13:36:11.750NT AUTHORITY\SYSTEM +11241100x800000000000000013208Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.752{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Foundation.Projection.dll2025-10-29 13:36:11.752NT AUTHORITY\SYSTEM +11241100x800000000000000013209Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.752{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Management.Deployment.Projection.dll2025-10-29 13:36:11.752NT AUTHORITY\SYSTEM +11241100x800000000000000013210Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.752{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Media.Capture.Projection.dll2025-10-29 13:36:11.752NT AUTHORITY\SYSTEM +11241100x800000000000000013211Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.752{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.PushNotifications.Projection.dll2025-10-29 13:36:11.752NT AUTHORITY\SYSTEM +11241100x800000000000000013212Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.752{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.SDK.NET.dll2025-10-29 13:36:11.752NT AUTHORITY\SYSTEM +11241100x800000000000000013213Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.754{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Security.AccessControl.Projection.dll2025-10-29 13:36:11.754NT AUTHORITY\SYSTEM +11241100x800000000000000013214Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.754{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Storage.Pickers.Projection.dll2025-10-29 13:36:11.754NT AUTHORITY\SYSTEM +11241100x800000000000000013215Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.754{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Storage.Projection.dll2025-10-29 13:36:11.754NT AUTHORITY\SYSTEM +11241100x800000000000000013216Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.754{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.System.Power.Projection.dll2025-10-29 13:36:11.754NT AUTHORITY\SYSTEM +11241100x800000000000000013217Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.756{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.System.Projection.dll2025-10-29 13:36:11.754NT AUTHORITY\SYSTEM +11241100x800000000000000013218Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.756{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Projection.dll2025-10-29 13:36:11.756NT AUTHORITY\SYSTEM +11241100x800000000000000013219Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.756{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Bootstrap.Net.dll2025-10-29 13:36:11.756NT AUTHORITY\SYSTEM +11241100x800000000000000013220Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.756{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.WinUI.dll2025-10-29 13:36:11.756NT AUTHORITY\SYSTEM +11241100x800000000000000013221Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.756{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Microsoft.Xaml.Behaviors.dll2025-10-29 13:36:11.756NT AUTHORITY\SYSTEM +11241100x800000000000000013222Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.758{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\mscordaccore.dll2025-10-29 13:36:11.756NT AUTHORITY\SYSTEM +11241100x800000000000000013223Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.758{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\mscordaccore_amd64_amd64_9.0.1025.47515.dll2025-10-29 13:36:11.758NT AUTHORITY\SYSTEM +11241100x800000000000000013224Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.758{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\mscordbi.dll2025-10-29 13:36:11.758NT AUTHORITY\SYSTEM +11241100x800000000000000013225Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.758{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\mscorlib.dll2025-10-29 13:36:11.758NT AUTHORITY\SYSTEM +11241100x800000000000000013226Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.758{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\mscorrc.dll2025-10-29 13:36:11.758NT AUTHORITY\SYSTEM +11241100x800000000000000013227Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.758{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\NativeHost.dll2025-10-29 13:36:11.758NT AUTHORITY\SYSTEM +11241100x800000000000000013228Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.758{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\NativeHostNE.dll2025-10-29 13:36:11.758NT AUTHORITY\SYSTEM +11241100x800000000000000013229Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.760{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\netstandard.dll2025-10-29 13:36:11.760NT AUTHORITY\SYSTEM +11241100x800000000000000013230Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.760{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Newtonsoft.Json.dll2025-10-29 13:36:11.760NT AUTHORITY\SYSTEM +11241100x800000000000000013231Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.760{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PenImc_cor3.dll2025-10-29 13:36:11.760NT AUTHORITY\SYSTEM +11241100x800000000000000013232Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.762{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.dll2025-10-29 13:36:11.762NT AUTHORITY\SYSTEM +11241100x800000000000000013233Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:11.762{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe2025-10-29 13:36:11.762NT AUTHORITY\SYSTEM +11241100x800000000000000013234Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.762{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\PresentationCore.resources.dll2025-10-29 13:36:11.762NT AUTHORITY\SYSTEM +11241100x800000000000000013235Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.764{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\PresentationFramework.resources.dll2025-10-29 13:36:11.764NT AUTHORITY\SYSTEM +11241100x800000000000000013236Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.764{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\PresentationUI.resources.dll2025-10-29 13:36:11.764NT AUTHORITY\SYSTEM +11241100x800000000000000013237Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.764{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\ReachFramework.resources.dll2025-10-29 13:36:11.764NT AUTHORITY\SYSTEM +11241100x800000000000000013238Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.764{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.764NT AUTHORITY\SYSTEM +11241100x800000000000000013239Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.764{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.764NT AUTHORITY\SYSTEM +11241100x800000000000000013240Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.766{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\System.Xaml.resources.dll2025-10-29 13:36:11.766NT AUTHORITY\SYSTEM +11241100x800000000000000013241Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.766{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\UIAutomationClient.resources.dll2025-10-29 13:36:11.766NT AUTHORITY\SYSTEM +11241100x800000000000000013242Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.766{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.766NT AUTHORITY\SYSTEM +11241100x800000000000000013243Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.766{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\UIAutomationProvider.resources.dll2025-10-29 13:36:11.766NT AUTHORITY\SYSTEM +11241100x800000000000000013244Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.766{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\UIAutomationTypes.resources.dll2025-10-29 13:36:11.766NT AUTHORITY\SYSTEM +11241100x800000000000000013245Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.766{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pl\WindowsBase.resources.dll2025-10-29 13:36:11.766NT AUTHORITY\SYSTEM +11241100x800000000000000013246Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.768{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Polly.Core.dll2025-10-29 13:36:11.766NT AUTHORITY\SYSTEM +11241100x800000000000000013247Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.768{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Polly.dll2025-10-29 13:36:11.768NT AUTHORITY\SYSTEM +11241100x800000000000000013248Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.768{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Polly.Extensions.Http.dll2025-10-29 13:36:11.768NT AUTHORITY\SYSTEM +11241100x800000000000000013249Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.768{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Polly.RateLimiting.dll2025-10-29 13:36:11.768NT AUTHORITY\SYSTEM +11241100x800000000000000013250Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.770{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationCore.dll2025-10-29 13:36:11.770NT AUTHORITY\SYSTEM +11241100x800000000000000013251Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.770{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework-SystemCore.dll2025-10-29 13:36:11.770NT AUTHORITY\SYSTEM +11241100x800000000000000013252Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.770{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework-SystemData.dll2025-10-29 13:36:11.770NT AUTHORITY\SYSTEM +11241100x800000000000000013253Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.782{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework-SystemDrawing.dll2025-10-29 13:36:11.770NT AUTHORITY\SYSTEM +11241100x800000000000000013254Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.782{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework-SystemXml.dll2025-10-29 13:36:11.782NT AUTHORITY\SYSTEM +11241100x800000000000000013255Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.782{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework-SystemXmlLinq.dll2025-10-29 13:36:11.782NT AUTHORITY\SYSTEM +11241100x800000000000000013256Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.782{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework.Aero.dll2025-10-29 13:36:11.782NT AUTHORITY\SYSTEM +11241100x800000000000000013257Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.782{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework.Aero2.dll2025-10-29 13:36:11.782NT AUTHORITY\SYSTEM +11241100x800000000000000013258Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.784{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework.AeroLite.dll2025-10-29 13:36:11.784NT AUTHORITY\SYSTEM +11241100x800000000000000013259Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.784{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework.Classic.dll2025-10-29 13:36:11.784NT AUTHORITY\SYSTEM +11241100x800000000000000013260Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.784{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework.dll2025-10-29 13:36:11.784NT AUTHORITY\SYSTEM +11241100x800000000000000013261Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.784{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework.Fluent.dll2025-10-29 13:36:11.784NT AUTHORITY\SYSTEM +11241100x800000000000000013262Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.784{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework.Luna.dll2025-10-29 13:36:11.784NT AUTHORITY\SYSTEM +11241100x800000000000000013263Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.786{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationFramework.Royale.dll2025-10-29 13:36:11.784NT AUTHORITY\SYSTEM +11241100x800000000000000013264Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.786{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationNative_cor3.dll2025-10-29 13:36:11.786NT AUTHORITY\SYSTEM +11241100x800000000000000013265Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.786{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PresentationUI.dll2025-10-29 13:36:11.786NT AUTHORITY\SYSTEM +11241100x800000000000000013266Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.786{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\PresentationCore.resources.dll2025-10-29 13:36:11.786NT AUTHORITY\SYSTEM +11241100x800000000000000013267Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.786{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\PresentationFramework.resources.dll2025-10-29 13:36:11.786NT AUTHORITY\SYSTEM +11241100x800000000000000013268Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.788{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\PresentationUI.resources.dll2025-10-29 13:36:11.788NT AUTHORITY\SYSTEM +11241100x800000000000000013269Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.790{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\ReachFramework.resources.dll2025-10-29 13:36:11.790NT AUTHORITY\SYSTEM +11241100x800000000000000013270Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.790{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.790NT AUTHORITY\SYSTEM +11241100x800000000000000013271Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.790{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.790NT AUTHORITY\SYSTEM +11241100x800000000000000013272Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.790{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\System.Xaml.resources.dll2025-10-29 13:36:11.790NT AUTHORITY\SYSTEM +11241100x800000000000000013273Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.792{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\UIAutomationClient.resources.dll2025-10-29 13:36:11.790NT AUTHORITY\SYSTEM +11241100x800000000000000013274Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.792{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.792NT AUTHORITY\SYSTEM +11241100x800000000000000013275Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.792{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\UIAutomationProvider.resources.dll2025-10-29 13:36:11.792NT AUTHORITY\SYSTEM +11241100x800000000000000013276Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.792{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\UIAutomationTypes.resources.dll2025-10-29 13:36:11.792NT AUTHORITY\SYSTEM +11241100x800000000000000013277Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.792{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\pt-BR\WindowsBase.resources.dll2025-10-29 13:36:11.792NT AUTHORITY\SYSTEM +11241100x800000000000000013278Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ReachFramework.dll2025-10-29 13:36:11.792NT AUTHORITY\SYSTEM +11241100x800000000000000013279Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\PresentationCore.resources.dll2025-10-29 13:36:11.794NT AUTHORITY\SYSTEM +11241100x800000000000000013280Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\PresentationFramework.resources.dll2025-10-29 13:36:11.794NT AUTHORITY\SYSTEM +11241100x800000000000000013281Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.796{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\PresentationUI.resources.dll2025-10-29 13:36:11.794NT AUTHORITY\SYSTEM +11241100x800000000000000013282Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.796{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\ReachFramework.resources.dll2025-10-29 13:36:11.796NT AUTHORITY\SYSTEM +11241100x800000000000000013283Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.796{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.796NT AUTHORITY\SYSTEM +11241100x800000000000000013284Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.796{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.796NT AUTHORITY\SYSTEM +11241100x800000000000000013285Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.796{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\System.Xaml.resources.dll2025-10-29 13:36:11.796NT AUTHORITY\SYSTEM +11241100x800000000000000013286Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.796{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\UIAutomationClient.resources.dll2025-10-29 13:36:11.796NT AUTHORITY\SYSTEM +11241100x800000000000000013287Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.796{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.796NT AUTHORITY\SYSTEM +11241100x800000000000000013288Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.798{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\UIAutomationProvider.resources.dll2025-10-29 13:36:11.798NT AUTHORITY\SYSTEM +11241100x800000000000000013289Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.798{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\UIAutomationTypes.resources.dll2025-10-29 13:36:11.798NT AUTHORITY\SYSTEM +11241100x800000000000000013290Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.798{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\ru\WindowsBase.resources.dll2025-10-29 13:36:11.798NT AUTHORITY\SYSTEM +11241100x800000000000000013291Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.798{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\SharedUtilities.Controls.dll2025-10-29 13:36:11.798NT AUTHORITY\SYSTEM +11241100x800000000000000013292Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.798{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\SharedUtilities.Devices.dll2025-10-29 13:36:11.798NT AUTHORITY\SYSTEM +11241100x800000000000000013293Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.798{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\SharedUtilities.dll2025-10-29 13:36:11.798NT AUTHORITY\SYSTEM +11241100x800000000000000013294Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.798{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\SharedUtilities.QrCodeGenerator.dll2025-10-29 13:36:11.798NT AUTHORITY\SYSTEM +11241100x800000000000000013295Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.800{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\SQLitePCLRaw.batteries_v2.dll2025-10-29 13:36:11.798NT AUTHORITY\SYSTEM +11241100x800000000000000013296Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.800{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\SQLitePCLRaw.core.dll2025-10-29 13:36:11.800NT AUTHORITY\SYSTEM +11241100x800000000000000013297Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.800{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\SQLitePCLRaw.provider.e_sqlite3.dll2025-10-29 13:36:11.800NT AUTHORITY\SYSTEM +11241100x800000000000000013298Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.800{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Stateless.dll2025-10-29 13:36:11.800NT AUTHORITY\SYSTEM +11241100x800000000000000013299Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.800{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.AppContext.dll2025-10-29 13:36:11.800NT AUTHORITY\SYSTEM +11241100x800000000000000013300Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.800{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Buffers.dll2025-10-29 13:36:11.800NT AUTHORITY\SYSTEM +11241100x800000000000000013301Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.800{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.CodeDom.dll2025-10-29 13:36:11.800NT AUTHORITY\SYSTEM +11241100x800000000000000013302Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.802{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Collections.Concurrent.dll2025-10-29 13:36:11.800NT AUTHORITY\SYSTEM +11241100x800000000000000013303Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.802{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Collections.dll2025-10-29 13:36:11.802NT AUTHORITY\SYSTEM +11241100x800000000000000013304Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.802{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Collections.Immutable.dll2025-10-29 13:36:11.802NT AUTHORITY\SYSTEM +11241100x800000000000000013305Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.802{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Collections.NonGeneric.dll2025-10-29 13:36:11.802NT AUTHORITY\SYSTEM +11241100x800000000000000013306Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.802{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Collections.Specialized.dll2025-10-29 13:36:11.802NT AUTHORITY\SYSTEM +11241100x800000000000000013307Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.802{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ComponentModel.Annotations.dll2025-10-29 13:36:11.802NT AUTHORITY\SYSTEM +11241100x800000000000000013308Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.802{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ComponentModel.DataAnnotations.dll2025-10-29 13:36:11.802NT AUTHORITY\SYSTEM +11241100x800000000000000013309Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.802{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ComponentModel.dll2025-10-29 13:36:11.802NT AUTHORITY\SYSTEM +11241100x800000000000000013310Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.804{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ComponentModel.EventBasedAsync.dll2025-10-29 13:36:11.804NT AUTHORITY\SYSTEM +11241100x800000000000000013311Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.804{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ComponentModel.Primitives.dll2025-10-29 13:36:11.804NT AUTHORITY\SYSTEM +11241100x800000000000000013312Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.804{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ComponentModel.TypeConverter.dll2025-10-29 13:36:11.804NT AUTHORITY\SYSTEM +11241100x800000000000000013313Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.804{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Configuration.ConfigurationManager.dll2025-10-29 13:36:11.804NT AUTHORITY\SYSTEM +11241100x800000000000000013314Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.804{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Configuration.dll2025-10-29 13:36:11.804NT AUTHORITY\SYSTEM +11241100x800000000000000013315Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.804{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Console.dll2025-10-29 13:36:11.804NT AUTHORITY\SYSTEM +11241100x800000000000000013316Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Core.dll2025-10-29 13:36:11.804NT AUTHORITY\SYSTEM +11241100x800000000000000013317Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Data.Common.dll2025-10-29 13:36:11.805NT AUTHORITY\SYSTEM +11241100x800000000000000013318Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Data.DataSetExtensions.dll2025-10-29 13:36:11.805NT AUTHORITY\SYSTEM +11241100x800000000000000013319Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Data.dll2025-10-29 13:36:11.805NT AUTHORITY\SYSTEM +11241100x800000000000000013320Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.Contracts.dll2025-10-29 13:36:11.805NT AUTHORITY\SYSTEM +11241100x800000000000000013321Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.Debug.dll2025-10-29 13:36:11.807NT AUTHORITY\SYSTEM +11241100x800000000000000013322Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.DiagnosticSource.dll2025-10-29 13:36:11.807NT AUTHORITY\SYSTEM +11241100x800000000000000013323Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.EventLog.dll2025-10-29 13:36:11.807NT AUTHORITY\SYSTEM +11241100x800000000000000013324Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.EventLog.Messages.dll2025-10-29 13:36:11.807NT AUTHORITY\SYSTEM +11241100x800000000000000013325Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.FileVersionInfo.dll2025-10-29 13:36:11.807NT AUTHORITY\SYSTEM +11241100x800000000000000013326Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.PerformanceCounter.dll2025-10-29 13:36:11.807NT AUTHORITY\SYSTEM +11241100x800000000000000013327Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.Process.dll2025-10-29 13:36:11.807NT AUTHORITY\SYSTEM +11241100x800000000000000013328Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.StackTrace.dll2025-10-29 13:36:11.809NT AUTHORITY\SYSTEM +11241100x800000000000000013329Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.TextWriterTraceListener.dll2025-10-29 13:36:11.809NT AUTHORITY\SYSTEM +11241100x800000000000000013330Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.Tools.dll2025-10-29 13:36:11.809NT AUTHORITY\SYSTEM +11241100x800000000000000013331Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.TraceSource.dll2025-10-29 13:36:11.809NT AUTHORITY\SYSTEM +11241100x800000000000000013332Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.809{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Diagnostics.Tracing.dll2025-10-29 13:36:11.809NT AUTHORITY\SYSTEM +11241100x800000000000000013333Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.811{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.DirectoryServices.dll2025-10-29 13:36:11.809NT AUTHORITY\SYSTEM +11241100x800000000000000013334Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.811{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.dll2025-10-29 13:36:11.811NT AUTHORITY\SYSTEM +11241100x800000000000000013335Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.811{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Drawing.Common.dll2025-10-29 13:36:11.811NT AUTHORITY\SYSTEM +11241100x800000000000000013336Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.811{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Drawing.dll2025-10-29 13:36:11.811NT AUTHORITY\SYSTEM +11241100x800000000000000013337Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.811{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D06BB584-142B-481A-AFD8-68AC7304E9E6}\ssshim.dll2025-10-29 13:36:11.811NT AUTHORITY\SYSTEM +11241100x800000000000000013338Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.811{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Drawing.Primitives.dll2025-10-29 13:36:11.811NT AUTHORITY\SYSTEM +11241100x800000000000000013339Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.813{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Dynamic.Runtime.dll2025-10-29 13:36:11.813NT AUTHORITY\SYSTEM +11241100x800000000000000013340Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.813{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Formats.Asn1.dll2025-10-29 13:36:11.813NT AUTHORITY\SYSTEM +11241100x800000000000000013341Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.813{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Formats.Nrbf.dll2025-10-29 13:36:11.813NT AUTHORITY\SYSTEM +11241100x800000000000000013342Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.815{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Formats.Tar.dll2025-10-29 13:36:11.813NT AUTHORITY\SYSTEM +11241100x800000000000000013343Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.815{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Globalization.Calendars.dll2025-10-29 13:36:11.815NT AUTHORITY\SYSTEM +11241100x800000000000000013344Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.815{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Globalization.dll2025-10-29 13:36:11.815NT AUTHORITY\SYSTEM +11241100x800000000000000013345Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.815{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Globalization.Extensions.dll2025-10-29 13:36:11.815NT AUTHORITY\SYSTEM +11241100x800000000000000013346Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.815{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IdentityModel.Tokens.Jwt.dll2025-10-29 13:36:11.815NT AUTHORITY\SYSTEM +11241100x800000000000000013347Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.817{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Compression.Brotli.dll2025-10-29 13:36:11.817NT AUTHORITY\SYSTEM +11241100x800000000000000013348Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.817{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Compression.dll2025-10-29 13:36:11.817NT AUTHORITY\SYSTEM +11241100x800000000000000013349Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.817{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Compression.FileSystem.dll2025-10-29 13:36:11.817NT AUTHORITY\SYSTEM +11241100x800000000000000013350Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.817{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Compression.Native.dll2025-10-29 13:36:11.817NT AUTHORITY\SYSTEM +11241100x800000000000000013351Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.817{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Compression.ZipFile.dll2025-10-29 13:36:11.817NT AUTHORITY\SYSTEM +11241100x800000000000000013352Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.819{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.dll2025-10-29 13:36:11.817NT AUTHORITY\SYSTEM +11241100x800000000000000013353Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.819{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.AccessControl.dll2025-10-29 13:36:11.819NT AUTHORITY\SYSTEM +11241100x800000000000000013354Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.819{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.dll2025-10-29 13:36:11.819NT AUTHORITY\SYSTEM +11241100x800000000000000013355Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.819{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.DriveInfo.dll2025-10-29 13:36:11.819NT AUTHORITY\SYSTEM +11241100x800000000000000013356Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.821{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.Primitives.dll2025-10-29 13:36:11.821NT AUTHORITY\SYSTEM +11241100x800000000000000013357Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.821{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.FileSystem.Watcher.dll2025-10-29 13:36:11.821NT AUTHORITY\SYSTEM +11241100x800000000000000013358Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.821{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Hashing.dll2025-10-29 13:36:11.821NT AUTHORITY\SYSTEM +11241100x800000000000000013359Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.823{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.IsolatedStorage.dll2025-10-29 13:36:11.823NT AUTHORITY\SYSTEM +11241100x800000000000000013360Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.823{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.MemoryMappedFiles.dll2025-10-29 13:36:11.823NT AUTHORITY\SYSTEM +11241100x800000000000000013361Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.823{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Packaging.dll2025-10-29 13:36:11.823NT AUTHORITY\SYSTEM +11241100x800000000000000013362Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.823{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Pipelines.dll2025-10-29 13:36:11.823NT AUTHORITY\SYSTEM +11241100x800000000000000013363Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Pipes.AccessControl.dll2025-10-29 13:36:11.823NT AUTHORITY\SYSTEM +11241100x800000000000000013364Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.Pipes.dll2025-10-29 13:36:11.825NT AUTHORITY\SYSTEM +11241100x800000000000000013365Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.IO.UnmanagedMemoryStream.dll2025-10-29 13:36:11.825NT AUTHORITY\SYSTEM +11241100x800000000000000013366Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Linq.dll2025-10-29 13:36:11.825NT AUTHORITY\SYSTEM +11241100x800000000000000013367Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.827{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Linq.Expressions.dll2025-10-29 13:36:11.825NT AUTHORITY\SYSTEM +11241100x800000000000000013368Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.827{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Linq.Parallel.dll2025-10-29 13:36:11.827NT AUTHORITY\SYSTEM +11241100x800000000000000013369Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.827{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Linq.Queryable.dll2025-10-29 13:36:11.827NT AUTHORITY\SYSTEM +11241100x800000000000000013370Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.827{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Memory.dll2025-10-29 13:36:11.827NT AUTHORITY\SYSTEM +11241100x800000000000000013371Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.827{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.dll2025-10-29 13:36:11.827NT AUTHORITY\SYSTEM +11241100x800000000000000013372Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.827{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Http.dll2025-10-29 13:36:11.827NT AUTHORITY\SYSTEM +11241100x800000000000000013373Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.829{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Http.Json.dll2025-10-29 13:36:11.829NT AUTHORITY\SYSTEM +11241100x800000000000000013374Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.829{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.HttpListener.dll2025-10-29 13:36:11.829NT AUTHORITY\SYSTEM +11241100x800000000000000013375Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.829{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Mail.dll2025-10-29 13:36:11.829NT AUTHORITY\SYSTEM +11241100x800000000000000013376Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.829{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.NameResolution.dll2025-10-29 13:36:11.829NT AUTHORITY\SYSTEM +11241100x800000000000000013377Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.829{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.NetworkInformation.dll2025-10-29 13:36:11.829NT AUTHORITY\SYSTEM +11241100x800000000000000013378Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.831{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Ping.dll2025-10-29 13:36:11.831NT AUTHORITY\SYSTEM +11241100x800000000000000013379Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.831{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Primitives.dll2025-10-29 13:36:11.831NT AUTHORITY\SYSTEM +11241100x800000000000000013380Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.831{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Quic.dll2025-10-29 13:36:11.831NT AUTHORITY\SYSTEM +11241100x800000000000000013381Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.831{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Requests.dll2025-10-29 13:36:11.831NT AUTHORITY\SYSTEM +11241100x800000000000000013382Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.831{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Security.dll2025-10-29 13:36:11.831NT AUTHORITY\SYSTEM +11241100x800000000000000013383Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.833{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.ServerSentEvents.dll2025-10-29 13:36:11.831NT AUTHORITY\SYSTEM +11241100x800000000000000013384Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.833{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.ServicePoint.dll2025-10-29 13:36:11.833NT AUTHORITY\SYSTEM +11241100x800000000000000013385Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.833{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.Sockets.dll2025-10-29 13:36:11.833NT AUTHORITY\SYSTEM +11241100x800000000000000013386Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.833{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.WebClient.dll2025-10-29 13:36:11.833NT AUTHORITY\SYSTEM +11241100x800000000000000013387Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.833{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.WebHeaderCollection.dll2025-10-29 13:36:11.833NT AUTHORITY\SYSTEM +11241100x800000000000000013388Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.835{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.WebProxy.dll2025-10-29 13:36:11.833NT AUTHORITY\SYSTEM +11241100x800000000000000013389Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.835{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.WebSockets.Client.dll2025-10-29 13:36:11.835NT AUTHORITY\SYSTEM +11241100x800000000000000013390Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.835{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Net.WebSockets.dll2025-10-29 13:36:11.835NT AUTHORITY\SYSTEM +11241100x800000000000000013391Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.835{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Numerics.dll2025-10-29 13:36:11.835NT AUTHORITY\SYSTEM +11241100x800000000000000013392Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.837{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Numerics.Vectors.dll2025-10-29 13:36:11.835NT AUTHORITY\SYSTEM +11241100x800000000000000013393Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.837{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ObjectModel.dll2025-10-29 13:36:11.837NT AUTHORITY\SYSTEM +11241100x800000000000000013394Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.837{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Printing.dll2025-10-29 13:36:11.837NT AUTHORITY\SYSTEM +11241100x800000000000000013395Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.837{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Private.CoreLib.dll2025-10-29 13:36:11.837NT AUTHORITY\SYSTEM +11241100x800000000000000013396Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.837{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Private.DataContractSerialization.dll2025-10-29 13:36:11.837NT AUTHORITY\SYSTEM +11241100x800000000000000013397Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.839{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Private.Uri.dll2025-10-29 13:36:11.837NT AUTHORITY\SYSTEM +11241100x800000000000000013398Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.839{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Private.Windows.Core.dll2025-10-29 13:36:11.839NT AUTHORITY\SYSTEM +11241100x800000000000000013399Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.839{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Private.Xml.dll2025-10-29 13:36:11.839NT AUTHORITY\SYSTEM +11241100x800000000000000013400Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.839{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Private.Xml.Linq.dll2025-10-29 13:36:11.839NT AUTHORITY\SYSTEM +11241100x800000000000000013401Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.841{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.DispatchProxy.dll2025-10-29 13:36:11.841NT AUTHORITY\SYSTEM +11241100x800000000000000013402Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.841{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.dll2025-10-29 13:36:11.841NT AUTHORITY\SYSTEM +11241100x800000000000000013403Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.841{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.dll2025-10-29 13:36:11.841NT AUTHORITY\SYSTEM +11241100x800000000000000013404Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.841{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.ILGeneration.dll2025-10-29 13:36:11.841NT AUTHORITY\SYSTEM +11241100x800000000000000013405Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.843{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.Emit.Lightweight.dll2025-10-29 13:36:11.843NT AUTHORITY\SYSTEM +11241100x800000000000000013406Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.843{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.Extensions.dll2025-10-29 13:36:11.843NT AUTHORITY\SYSTEM +11241100x800000000000000013407Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.843{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.Metadata.dll2025-10-29 13:36:11.843NT AUTHORITY\SYSTEM +11241100x800000000000000013408Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.Primitives.dll2025-10-29 13:36:11.845NT AUTHORITY\SYSTEM +11241100x800000000000000013409Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Reflection.TypeExtensions.dll2025-10-29 13:36:11.845NT AUTHORITY\SYSTEM +11241100x800000000000000013410Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Resources.Extensions.dll2025-10-29 13:36:11.845NT AUTHORITY\SYSTEM +11241100x800000000000000013411Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Resources.Reader.dll2025-10-29 13:36:11.845NT AUTHORITY\SYSTEM +11241100x800000000000000013412Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Resources.ResourceManager.dll2025-10-29 13:36:11.845NT AUTHORITY\SYSTEM +11241100x800000000000000013413Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Resources.Writer.dll2025-10-29 13:36:11.845NT AUTHORITY\SYSTEM +11241100x800000000000000013414Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.847{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.CompilerServices.Unsafe.dll2025-10-29 13:36:11.847NT AUTHORITY\SYSTEM +11241100x800000000000000013415Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.847{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.CompilerServices.VisualC.dll2025-10-29 13:36:11.847NT AUTHORITY\SYSTEM +11241100x800000000000000013416Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.849{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.dll2025-10-29 13:36:11.849NT AUTHORITY\SYSTEM +11241100x800000000000000013417Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.849{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Extensions.dll2025-10-29 13:36:11.849NT AUTHORITY\SYSTEM +11241100x800000000000000013418Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.849{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Handles.dll2025-10-29 13:36:11.849NT AUTHORITY\SYSTEM +11241100x800000000000000013419Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.849{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.dll2025-10-29 13:36:11.849NT AUTHORITY\SYSTEM +11241100x800000000000000013420Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.851{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.JavaScript.dll2025-10-29 13:36:11.851NT AUTHORITY\SYSTEM +11241100x800000000000000013421Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.851{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.RuntimeInformation.dll2025-10-29 13:36:11.851NT AUTHORITY\SYSTEM +11241100x800000000000000013422Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.851{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Intrinsics.dll2025-10-29 13:36:11.851NT AUTHORITY\SYSTEM +11241100x800000000000000013423Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.851{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Loader.dll2025-10-29 13:36:11.851NT AUTHORITY\SYSTEM +11241100x800000000000000013424Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.853{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Numerics.dll2025-10-29 13:36:11.851NT AUTHORITY\SYSTEM +11241100x800000000000000013425Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.853{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.dll2025-10-29 13:36:11.853NT AUTHORITY\SYSTEM +11241100x800000000000000013426Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.853{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Formatters.dll2025-10-29 13:36:11.853NT AUTHORITY\SYSTEM +11241100x800000000000000013427Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.853{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Json.dll2025-10-29 13:36:11.853NT AUTHORITY\SYSTEM +11241100x800000000000000013428Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.855{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Primitives.dll2025-10-29 13:36:11.855NT AUTHORITY\SYSTEM +11241100x800000000000000013429Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.855{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Runtime.Serialization.Xml.dll2025-10-29 13:36:11.855NT AUTHORITY\SYSTEM +11241100x800000000000000013430Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.AccessControl.dll2025-10-29 13:36:11.855NT AUTHORITY\SYSTEM +11241100x800000000000000013431Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Claims.dll2025-10-29 13:36:11.857NT AUTHORITY\SYSTEM +11241100x800000000000000013432Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Algorithms.dll2025-10-29 13:36:11.857NT AUTHORITY\SYSTEM +11241100x800000000000000013433Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Cng.dll2025-10-29 13:36:11.857NT AUTHORITY\SYSTEM +11241100x800000000000000013434Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Csp.dll2025-10-29 13:36:11.857NT AUTHORITY\SYSTEM +11241100x800000000000000013435Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.859{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.dll2025-10-29 13:36:11.859NT AUTHORITY\SYSTEM +11241100x800000000000000013436Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.859{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Encoding.dll2025-10-29 13:36:11.859NT AUTHORITY\SYSTEM +11241100x800000000000000013437Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.859{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.OpenSsl.dll2025-10-29 13:36:11.859NT AUTHORITY\SYSTEM +11241100x800000000000000013438Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.859{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Pkcs.dll2025-10-29 13:36:11.859NT AUTHORITY\SYSTEM +11241100x800000000000000013439Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.859{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Primitives.dll2025-10-29 13:36:11.859NT AUTHORITY\SYSTEM +11241100x800000000000000013440Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.861{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.ProtectedData.dll2025-10-29 13:36:11.861NT AUTHORITY\SYSTEM +11241100x800000000000000013441Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.861{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.X509Certificates.dll2025-10-29 13:36:11.861NT AUTHORITY\SYSTEM +11241100x800000000000000013442Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.863{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.Xml.dll2025-10-29 13:36:11.861NT AUTHORITY\SYSTEM +11241100x800000000000000013443Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.863{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.dll2025-10-29 13:36:11.863NT AUTHORITY\SYSTEM +11241100x800000000000000013444Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.863{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Permissions.dll2025-10-29 13:36:11.863NT AUTHORITY\SYSTEM +11241100x800000000000000013445Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.865{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Principal.dll2025-10-29 13:36:11.863NT AUTHORITY\SYSTEM +11241100x800000000000000013446Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.865{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.Principal.Windows.dll2025-10-29 13:36:11.865NT AUTHORITY\SYSTEM +11241100x800000000000000013447Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.865{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Security.SecureString.dll2025-10-29 13:36:11.865NT AUTHORITY\SYSTEM +11241100x800000000000000013448Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.867{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ServiceModel.Web.dll2025-10-29 13:36:11.865NT AUTHORITY\SYSTEM +11241100x800000000000000013449Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.867{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ServiceProcess.dll2025-10-29 13:36:11.867NT AUTHORITY\SYSTEM +11241100x800000000000000013450Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.867{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Text.Encoding.CodePages.dll2025-10-29 13:36:11.867NT AUTHORITY\SYSTEM +11241100x800000000000000013451Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.869{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Text.Encoding.dll2025-10-29 13:36:11.869NT AUTHORITY\SYSTEM +11241100x800000000000000013452Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.869{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Text.Encoding.Extensions.dll2025-10-29 13:36:11.869NT AUTHORITY\SYSTEM +11241100x800000000000000013453Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.869{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Text.Encodings.Web.dll2025-10-29 13:36:11.869NT AUTHORITY\SYSTEM +11241100x800000000000000013454Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.869{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Text.Json.dll2025-10-29 13:36:11.869NT AUTHORITY\SYSTEM +11241100x800000000000000013455Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.869{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Text.RegularExpressions.dll2025-10-29 13:36:11.869NT AUTHORITY\SYSTEM +11241100x800000000000000013456Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.871{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.AccessControl.dll2025-10-29 13:36:11.869NT AUTHORITY\SYSTEM +11241100x800000000000000013457Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.871{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.Channels.dll2025-10-29 13:36:11.871NT AUTHORITY\SYSTEM +11241100x800000000000000013458Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.871{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.dll2025-10-29 13:36:11.871NT AUTHORITY\SYSTEM +11241100x800000000000000013459Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.871{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.Overlapped.dll2025-10-29 13:36:11.871NT AUTHORITY\SYSTEM +11241100x800000000000000013460Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.871{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.RateLimiting.dll2025-10-29 13:36:11.871NT AUTHORITY\SYSTEM +11241100x800000000000000013461Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.871{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Dataflow.dll2025-10-29 13:36:11.871NT AUTHORITY\SYSTEM +11241100x800000000000000013462Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.873{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.dll2025-10-29 13:36:11.873NT AUTHORITY\SYSTEM +11241100x800000000000000013463Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.873{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Extensions.dll2025-10-29 13:36:11.873NT AUTHORITY\SYSTEM +11241100x800000000000000013464Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.873{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Parallel.dll2025-10-29 13:36:11.873NT AUTHORITY\SYSTEM +11241100x800000000000000013465Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.873{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.Thread.dll2025-10-29 13:36:11.873NT AUTHORITY\SYSTEM +11241100x800000000000000013466Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.875{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.ThreadPool.dll2025-10-29 13:36:11.873NT AUTHORITY\SYSTEM +11241100x800000000000000013467Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.875{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Threading.Timer.dll2025-10-29 13:36:11.875NT AUTHORITY\SYSTEM +11241100x800000000000000013468Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.875{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Transactions.dll2025-10-29 13:36:11.875NT AUTHORITY\SYSTEM +11241100x800000000000000013469Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.875{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Transactions.Local.dll2025-10-29 13:36:11.875NT AUTHORITY\SYSTEM +11241100x800000000000000013470Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.875{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.ValueTuple.dll2025-10-29 13:36:11.875NT AUTHORITY\SYSTEM +11241100x800000000000000013471Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.877{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Web.dll2025-10-29 13:36:11.877NT AUTHORITY\SYSTEM +11241100x800000000000000013472Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.877{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Web.HttpUtility.dll2025-10-29 13:36:11.877NT AUTHORITY\SYSTEM +11241100x800000000000000013473Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.877{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Windows.Controls.Ribbon.dll2025-10-29 13:36:11.877NT AUTHORITY\SYSTEM +11241100x800000000000000013474Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.877{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Windows.dll2025-10-29 13:36:11.877NT AUTHORITY\SYSTEM +11241100x800000000000000013475Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.877{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Windows.Extensions.dll2025-10-29 13:36:11.877NT AUTHORITY\SYSTEM +11241100x800000000000000013476Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.877{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Windows.Input.Manipulations.dll2025-10-29 13:36:11.877NT AUTHORITY\SYSTEM +11241100x800000000000000013477Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.879{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Windows.Presentation.dll2025-10-29 13:36:11.877NT AUTHORITY\SYSTEM +11241100x800000000000000013478Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.879{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xaml.dll2025-10-29 13:36:11.879NT AUTHORITY\SYSTEM +11241100x800000000000000013479Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.879{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.dll2025-10-29 13:36:11.879NT AUTHORITY\SYSTEM +11241100x800000000000000013480Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.879{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.Linq.dll2025-10-29 13:36:11.879NT AUTHORITY\SYSTEM +11241100x800000000000000013481Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.881{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.ReaderWriter.dll2025-10-29 13:36:11.881NT AUTHORITY\SYSTEM +11241100x800000000000000013482Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.881{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.Serialization.dll2025-10-29 13:36:11.881NT AUTHORITY\SYSTEM +11241100x800000000000000013483Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.881{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.XDocument.dll2025-10-29 13:36:11.881NT AUTHORITY\SYSTEM +11241100x800000000000000013484Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.883{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.XmlDocument.dll2025-10-29 13:36:11.883NT AUTHORITY\SYSTEM +11241100x800000000000000013485Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.883{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.XmlSerializer.dll2025-10-29 13:36:11.883NT AUTHORITY\SYSTEM +11241100x800000000000000013486Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.883{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.XPath.dll2025-10-29 13:36:11.883NT AUTHORITY\SYSTEM +11241100x800000000000000013487Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.883{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\System.Xml.XPath.XDocument.dll2025-10-29 13:36:11.883NT AUTHORITY\SYSTEM +11241100x800000000000000013488Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.883{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\TestableIO.System.IO.Abstractions.Wrappers.dll2025-10-29 13:36:11.883NT AUTHORITY\SYSTEM +11241100x800000000000000013489Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.885{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\Testably.Abstractions.FileSystem.Interface.dll2025-10-29 13:36:11.885NT AUTHORITY\SYSTEM +11241100x800000000000000013490Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.885{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\PresentationCore.resources.dll2025-10-29 13:36:11.885NT AUTHORITY\SYSTEM +11241100x800000000000000013491Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.885{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\PresentationFramework.resources.dll2025-10-29 13:36:11.885NT AUTHORITY\SYSTEM +11241100x800000000000000013492Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.887{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\PresentationUI.resources.dll2025-10-29 13:36:11.885NT AUTHORITY\SYSTEM +11241100x800000000000000013493Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.887{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\ReachFramework.resources.dll2025-10-29 13:36:11.887NT AUTHORITY\SYSTEM +11241100x800000000000000013494Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.887{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.887NT AUTHORITY\SYSTEM +11241100x800000000000000013495Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.887{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.887NT AUTHORITY\SYSTEM +11241100x800000000000000013496Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.887{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\System.Xaml.resources.dll2025-10-29 13:36:11.887NT AUTHORITY\SYSTEM +11241100x800000000000000013497Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.889{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\UIAutomationClient.resources.dll2025-10-29 13:36:11.889NT AUTHORITY\SYSTEM +11241100x800000000000000013498Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.889{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.889NT AUTHORITY\SYSTEM +11241100x800000000000000013499Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.889{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\UIAutomationProvider.resources.dll2025-10-29 13:36:11.889NT AUTHORITY\SYSTEM +11241100x800000000000000013500Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.889{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\UIAutomationTypes.resources.dll2025-10-29 13:36:11.889NT AUTHORITY\SYSTEM +11241100x800000000000000013501Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.889{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\tr\WindowsBase.resources.dll2025-10-29 13:36:11.889NT AUTHORITY\SYSTEM +11241100x800000000000000013502Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.891{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\UIAutomationClient.dll2025-10-29 13:36:11.891NT AUTHORITY\SYSTEM +11241100x800000000000000013503Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.891{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\UIAutomationClientSideProviders.dll2025-10-29 13:36:11.891NT AUTHORITY\SYSTEM +11241100x800000000000000013504Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.891{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\UIAutomationProvider.dll2025-10-29 13:36:11.891NT AUTHORITY\SYSTEM +11241100x800000000000000013505Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.893{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\UIAutomationTypes.dll2025-10-29 13:36:11.891NT AUTHORITY\SYSTEM +11241100x800000000000000013506Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.893{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\vcruntime140_cor3.dll2025-10-29 13:36:11.893NT AUTHORITY\SYSTEM +11241100x800000000000000013507Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.893{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\WindowsBase.dll2025-10-29 13:36:11.893NT AUTHORITY\SYSTEM +11241100x800000000000000013508Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.893{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\WindowsUdk.dll2025-10-29 13:36:11.893NT AUTHORITY\SYSTEM +11241100x800000000000000013509Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.893{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\WinRT.Runtime.dll2025-10-29 13:36:11.893NT AUTHORITY\SYSTEM +11241100x800000000000000013510Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.893{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\wpfgfx_cor3.dll2025-10-29 13:36:11.893NT AUTHORITY\SYSTEM +11241100x800000000000000013511Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.893{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.AppCore.Managed.dll2025-10-29 13:36:11.893NT AUTHORITY\SYSTEM +11241100x800000000000000013512Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.895{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.AppCore.WinRT.dll2025-10-29 13:36:11.895NT AUTHORITY\SYSTEM +11241100x800000000000000013513Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.895{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.AppProxyConnection.dll2025-10-29 13:36:11.895NT AUTHORITY\SYSTEM +11241100x800000000000000013514Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.895{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Audio.dll2025-10-29 13:36:11.895NT AUTHORITY\SYSTEM +11241100x800000000000000013515Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.895{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Background.dll2025-10-29 13:36:11.895NT AUTHORITY\SYSTEM +11241100x800000000000000013516Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.895{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Background.Tasks.dll2025-10-29 13:36:11.895NT AUTHORITY\SYSTEM +11241100x800000000000000013517Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.897{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Calling.Managed.dll2025-10-29 13:36:11.895NT AUTHORITY\SYSTEM +11241100x800000000000000013518Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.897{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Calling.Shims.dll2025-10-29 13:36:11.897NT AUTHORITY\SYSTEM +11241100x800000000000000013519Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.897{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Connectivity.Bluetooth.Managed.dll2025-10-29 13:36:11.897NT AUTHORITY\SYSTEM +11241100x800000000000000013520Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.897{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Connectivity.Bluetooth.Shims.dll2025-10-29 13:36:11.897NT AUTHORITY\SYSTEM +11241100x800000000000000013521Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.899{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Connectivity.Managed.dll2025-10-29 13:36:11.899NT AUTHORITY\SYSTEM +11241100x800000000000000013522Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.899{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Connectivity.Protocol.dll2025-10-29 13:36:11.899NT AUTHORITY\SYSTEM +11241100x800000000000000013523Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.899{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Connectivity.YPP.Managed.dll2025-10-29 13:36:11.899NT AUTHORITY\SYSTEM +11241100x800000000000000013524Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.899{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contacts.Managed.dll2025-10-29 13:36:11.899NT AUTHORITY\SYSTEM +11241100x800000000000000013525Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.900{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Continuity.Managed.dll2025-10-29 13:36:11.900NT AUTHORITY\SYSTEM +11241100x800000000000000013526Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.900{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.AppProxyConnection.dll2025-10-29 13:36:11.900NT AUTHORITY\SYSTEM +11241100x800000000000000013527Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.900{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.AppProxyConnection.ProxyStub.dll2025-10-29 13:36:11.900NT AUTHORITY\SYSTEM +11241100x800000000000000013528Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.900{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Background.dll2025-10-29 13:36:11.900NT AUTHORITY\SYSTEM +11241100x800000000000000013529Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.900{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Background.ProxyStub.dll2025-10-29 13:36:11.900NT AUTHORITY\SYSTEM +11241100x800000000000000013530Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.900{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Calling.dll2025-10-29 13:36:11.900NT AUTHORITY\SYSTEM +11241100x800000000000000013531Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.902{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Connectivity.Bluetooth.dll2025-10-29 13:36:11.902NT AUTHORITY\SYSTEM +11241100x800000000000000013532Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.902{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Connectivity.dll2025-10-29 13:36:11.902NT AUTHORITY\SYSTEM +11241100x800000000000000013533Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.902{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Connectivity.YPP.dll2025-10-29 13:36:11.902NT AUTHORITY\SYSTEM +11241100x800000000000000013534Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.902{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Contacts.WinRT.dll2025-10-29 13:36:11.902NT AUTHORITY\SYSTEM +11241100x800000000000000013535Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.902{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Continuity.dll2025-10-29 13:36:11.902NT AUTHORITY\SYSTEM +11241100x800000000000000013536Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.904{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Devices.WinRT.dll2025-10-29 13:36:11.904NT AUTHORITY\SYSTEM +11241100x800000000000000013537Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.904{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Exp.dll2025-10-29 13:36:11.904NT AUTHORITY\SYSTEM +11241100x800000000000000013538Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.904{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Help.dll2025-10-29 13:36:11.904NT AUTHORITY\SYSTEM +11241100x800000000000000013539Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.904{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Hotspot.dll2025-10-29 13:36:11.904NT AUTHORITY\SYSTEM +11241100x800000000000000013540Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.906{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Managed.dll2025-10-29 13:36:11.906NT AUTHORITY\SYSTEM +11241100x800000000000000013541Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.906{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Messaging.dll2025-10-29 13:36:11.906NT AUTHORITY\SYSTEM +11241100x800000000000000013542Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.906{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Notifications.dll2025-10-29 13:36:11.906NT AUTHORITY\SYSTEM +11241100x800000000000000013543Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.906{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Photos.dll2025-10-29 13:36:11.906NT AUTHORITY\SYSTEM +11241100x800000000000000013544Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.908{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.ScreenMirroring.dll2025-10-29 13:36:11.908NT AUTHORITY\SYSTEM +11241100x800000000000000013545Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.908{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Search.dll2025-10-29 13:36:11.908NT AUTHORITY\SYSTEM +11241100x800000000000000013546Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.908{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Settings.dll2025-10-29 13:36:11.908NT AUTHORITY\SYSTEM +11241100x800000000000000013547Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.908{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.SharedContent.dll2025-10-29 13:36:11.908NT AUTHORITY\SYSTEM +11241100x800000000000000013548Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.910{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Contracts.Shell.dll2025-10-29 13:36:11.910NT AUTHORITY\SYSTEM +11241100x800000000000000013549Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.910{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Devices.Managed.dll2025-10-29 13:36:11.910NT AUTHORITY\SYSTEM +11241100x800000000000000013550Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.910{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Devices.Protocol.dll2025-10-29 13:36:11.910NT AUTHORITY\SYSTEM +11241100x800000000000000013551Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.910{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Exp.dll2025-10-29 13:36:11.910NT AUTHORITY\SYSTEM +11241100x800000000000000013552Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.910{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Exp.WinRT.dll2025-10-29 13:36:11.910NT AUTHORITY\SYSTEM +11241100x800000000000000013553Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.912{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Fre.Managed.dll2025-10-29 13:36:11.912NT AUTHORITY\SYSTEM +11241100x800000000000000013554Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.912{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Fre.Protocol.dll2025-10-29 13:36:11.912NT AUTHORITY\SYSTEM +11241100x800000000000000013555Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.912{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Help.dll2025-10-29 13:36:11.912NT AUTHORITY\SYSTEM +11241100x800000000000000013556Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.912{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Hotspot.Managed.dll2025-10-29 13:36:11.912NT AUTHORITY\SYSTEM +11241100x800000000000000013557Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.912{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Messaging.Managed.dll2025-10-29 13:36:11.912NT AUTHORITY\SYSTEM +11241100x800000000000000013558Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.912{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Notifications.Managed.dll2025-10-29 13:36:11.912NT AUTHORITY\SYSTEM +11241100x800000000000000013559Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.914{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Oem.dll2025-10-29 13:36:11.912NT AUTHORITY\SYSTEM +11241100x800000000000000013560Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.914{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.OnboardingSDK.dll2025-10-29 13:36:11.914NT AUTHORITY\SYSTEM +11241100x800000000000000013561Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.914{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Photos.Managed.dll2025-10-29 13:36:11.914NT AUTHORITY\SYSTEM +11241100x800000000000000013562Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.914{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.ScreenMirroring.Managed.dll2025-10-29 13:36:11.914NT AUTHORITY\SYSTEM +11241100x800000000000000013563Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.916{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.ScreenMirroring.WinRT.dll2025-10-29 13:36:11.916NT AUTHORITY\SYSTEM +11241100x800000000000000013564Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.916{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Settings.Managed.dll2025-10-29 13:36:11.916NT AUTHORITY\SYSTEM +11241100x800000000000000013565Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.918{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.SharedContent.Managed.dll2025-10-29 13:36:11.916NT AUTHORITY\SYSTEM +11241100x800000000000000013566Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.918{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Shell.dll2025-10-29 13:36:11.918NT AUTHORITY\SYSTEM +11241100x800000000000000013567Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.918{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.Utilities.dll2025-10-29 13:36:11.918NT AUTHORITY\SYSTEM +11241100x800000000000000013568Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.920{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.Auth.dll2025-10-29 13:36:11.920NT AUTHORITY\SYSTEM +11241100x800000000000000013569Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.920{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.Bluetooth.dll2025-10-29 13:36:11.920NT AUTHORITY\SYSTEM +11241100x800000000000000013570Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.920{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.Common.dll2025-10-29 13:36:11.920NT AUTHORITY\SYSTEM +11241100x800000000000000013571Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.920{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.dll2025-10-29 13:36:11.920NT AUTHORITY\SYSTEM +11241100x800000000000000013572Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.920{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.Onboarding.dll2025-10-29 13:36:11.920NT AUTHORITY\SYSTEM +11241100x800000000000000013573Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.922{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.PlatformSdk.dll2025-10-29 13:36:11.920NT AUTHORITY\SYSTEM +11241100x800000000000000013574Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.922{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.PlatformSdk.Protocol.dll2025-10-29 13:36:11.922NT AUTHORITY\SYSTEM +11241100x800000000000000013575Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.922{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.ServicesClient.dll2025-10-29 13:36:11.922NT AUTHORITY\SYSTEM +11241100x800000000000000013576Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.922{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.Shims.dll2025-10-29 13:36:11.922NT AUTHORITY\SYSTEM +11241100x800000000000000013577Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.922{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.SideChannel.dll2025-10-29 13:36:11.922NT AUTHORITY\SYSTEM +11241100x800000000000000013578Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.924{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhone.YPP.SideChannel.Protocol.dll2025-10-29 13:36:11.922NT AUTHORITY\SYSTEM +11241100x800000000000000013579Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.924{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.Core.dll2025-10-29 13:36:11.924NT AUTHORITY\SYSTEM +11241100x800000000000000013580Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.924{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.dll2025-10-29 13:36:11.924NT AUTHORITY\SYSTEM +11241100x800000000000000013581Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:11.924{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe2025-10-29 13:36:11.924NT AUTHORITY\SYSTEM +11241100x800000000000000013582Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.924{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.Exp.dll2025-10-29 13:36:11.924NT AUTHORITY\SYSTEM +11241100x800000000000000013583Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.926{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.Telemetry.dll2025-10-29 13:36:11.926NT AUTHORITY\SYSTEM +11241100x800000000000000013584Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.926{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhoneControls.dll2025-10-29 13:36:11.926NT AUTHORITY\SYSTEM +11241100x800000000000000013585Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.926{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhoneControls.Managed.dll2025-10-29 13:36:11.926NT AUTHORITY\SYSTEM +11241100x800000000000000013586Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.928{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\YourPhoneControls.Projection.dll2025-10-29 13:36:11.928NT AUTHORITY\SYSTEM +11241100x800000000000000013587Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.928{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\PresentationCore.resources.dll2025-10-29 13:36:11.928NT AUTHORITY\SYSTEM +11241100x800000000000000013588Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.928{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\PresentationFramework.resources.dll2025-10-29 13:36:11.928NT AUTHORITY\SYSTEM +11241100x800000000000000013589Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.930{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\PresentationUI.resources.dll2025-10-29 13:36:11.928NT AUTHORITY\SYSTEM +11241100x800000000000000013590Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.930{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\ReachFramework.resources.dll2025-10-29 13:36:11.930NT AUTHORITY\SYSTEM +11241100x800000000000000013591Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.930{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.930NT AUTHORITY\SYSTEM +11241100x800000000000000013592Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.932{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.930NT AUTHORITY\SYSTEM +11241100x800000000000000013593Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.932{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\System.Xaml.resources.dll2025-10-29 13:36:11.932NT AUTHORITY\SYSTEM +11241100x800000000000000013594Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.932{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\UIAutomationClient.resources.dll2025-10-29 13:36:11.932NT AUTHORITY\SYSTEM +11241100x800000000000000013595Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.932{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.932NT AUTHORITY\SYSTEM +11241100x800000000000000013596Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.932{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\UIAutomationProvider.resources.dll2025-10-29 13:36:11.932NT AUTHORITY\SYSTEM +11241100x800000000000000013597Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.932{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\UIAutomationTypes.resources.dll2025-10-29 13:36:11.932NT AUTHORITY\SYSTEM +11241100x800000000000000013598Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.932{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hans\WindowsBase.resources.dll2025-10-29 13:36:11.932NT AUTHORITY\SYSTEM +11241100x800000000000000013599Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.934{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\PresentationCore.resources.dll2025-10-29 13:36:11.934NT AUTHORITY\SYSTEM +11241100x800000000000000013600Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.934{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\PresentationFramework.resources.dll2025-10-29 13:36:11.934NT AUTHORITY\SYSTEM +11241100x800000000000000013601Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.934{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\PresentationUI.resources.dll2025-10-29 13:36:11.934NT AUTHORITY\SYSTEM +11241100x800000000000000013602Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.936{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\ReachFramework.resources.dll2025-10-29 13:36:11.936NT AUTHORITY\SYSTEM +11241100x800000000000000013603Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.936{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\System.Windows.Controls.Ribbon.resources.dll2025-10-29 13:36:11.936NT AUTHORITY\SYSTEM +11241100x800000000000000013604Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.936{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\System.Windows.Input.Manipulations.resources.dll2025-10-29 13:36:11.936NT AUTHORITY\SYSTEM +11241100x800000000000000013605Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.936{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\System.Xaml.resources.dll2025-10-29 13:36:11.936NT AUTHORITY\SYSTEM +11241100x800000000000000013606Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.936{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\UIAutomationClient.resources.dll2025-10-29 13:36:11.936NT AUTHORITY\SYSTEM +11241100x800000000000000013607Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.936{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\UIAutomationClientSideProviders.resources.dll2025-10-29 13:36:11.936NT AUTHORITY\SYSTEM +11241100x800000000000000013608Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.938{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\UIAutomationProvider.resources.dll2025-10-29 13:36:11.938NT AUTHORITY\SYSTEM +11241100x800000000000000013609Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.938{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\UIAutomationTypes.resources.dll2025-10-29 13:36:11.938NT AUTHORITY\SYSTEM +11241100x800000000000000013610Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:11.938{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\zh-Hant\WindowsBase.resources.dll2025-10-29 13:36:11.938NT AUTHORITY\SYSTEM +11241100x800000000000000013611Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:12.765{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{D23E7BC0-43DE-4DAB-BB61-840420B7124D}\ssshim.dll2025-10-29 13:36:12.765NT AUTHORITY\SYSTEM +11241100x800000000000000013612Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:13.695{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{4CB571EE-86BB-4193-9382-C4EF014BA003}\ssshim.dll2025-10-29 13:36:13.695NT AUTHORITY\SYSTEM +11241100x800000000000000013613Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Azure.Core.dll2025-10-29 13:36:14.755NT AUTHORITY\SYSTEM +11241100x800000000000000013614Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.Common.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013615Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.Diagnostics.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013616Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.Mvvm.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013617Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Animations.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013618Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Behaviors.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013619Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Controls.Primitives.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013620Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Controls.SettingsControls.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013621Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Controls.Sizers.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013622Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.757{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Converters.dll2025-10-29 13:36:14.757NT AUTHORITY\SYSTEM +11241100x800000000000000013623Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Extensions.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013624Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Helpers.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013625Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\CommunityToolkit.WinUI.Triggers.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013626Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\DataMigrationBackgroundService.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013627Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\DesignerLib.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013628Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\ImageEditorLib.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013629Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\ImageLib.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013630Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\libcrypto-3-x64.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013631Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.763{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Lightbox.dll2025-10-29 13:36:14.763NT AUTHORITY\SYSTEM +11241100x800000000000000013632Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Apps.MediaFeaturesInformation.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013633Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.Abstractions.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013634Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013635Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Abstractions.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013636Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Graph.Beta.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013637Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Graph.Core.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013638Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Graphics.Imaging.Projection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013639Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Abstractions.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013640Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.JsonWebTokens.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013641Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Logging.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013642Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Protocols.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013643Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Protocols.OpenIdConnect.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013644Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Tokens.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013645Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.IdentityModel.Validators.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013646Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.InteractiveExperiences.Projection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013647Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Kiota.Abstractions.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013648Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Kiota.Authentication.Azure.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013649Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Kiota.Http.HttpClientLibrary.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013650Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Kiota.Serialization.Form.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013651Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Kiota.Serialization.Json.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013652Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Kiota.Serialization.Multipart.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013653Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Kiota.Serialization.Text.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013654Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Security.Authentication.OAuth.Projection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013655Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Web.WebView2.Core.Projection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013656Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.ContentSafety.Projection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013657Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Imaging.Projection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013658Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.778{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Projection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013659Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Text.Projection.dll2025-10-29 13:36:14.778NT AUTHORITY\SYSTEM +11241100x800000000000000013660Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Background.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013661Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013662Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013663Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013664Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013665Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppLifecycle.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013666Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppNotifications.Builder.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013667Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppNotifications.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013668Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.BadgeNotifications.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013669Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Management.Deployment.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013670Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Media.Capture.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013671Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.PushNotifications.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013672Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Security.AccessControl.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013673Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Storage.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013674Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.System.Power.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013675Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.System.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013676Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Projection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013677Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Bootstrap.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013678Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Bootstrap.Net.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013679Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.WinUI.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013680Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Microsoft.Xaml.Interactivity.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013681Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\OneDrive.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013682Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\OneDriveUI.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013683Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\oneocr.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013684Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\onnxruntime.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013685Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.AIServices.CppWinRT.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013686Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.AIServices.CsWinRT.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013687Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.AIUtils.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013688Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.App.Collection.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013689Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.794{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.App.Collection.NativeHost.dll2025-10-29 13:36:14.794NT AUTHORITY\SYSTEM +11241100x800000000000000013690Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.810{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.App.Collection.NativeHostNE.dll2025-10-29 13:36:14.810NT AUTHORITY\SYSTEM +11241100x800000000000000013691Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.App.Container.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013692Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Authentication.CppWinRT.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013693Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Authentication.CsWinRT.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013694Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Authentication.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013695Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.AutoPlay.exe2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013696Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Collection.Models.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013697Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Collection.Models.Interfaces.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013698Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Configuration.CppWinRT.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013699Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Configuration.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013700Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Consent.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013701Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Controls.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013702Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Controls.Maps.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013703Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Controls.Media.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013704Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Controls.Ocr.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013705Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Controls.Pill.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013706Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.812{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Controls.Timeline.dll2025-10-29 13:36:14.812NT AUTHORITY\SYSTEM +11241100x800000000000000013707Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Database.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013708Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Database.Models.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013709Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.exe2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013710Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Experimentation.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013711Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Extensions.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013712Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Logging.CppWinRT.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013713Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Logging.CsWinRT.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013714Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Logging.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013715Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Models.CppWinRT.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013716Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Models.CsWinRT.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013717Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Models.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013718Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Models.Interfaces.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013719Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Ocr.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013720Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Settings.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013721Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.ShellExtension.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013722Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Telemetry.CsWinRT.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013723Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Telemetry.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013724Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.UserActivities.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013725Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Utils.CppWinRT.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013726Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Utils.CsWinRT.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013727Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Utils.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013728Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Windowing.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013729Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Photos.Windowing.Projection.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013730Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\PhotosCore.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013731Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\PhotosCsProjection.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013732Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.825{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\PhotosManager.dll2025-10-29 13:36:14.825NT AUTHORITY\SYSTEM +11241100x800000000000000013733Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\PhotosServiceSdk.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013734Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013735Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\runtimes\win-arm64ec\native\Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013736Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\runtimes\win-arm64ec\native\Microsoft.WindowsAppRuntime.Bootstrap.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013737Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\runtimes\win-arm64\native\Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013738Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\runtimes\win-arm64\native\Microsoft.WindowsAppRuntime.Bootstrap.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013739Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\runtimes\win-x64\native\Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013740Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\runtimes\win-x64\native\Microsoft.WindowsAppRuntime.Bootstrap.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013741Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\runtimes\win-x86\native\Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013742Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\runtimes\win-x86\native\Microsoft.WindowsAppRuntime.Bootstrap.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013743Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.845{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\SharedServices.dll2025-10-29 13:36:14.845NT AUTHORITY\SYSTEM +11241100x800000000000000013744Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Slideshow.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013745Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\sqlite3.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013746Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Std.UriTemplate.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013747Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\System.ClientModel.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013748Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\System.IdentityModel.Tokens.Jwt.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013749Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\System.Memory.Data.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013750Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.ProtectedData.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013751Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\Watermarker.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013752Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\WindowsBase.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013753Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:14.857{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11100.9001.0_x64__8wekyb3d8bbwe\WinRTAdapter.dll2025-10-29 13:36:14.857NT AUTHORITY\SYSTEM +11241100x800000000000000013754Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:16.348{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{80C93EF7-F6A0-4A07-948F-DAE740D6E48E}\ssshim.dll2025-10-29 13:36:16.348NT AUTHORITY\SYSTEM +11241100x800000000000000013755Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:36:17.112{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{FA4B4143-5F10-4C0A-83C2-BD56AA159077}\ssshim.dll2025-10-29 13:36:17.112NT AUTHORITY\SYSTEM +11241100x800000000000000013756Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:17.151{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{CF056025-AE3A-4C8D-9E67-409D78215F08}\ssshim.dll2025-10-29 13:37:17.151NT AUTHORITY\SYSTEM +11241100x800000000000000013757Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:18.188{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{802E16E2-0C59-4265-98D2-D8306BE2A583}\ssshim.dll2025-10-29 13:37:18.188NT AUTHORITY\SYSTEM +154100x800000000000000013758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:18.242{8223a6b9-188e-6902-ed02-000000002b00}9452C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXEC:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\AppXDeploymentExtensions.OneCore.dll,ShellRefreshC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +11241100x800000000000000013759Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:20.013{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{836D113E-0DDF-40E0-95AD-60EABC38F7E0}\ssshim.dll2025-10-29 13:37:20.013NT AUTHORITY\SYSTEM +11241100x800000000000000013760Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:21.156{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{3875437E-4B09-470A-87BC-90117E0D2EB9}\ssshim.dll2025-10-29 13:37:21.156NT AUTHORITY\SYSTEM +11241100x800000000000000013761Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:22.212{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{ED44316F-F40C-4A1D-9E15-8F16D7E75C71}\ssshim.dll2025-10-29 13:37:22.212NT AUTHORITY\SYSTEM +11241100x800000000000000013762Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:23.066{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{1A348618-F4FD-48C4-BF33-5E11C6076367}\ssshim.dll2025-10-29 13:37:23.066NT AUTHORITY\SYSTEM +11241100x800000000000000013763Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:23.813{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{FFBB1C7F-0309-47A7-9DD2-790E6D42E650}\ssshim.dll2025-10-29 13:37:23.813NT AUTHORITY\SYSTEM +11241100x800000000000000013764Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:24.688{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{CC57F54A-E985-428D-9EB8-6840D89B26DD}\ssshim.dll2025-10-29 13:37:24.688NT AUTHORITY\SYSTEM +11241100x800000000000000013765Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:25.486{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{769A082E-8693-481E-A4C7-69EF8246138A}\ssshim.dll2025-10-29 13:37:25.486NT AUTHORITY\SYSTEM +11241100x800000000000000013766Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:26.450{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{0B1756FD-D528-423D-B6A6-7DC7A6DAAACB}\ssshim.dll2025-10-29 13:37:26.450NT AUTHORITY\SYSTEM +11241100x800000000000000013767Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:27.303{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{9A21F1DE-F515-4462-B04D-3132F948026A}\ssshim.dll2025-10-29 13:37:27.303NT AUTHORITY\SYSTEM +11241100x800000000000000013768Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:27.999{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{8216254C-7B99-4DC2-971F-7D42603BA628}\ssshim.dll2025-10-29 13:37:27.999NT AUTHORITY\SYSTEM +11241100x800000000000000013769Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:31.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PackagedCom\YourPhone.Contracts.AppProxyConnection.ProxyStub.dll2025-10-29 13:37:31.489NT AUTHORITY\SYSTEM +11241100x800000000000000013770Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:31.843{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{E91F9DC0-7A07-48C3-A9B4-EF85A6E91296}\ssshim.dll2025-10-29 13:37:31.843NT AUTHORITY\SYSTEM +11241100x800000000000000013771Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:32.270{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\AppInstaller.exe2025-10-29 13:37:32.270NT AUTHORITY\SYSTEM +11241100x800000000000000013772Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:32.272{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe2025-10-29 13:37:32.272NT AUTHORITY\SYSTEM +11241100x800000000000000013773Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:32.290{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\AuthenticationManager.exe2025-10-29 13:37:32.290NT AUTHORITY\SYSTEM +11241100x800000000000000013774Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.290{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\concrt140_app.dll2025-10-29 13:37:32.290NT AUTHORITY\SYSTEM +11241100x800000000000000013775Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.290{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\clretwrc.dll2025-10-29 13:37:32.290NT AUTHORITY\SYSTEM +11241100x800000000000000013776Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.292{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\clrgc.dll2025-10-29 13:37:32.292NT AUTHORITY\SYSTEM +11241100x800000000000000013777Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.292{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\clrjit.dll2025-10-29 13:37:32.292NT AUTHORITY\SYSTEM +11241100x800000000000000013778Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.292{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ConfigurationRemotingServer.dll2025-10-29 13:37:32.292NT AUTHORITY\SYSTEM +11241100x800000000000000013779Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:32.294{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ConfigurationRemotingServer.exe2025-10-29 13:37:32.294NT AUTHORITY\SYSTEM +11241100x800000000000000013780Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.294{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\coreclr.dll2025-10-29 13:37:32.294NT AUTHORITY\SYSTEM +11241100x800000000000000013781Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:32.294{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\createdump.exe2025-10-29 13:37:32.294NT AUTHORITY\SYSTEM +11241100x800000000000000013782Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.294{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\getfilesiginforedist.dll2025-10-29 13:37:32.294NT AUTHORITY\SYSTEM +11241100x800000000000000013783Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.296{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\getfilesiginforedistwrapper.dll2025-10-29 13:37:32.296NT AUTHORITY\SYSTEM +11241100x800000000000000013784Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.296{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\hostfxr.dll2025-10-29 13:37:32.296NT AUTHORITY\SYSTEM +11241100x800000000000000013785Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.296{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\hostpolicy.dll2025-10-29 13:37:32.296NT AUTHORITY\SYSTEM +11241100x800000000000000013786Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.296{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Json.More.dll2025-10-29 13:37:32.296NT AUTHORITY\SYSTEM +11241100x800000000000000013787Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.298{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\JsonPointer.Net.dll2025-10-29 13:37:32.298NT AUTHORITY\SYSTEM +11241100x800000000000000013788Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.298{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\JsonSchema.Net.dll2025-10-29 13:37:32.298NT AUTHORITY\SYSTEM +11241100x800000000000000013789Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.298{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Markdig.Signed.dll2025-10-29 13:37:32.298NT AUTHORITY\SYSTEM +11241100x800000000000000013790Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.298{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.CSharp.dll2025-10-29 13:37:32.298NT AUTHORITY\SYSTEM +11241100x800000000000000013791Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.298{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.AI.Abstractions.dll2025-10-29 13:37:32.298NT AUTHORITY\SYSTEM +11241100x800000000000000013792Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.298{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Configuration.Abstractions.dll2025-10-29 13:37:32.298NT AUTHORITY\SYSTEM +11241100x800000000000000013793Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.300{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Configuration.Binder.dll2025-10-29 13:37:32.298NT AUTHORITY\SYSTEM +11241100x800000000000000013794Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.300{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Configuration.CommandLine.dll2025-10-29 13:37:32.300NT AUTHORITY\SYSTEM +11241100x800000000000000013795Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.300{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Configuration.dll2025-10-29 13:37:32.300NT AUTHORITY\SYSTEM +11241100x800000000000000013796Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.300{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Configuration.EnvironmentVariables.dll2025-10-29 13:37:32.300NT AUTHORITY\SYSTEM +11241100x800000000000000013797Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.302{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Configuration.FileExtensions.dll2025-10-29 13:37:32.302NT AUTHORITY\SYSTEM +11241100x800000000000000013798Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.302{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Configuration.Json.dll2025-10-29 13:37:32.302NT AUTHORITY\SYSTEM +11241100x800000000000000013799Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.302{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Configuration.UserSecrets.dll2025-10-29 13:37:32.302NT AUTHORITY\SYSTEM +11241100x800000000000000013800Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.302{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.DependencyInjection.Abstractions.dll2025-10-29 13:37:32.302NT AUTHORITY\SYSTEM +11241100x800000000000000013801Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.302{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.DependencyInjection.dll2025-10-29 13:37:32.302NT AUTHORITY\SYSTEM +11241100x800000000000000013802Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.302{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Diagnostics.Abstractions.dll2025-10-29 13:37:32.302NT AUTHORITY\SYSTEM +11241100x800000000000000013803Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.304{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Diagnostics.dll2025-10-29 13:37:32.304NT AUTHORITY\SYSTEM +11241100x800000000000000013804Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.304{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.FileProviders.Abstractions.dll2025-10-29 13:37:32.304NT AUTHORITY\SYSTEM +11241100x800000000000000013805Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.304{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.FileProviders.Physical.dll2025-10-29 13:37:32.304NT AUTHORITY\SYSTEM +11241100x800000000000000013806Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.304{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.FileSystemGlobbing.dll2025-10-29 13:37:32.304NT AUTHORITY\SYSTEM +11241100x800000000000000013807Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.306{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Hosting.Abstractions.dll2025-10-29 13:37:32.306NT AUTHORITY\SYSTEM +11241100x800000000000000013808Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.306{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Hosting.dll2025-10-29 13:37:32.306NT AUTHORITY\SYSTEM +11241100x800000000000000013809Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.306{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Logging.Abstractions.dll2025-10-29 13:37:32.306NT AUTHORITY\SYSTEM +11241100x800000000000000013810Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.306{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Logging.Configuration.dll2025-10-29 13:37:32.306NT AUTHORITY\SYSTEM +11241100x800000000000000013811Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.306{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Logging.Console.dll2025-10-29 13:37:32.306NT AUTHORITY\SYSTEM +11241100x800000000000000013812Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.308{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Logging.Debug.dll2025-10-29 13:37:32.308NT AUTHORITY\SYSTEM +11241100x800000000000000013813Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.308{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Logging.dll2025-10-29 13:37:32.308NT AUTHORITY\SYSTEM +11241100x800000000000000013814Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.308{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Logging.EventLog.dll2025-10-29 13:37:32.308NT AUTHORITY\SYSTEM +11241100x800000000000000013815Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.310{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Logging.EventSource.dll2025-10-29 13:37:32.310NT AUTHORITY\SYSTEM +11241100x800000000000000013816Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.310{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.ObjectPool.dll2025-10-29 13:37:32.310NT AUTHORITY\SYSTEM +11241100x800000000000000013817Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.310{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Options.ConfigurationExtensions.dll2025-10-29 13:37:32.310NT AUTHORITY\SYSTEM +11241100x800000000000000013818Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.310{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Options.dll2025-10-29 13:37:32.310NT AUTHORITY\SYSTEM +11241100x800000000000000013819Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.312{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Extensions.Primitives.dll2025-10-29 13:37:32.310NT AUTHORITY\SYSTEM +11241100x800000000000000013820Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.312{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Management.Configuration.dll2025-10-29 13:37:32.312NT AUTHORITY\SYSTEM +11241100x800000000000000013821Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.312{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Management.Configuration.Processor.dll2025-10-29 13:37:32.312NT AUTHORITY\SYSTEM +11241100x800000000000000013822Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.312{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Management.Deployment.dll2025-10-29 13:37:32.312NT AUTHORITY\SYSTEM +11241100x800000000000000013823Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.312{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Management.Infrastructure.CimCmdlets.dll2025-10-29 13:37:32.312NT AUTHORITY\SYSTEM +11241100x800000000000000013824Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.314{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\microsoft.management.infrastructure.dll2025-10-29 13:37:32.312NT AUTHORITY\SYSTEM +11241100x800000000000000013825Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.314{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\microsoft.management.infrastructure.native.dll2025-10-29 13:37:32.314NT AUTHORITY\SYSTEM +11241100x800000000000000013826Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.314{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\microsoft.management.infrastructure.native.unmanaged.dll2025-10-29 13:37:32.314NT AUTHORITY\SYSTEM +11241100x800000000000000013827Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.314{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.PowerShell.Commands.Diagnostics.dll2025-10-29 13:37:32.314NT AUTHORITY\SYSTEM +11241100x800000000000000013828Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.314{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.PowerShell.Commands.Management.dll2025-10-29 13:37:32.314NT AUTHORITY\SYSTEM +11241100x800000000000000013829Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.314{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.PowerShell.Commands.Utility.dll2025-10-29 13:37:32.314NT AUTHORITY\SYSTEM +11241100x800000000000000013830Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.316{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.PowerShell.ConsoleHost.dll2025-10-29 13:37:32.314NT AUTHORITY\SYSTEM +11241100x800000000000000013831Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.316{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.PowerShell.CoreCLR.Eventing.dll2025-10-29 13:37:32.316NT AUTHORITY\SYSTEM +11241100x800000000000000013832Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.316{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.PowerShell.SDK.dll2025-10-29 13:37:32.316NT AUTHORITY\SYSTEM +11241100x800000000000000013833Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.316{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.PowerShell.Security.dll2025-10-29 13:37:32.316NT AUTHORITY\SYSTEM +11241100x800000000000000013834Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.316{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.VisualBasic.Core.dll2025-10-29 13:37:32.316NT AUTHORITY\SYSTEM +11241100x800000000000000013835Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.316{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.VisualBasic.dll2025-10-29 13:37:32.316NT AUTHORITY\SYSTEM +11241100x800000000000000013836Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.316{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Win32.Primitives.dll2025-10-29 13:37:32.316NT AUTHORITY\SYSTEM +11241100x800000000000000013837Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.318{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Win32.Registry.dll2025-10-29 13:37:32.318NT AUTHORITY\SYSTEM +11241100x800000000000000013838Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.318{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.Win32.SystemEvents.dll2025-10-29 13:37:32.318NT AUTHORITY\SYSTEM +11241100x800000000000000013839Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.318{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.WinGet.SharedLib.dll2025-10-29 13:37:32.318NT AUTHORITY\SYSTEM +11241100x800000000000000013840Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.318{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.WSMan.Management.dll2025-10-29 13:37:32.318NT AUTHORITY\SYSTEM +11241100x800000000000000013841Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.320{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Microsoft.WSMan.Runtime.dll2025-10-29 13:37:32.318NT AUTHORITY\SYSTEM +11241100x800000000000000013842Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.320{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ModelContextProtocol.Core.dll2025-10-29 13:37:32.320NT AUTHORITY\SYSTEM +11241100x800000000000000013843Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.320{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ModelContextProtocol.dll2025-10-29 13:37:32.320NT AUTHORITY\SYSTEM +11241100x800000000000000013844Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.329{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\mscordaccore.dll2025-10-29 13:37:32.329NT AUTHORITY\SYSTEM +11241100x800000000000000013845Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.329{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\mscordaccore_amd64_amd64_8.0.2125.47513.dll2025-10-29 13:37:32.329NT AUTHORITY\SYSTEM +11241100x800000000000000013846Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.329{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\mscordbi.dll2025-10-29 13:37:32.329NT AUTHORITY\SYSTEM +11241100x800000000000000013847Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.329{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\mscorlib.dll2025-10-29 13:37:32.329NT AUTHORITY\SYSTEM +11241100x800000000000000013848Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.331{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\mscorrc.dll2025-10-29 13:37:32.331NT AUTHORITY\SYSTEM +11241100x800000000000000013849Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.331{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\netstandard.dll2025-10-29 13:37:32.331NT AUTHORITY\SYSTEM +11241100x800000000000000013850Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.331{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\Newtonsoft.Json.dll2025-10-29 13:37:32.331NT AUTHORITY\SYSTEM +11241100x800000000000000013851Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\Microsoft.CSharp.dll2025-10-29 13:37:32.331NT AUTHORITY\SYSTEM +11241100x800000000000000013852Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\Microsoft.VisualBasic.Core.dll2025-10-29 13:37:32.334NT AUTHORITY\SYSTEM +11241100x800000000000000013853Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\Microsoft.VisualBasic.dll2025-10-29 13:37:32.334NT AUTHORITY\SYSTEM +11241100x800000000000000013854Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\Microsoft.Win32.Primitives.dll2025-10-29 13:37:32.334NT AUTHORITY\SYSTEM +11241100x800000000000000013855Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.334{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\Microsoft.Win32.Registry.dll2025-10-29 13:37:32.334NT AUTHORITY\SYSTEM +11241100x800000000000000013856Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.336{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\mscorlib.dll2025-10-29 13:37:32.336NT AUTHORITY\SYSTEM +11241100x800000000000000013857Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.336{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\netstandard.dll2025-10-29 13:37:32.336NT AUTHORITY\SYSTEM +11241100x800000000000000013858Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.336{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.AppContext.dll2025-10-29 13:37:32.336NT AUTHORITY\SYSTEM +11241100x800000000000000013859Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.336{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Buffers.dll2025-10-29 13:37:32.336NT AUTHORITY\SYSTEM +11241100x800000000000000013860Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.336{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Collections.Concurrent.dll2025-10-29 13:37:32.336NT AUTHORITY\SYSTEM +11241100x800000000000000013861Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.336{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Collections.dll2025-10-29 13:37:32.336NT AUTHORITY\SYSTEM +11241100x800000000000000013862Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.338{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Collections.Immutable.dll2025-10-29 13:37:32.338NT AUTHORITY\SYSTEM +11241100x800000000000000013863Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.338{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Collections.NonGeneric.dll2025-10-29 13:37:32.338NT AUTHORITY\SYSTEM +11241100x800000000000000013864Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.338{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Collections.Specialized.dll2025-10-29 13:37:32.338NT AUTHORITY\SYSTEM +11241100x800000000000000013865Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.338{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ComponentModel.Annotations.dll2025-10-29 13:37:32.338NT AUTHORITY\SYSTEM +11241100x800000000000000013866Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.338{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ComponentModel.DataAnnotations.dll2025-10-29 13:37:32.338NT AUTHORITY\SYSTEM +11241100x800000000000000013867Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.340{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ComponentModel.dll2025-10-29 13:37:32.338NT AUTHORITY\SYSTEM +11241100x800000000000000013868Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.340{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ComponentModel.EventBasedAsync.dll2025-10-29 13:37:32.340NT AUTHORITY\SYSTEM +11241100x800000000000000013869Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.340{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ComponentModel.Primitives.dll2025-10-29 13:37:32.340NT AUTHORITY\SYSTEM +11241100x800000000000000013870Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.340{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ComponentModel.TypeConverter.dll2025-10-29 13:37:32.340NT AUTHORITY\SYSTEM +11241100x800000000000000013871Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Configuration.dll2025-10-29 13:37:32.341NT AUTHORITY\SYSTEM +11241100x800000000000000013872Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Console.dll2025-10-29 13:37:32.341NT AUTHORITY\SYSTEM +11241100x800000000000000013873Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Core.dll2025-10-29 13:37:32.341NT AUTHORITY\SYSTEM +11241100x800000000000000013874Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Data.Common.dll2025-10-29 13:37:32.341NT AUTHORITY\SYSTEM +11241100x800000000000000013875Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.341{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Data.DataSetExtensions.dll2025-10-29 13:37:32.341NT AUTHORITY\SYSTEM +11241100x800000000000000013876Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Data.dll2025-10-29 13:37:32.341NT AUTHORITY\SYSTEM +11241100x800000000000000013877Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.Contracts.dll2025-10-29 13:37:32.343NT AUTHORITY\SYSTEM +11241100x800000000000000013878Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.Debug.dll2025-10-29 13:37:32.343NT AUTHORITY\SYSTEM +11241100x800000000000000013879Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.DiagnosticSource.dll2025-10-29 13:37:32.343NT AUTHORITY\SYSTEM +11241100x800000000000000013880Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.343{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.FileVersionInfo.dll2025-10-29 13:37:32.343NT AUTHORITY\SYSTEM +11241100x800000000000000013881Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.345{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.Process.dll2025-10-29 13:37:32.345NT AUTHORITY\SYSTEM +11241100x800000000000000013882Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.345{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.StackTrace.dll2025-10-29 13:37:32.345NT AUTHORITY\SYSTEM +11241100x800000000000000013883Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.345{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.TextWriterTraceListener.dll2025-10-29 13:37:32.345NT AUTHORITY\SYSTEM +11241100x800000000000000013884Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.345{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.Tools.dll2025-10-29 13:37:32.345NT AUTHORITY\SYSTEM +11241100x800000000000000013885Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.345{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.TraceSource.dll2025-10-29 13:37:32.345NT AUTHORITY\SYSTEM +11241100x800000000000000013886Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.345{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Diagnostics.Tracing.dll2025-10-29 13:37:32.345NT AUTHORITY\SYSTEM +11241100x800000000000000013887Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.347{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.dll2025-10-29 13:37:32.347NT AUTHORITY\SYSTEM +11241100x800000000000000013888Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.347{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Drawing.dll2025-10-29 13:37:32.347NT AUTHORITY\SYSTEM +11241100x800000000000000013889Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.347{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Drawing.Primitives.dll2025-10-29 13:37:32.347NT AUTHORITY\SYSTEM +11241100x800000000000000013890Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.347{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Dynamic.Runtime.dll2025-10-29 13:37:32.347NT AUTHORITY\SYSTEM +11241100x800000000000000013891Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.347{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Formats.Asn1.dll2025-10-29 13:37:32.347NT AUTHORITY\SYSTEM +11241100x800000000000000013892Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.347{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Formats.Tar.dll2025-10-29 13:37:32.347NT AUTHORITY\SYSTEM +11241100x800000000000000013893Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.349{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Globalization.Calendars.dll2025-10-29 13:37:32.349NT AUTHORITY\SYSTEM +11241100x800000000000000013894Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.349{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Globalization.dll2025-10-29 13:37:32.349NT AUTHORITY\SYSTEM +11241100x800000000000000013895Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.349{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Globalization.Extensions.dll2025-10-29 13:37:32.349NT AUTHORITY\SYSTEM +11241100x800000000000000013896Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.349{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.Compression.Brotli.dll2025-10-29 13:37:32.349NT AUTHORITY\SYSTEM +11241100x800000000000000013897Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.349{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.Compression.dll2025-10-29 13:37:32.349NT AUTHORITY\SYSTEM +11241100x800000000000000013898Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.Compression.FileSystem.dll2025-10-29 13:37:32.351NT AUTHORITY\SYSTEM +11241100x800000000000000013899Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.Compression.ZipFile.dll2025-10-29 13:37:32.351NT AUTHORITY\SYSTEM +11241100x800000000000000013900Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.dll2025-10-29 13:37:32.351NT AUTHORITY\SYSTEM +11241100x800000000000000013901Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.351{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.FileSystem.AccessControl.dll2025-10-29 13:37:32.351NT AUTHORITY\SYSTEM +11241100x800000000000000013902Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.353{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.FileSystem.dll2025-10-29 13:37:32.353NT AUTHORITY\SYSTEM +11241100x800000000000000013903Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.353{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.FileSystem.DriveInfo.dll2025-10-29 13:37:32.353NT AUTHORITY\SYSTEM +11241100x800000000000000013904Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.353{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.FileSystem.Primitives.dll2025-10-29 13:37:32.353NT AUTHORITY\SYSTEM +11241100x800000000000000013905Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.353{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.FileSystem.Watcher.dll2025-10-29 13:37:32.353NT AUTHORITY\SYSTEM +11241100x800000000000000013906Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.355{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.IsolatedStorage.dll2025-10-29 13:37:32.353NT AUTHORITY\SYSTEM +11241100x800000000000000013907Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.355{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.MemoryMappedFiles.dll2025-10-29 13:37:32.355NT AUTHORITY\SYSTEM +11241100x800000000000000013908Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.355{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.Pipes.AccessControl.dll2025-10-29 13:37:32.355NT AUTHORITY\SYSTEM +11241100x800000000000000013909Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.Pipes.dll2025-10-29 13:37:32.355NT AUTHORITY\SYSTEM +11241100x800000000000000013910Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.IO.UnmanagedMemoryStream.dll2025-10-29 13:37:32.357NT AUTHORITY\SYSTEM +11241100x800000000000000013911Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Linq.dll2025-10-29 13:37:32.357NT AUTHORITY\SYSTEM +11241100x800000000000000013912Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Linq.Expressions.dll2025-10-29 13:37:32.357NT AUTHORITY\SYSTEM +11241100x800000000000000013913Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.357{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Linq.Parallel.dll2025-10-29 13:37:32.357NT AUTHORITY\SYSTEM +11241100x800000000000000013914Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Linq.Queryable.dll2025-10-29 13:37:32.359NT AUTHORITY\SYSTEM +11241100x800000000000000013915Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Memory.dll2025-10-29 13:37:32.359NT AUTHORITY\SYSTEM +11241100x800000000000000013916Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.dll2025-10-29 13:37:32.359NT AUTHORITY\SYSTEM +11241100x800000000000000013917Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Http.dll2025-10-29 13:37:32.359NT AUTHORITY\SYSTEM +11241100x800000000000000013918Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.359{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Http.Json.dll2025-10-29 13:37:32.359NT AUTHORITY\SYSTEM +11241100x800000000000000013919Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.HttpListener.dll2025-10-29 13:37:32.361NT AUTHORITY\SYSTEM +11241100x800000000000000013920Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Mail.dll2025-10-29 13:37:32.361NT AUTHORITY\SYSTEM +11241100x800000000000000013921Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.NameResolution.dll2025-10-29 13:37:32.361NT AUTHORITY\SYSTEM +11241100x800000000000000013922Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.361{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.NetworkInformation.dll2025-10-29 13:37:32.361NT AUTHORITY\SYSTEM +11241100x800000000000000013923Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Ping.dll2025-10-29 13:37:32.363NT AUTHORITY\SYSTEM +11241100x800000000000000013924Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Primitives.dll2025-10-29 13:37:32.363NT AUTHORITY\SYSTEM +11241100x800000000000000013925Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Quic.dll2025-10-29 13:37:32.363NT AUTHORITY\SYSTEM +11241100x800000000000000013926Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.363{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Requests.dll2025-10-29 13:37:32.363NT AUTHORITY\SYSTEM +11241100x800000000000000013927Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Security.dll2025-10-29 13:37:32.363NT AUTHORITY\SYSTEM +11241100x800000000000000013928Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.ServicePoint.dll2025-10-29 13:37:32.365NT AUTHORITY\SYSTEM +11241100x800000000000000013929Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.Sockets.dll2025-10-29 13:37:32.365NT AUTHORITY\SYSTEM +11241100x800000000000000013930Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.WebClient.dll2025-10-29 13:37:32.365NT AUTHORITY\SYSTEM +11241100x800000000000000013931Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.WebHeaderCollection.dll2025-10-29 13:37:32.365NT AUTHORITY\SYSTEM +11241100x800000000000000013932Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.365{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.WebProxy.dll2025-10-29 13:37:32.365NT AUTHORITY\SYSTEM +11241100x800000000000000013933Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.WebSockets.Client.dll2025-10-29 13:37:32.367NT AUTHORITY\SYSTEM +11241100x800000000000000013934Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Net.WebSockets.dll2025-10-29 13:37:32.367NT AUTHORITY\SYSTEM +11241100x800000000000000013935Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Numerics.dll2025-10-29 13:37:32.367NT AUTHORITY\SYSTEM +11241100x800000000000000013936Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Numerics.Vectors.dll2025-10-29 13:37:32.367NT AUTHORITY\SYSTEM +11241100x800000000000000013937Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.367{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ObjectModel.dll2025-10-29 13:37:32.367NT AUTHORITY\SYSTEM +11241100x800000000000000013938Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.DispatchProxy.dll2025-10-29 13:37:32.367NT AUTHORITY\SYSTEM +11241100x800000000000000013939Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.dll2025-10-29 13:37:32.369NT AUTHORITY\SYSTEM +11241100x800000000000000013940Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.Emit.dll2025-10-29 13:37:32.369NT AUTHORITY\SYSTEM +11241100x800000000000000013941Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.Emit.ILGeneration.dll2025-10-29 13:37:32.369NT AUTHORITY\SYSTEM +11241100x800000000000000013942Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.369{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.Emit.Lightweight.dll2025-10-29 13:37:32.369NT AUTHORITY\SYSTEM +11241100x800000000000000013943Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.Extensions.dll2025-10-29 13:37:32.369NT AUTHORITY\SYSTEM +11241100x800000000000000013944Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.Metadata.dll2025-10-29 13:37:32.371NT AUTHORITY\SYSTEM +11241100x800000000000000013945Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.Primitives.dll2025-10-29 13:37:32.371NT AUTHORITY\SYSTEM +11241100x800000000000000013946Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Reflection.TypeExtensions.dll2025-10-29 13:37:32.371NT AUTHORITY\SYSTEM +11241100x800000000000000013947Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.371{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Resources.Reader.dll2025-10-29 13:37:32.371NT AUTHORITY\SYSTEM +11241100x800000000000000013948Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Resources.ResourceManager.dll2025-10-29 13:37:32.371NT AUTHORITY\SYSTEM +11241100x800000000000000013949Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Resources.Writer.dll2025-10-29 13:37:32.373NT AUTHORITY\SYSTEM +11241100x800000000000000013950Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.CompilerServices.Unsafe.dll2025-10-29 13:37:32.373NT AUTHORITY\SYSTEM +11241100x800000000000000013951Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.373{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.CompilerServices.VisualC.dll2025-10-29 13:37:32.373NT AUTHORITY\SYSTEM +11241100x800000000000000013952Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.dll2025-10-29 13:37:32.373NT AUTHORITY\SYSTEM +11241100x800000000000000013953Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Extensions.dll2025-10-29 13:37:32.375NT AUTHORITY\SYSTEM +11241100x800000000000000013954Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Handles.dll2025-10-29 13:37:32.375NT AUTHORITY\SYSTEM +11241100x800000000000000013955Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.InteropServices.dll2025-10-29 13:37:32.375NT AUTHORITY\SYSTEM +11241100x800000000000000013956Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.375{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.InteropServices.JavaScript.dll2025-10-29 13:37:32.375NT AUTHORITY\SYSTEM +11241100x800000000000000013957Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.InteropServices.RuntimeInformation.dll2025-10-29 13:37:32.377NT AUTHORITY\SYSTEM +11241100x800000000000000013958Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Intrinsics.dll2025-10-29 13:37:32.377NT AUTHORITY\SYSTEM +11241100x800000000000000013959Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Loader.dll2025-10-29 13:37:32.377NT AUTHORITY\SYSTEM +11241100x800000000000000013960Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Numerics.dll2025-10-29 13:37:32.377NT AUTHORITY\SYSTEM +11241100x800000000000000013961Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.377{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Serialization.dll2025-10-29 13:37:32.377NT AUTHORITY\SYSTEM +11241100x800000000000000013962Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Serialization.Formatters.dll2025-10-29 13:37:32.379NT AUTHORITY\SYSTEM +11241100x800000000000000013963Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Serialization.Json.dll2025-10-29 13:37:32.379NT AUTHORITY\SYSTEM +11241100x800000000000000013964Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Serialization.Primitives.dll2025-10-29 13:37:32.379NT AUTHORITY\SYSTEM +11241100x800000000000000013965Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.379{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Runtime.Serialization.Xml.dll2025-10-29 13:37:32.379NT AUTHORITY\SYSTEM +11241100x800000000000000013966Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.AccessControl.dll2025-10-29 13:37:32.381NT AUTHORITY\SYSTEM +11241100x800000000000000013967Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Claims.dll2025-10-29 13:37:32.381NT AUTHORITY\SYSTEM +11241100x800000000000000013968Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Cryptography.Algorithms.dll2025-10-29 13:37:32.381NT AUTHORITY\SYSTEM +11241100x800000000000000013969Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Cryptography.Cng.dll2025-10-29 13:37:32.381NT AUTHORITY\SYSTEM +11241100x800000000000000013970Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.381{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Cryptography.Csp.dll2025-10-29 13:37:32.381NT AUTHORITY\SYSTEM +11241100x800000000000000013971Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Cryptography.dll2025-10-29 13:37:32.381NT AUTHORITY\SYSTEM +11241100x800000000000000013972Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Cryptography.Encoding.dll2025-10-29 13:37:32.383NT AUTHORITY\SYSTEM +11241100x800000000000000013973Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Cryptography.OpenSsl.dll2025-10-29 13:37:32.383NT AUTHORITY\SYSTEM +11241100x800000000000000013974Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Cryptography.Primitives.dll2025-10-29 13:37:32.383NT AUTHORITY\SYSTEM +11241100x800000000000000013975Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Cryptography.X509Certificates.dll2025-10-29 13:37:32.383NT AUTHORITY\SYSTEM +11241100x800000000000000013976Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.383{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.dll2025-10-29 13:37:32.383NT AUTHORITY\SYSTEM +11241100x800000000000000013977Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Principal.dll2025-10-29 13:37:32.385NT AUTHORITY\SYSTEM +11241100x800000000000000013978Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.Principal.Windows.dll2025-10-29 13:37:32.385NT AUTHORITY\SYSTEM +11241100x800000000000000013979Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Security.SecureString.dll2025-10-29 13:37:32.385NT AUTHORITY\SYSTEM +11241100x800000000000000013980Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ServiceModel.Web.dll2025-10-29 13:37:32.385NT AUTHORITY\SYSTEM +11241100x800000000000000013981Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.385{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ServiceProcess.dll2025-10-29 13:37:32.385NT AUTHORITY\SYSTEM +11241100x800000000000000013982Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Text.Encoding.CodePages.dll2025-10-29 13:37:32.385NT AUTHORITY\SYSTEM +11241100x800000000000000013983Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Text.Encoding.dll2025-10-29 13:37:32.387NT AUTHORITY\SYSTEM +11241100x800000000000000013984Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Text.Encoding.Extensions.dll2025-10-29 13:37:32.387NT AUTHORITY\SYSTEM +11241100x800000000000000013985Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Text.Encodings.Web.dll2025-10-29 13:37:32.387NT AUTHORITY\SYSTEM +11241100x800000000000000013986Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.387{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Text.Json.dll2025-10-29 13:37:32.387NT AUTHORITY\SYSTEM +11241100x800000000000000013987Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Text.RegularExpressions.dll2025-10-29 13:37:32.389NT AUTHORITY\SYSTEM +11241100x800000000000000013988Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.Channels.dll2025-10-29 13:37:32.389NT AUTHORITY\SYSTEM +11241100x800000000000000013989Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.dll2025-10-29 13:37:32.389NT AUTHORITY\SYSTEM +11241100x800000000000000013990Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.Overlapped.dll2025-10-29 13:37:32.389NT AUTHORITY\SYSTEM +11241100x800000000000000013991Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.389{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.Tasks.Dataflow.dll2025-10-29 13:37:32.389NT AUTHORITY\SYSTEM +11241100x800000000000000013992Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.Tasks.dll2025-10-29 13:37:32.389NT AUTHORITY\SYSTEM +11241100x800000000000000013993Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.Tasks.Extensions.dll2025-10-29 13:37:32.391NT AUTHORITY\SYSTEM +11241100x800000000000000013994Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.Tasks.Parallel.dll2025-10-29 13:37:32.391NT AUTHORITY\SYSTEM +11241100x800000000000000013995Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.Thread.dll2025-10-29 13:37:32.391NT AUTHORITY\SYSTEM +11241100x800000000000000013996Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.ThreadPool.dll2025-10-29 13:37:32.391NT AUTHORITY\SYSTEM +11241100x800000000000000013997Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.391{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Threading.Timer.dll2025-10-29 13:37:32.391NT AUTHORITY\SYSTEM +11241100x800000000000000013998Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Transactions.dll2025-10-29 13:37:32.393NT AUTHORITY\SYSTEM +11241100x800000000000000013999Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Transactions.Local.dll2025-10-29 13:37:32.393NT AUTHORITY\SYSTEM +11241100x800000000000000014000Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.ValueTuple.dll2025-10-29 13:37:32.393NT AUTHORITY\SYSTEM +11241100x800000000000000014001Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Web.dll2025-10-29 13:37:32.393NT AUTHORITY\SYSTEM +11241100x800000000000000014002Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.393{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Web.HttpUtility.dll2025-10-29 13:37:32.393NT AUTHORITY\SYSTEM +11241100x800000000000000014003Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.395{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Windows.dll2025-10-29 13:37:32.395NT AUTHORITY\SYSTEM +11241100x800000000000000014004Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.395{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.dll2025-10-29 13:37:32.395NT AUTHORITY\SYSTEM +11241100x800000000000000014005Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.395{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.Linq.dll2025-10-29 13:37:32.395NT AUTHORITY\SYSTEM +11241100x800000000000000014006Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.395{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.ReaderWriter.dll2025-10-29 13:37:32.395NT AUTHORITY\SYSTEM +11241100x800000000000000014007Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.407{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.Serialization.dll2025-10-29 13:37:32.395NT AUTHORITY\SYSTEM +11241100x800000000000000014008Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.407{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.XDocument.dll2025-10-29 13:37:32.407NT AUTHORITY\SYSTEM +11241100x800000000000000014009Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.407{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.XmlDocument.dll2025-10-29 13:37:32.407NT AUTHORITY\SYSTEM +11241100x800000000000000014010Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.XmlSerializer.dll2025-10-29 13:37:32.409NT AUTHORITY\SYSTEM +11241100x800000000000000014011Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.XPath.dll2025-10-29 13:37:32.409NT AUTHORITY\SYSTEM +11241100x800000000000000014012Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\System.Xml.XPath.XDocument.dll2025-10-29 13:37:32.409NT AUTHORITY\SYSTEM +11241100x800000000000000014013Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\ref\WindowsBase.dll2025-10-29 13:37:32.409NT AUTHORITY\SYSTEM +11241100x800000000000000014014Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.409{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.AppContext.dll2025-10-29 13:37:32.409NT AUTHORITY\SYSTEM +11241100x800000000000000014015Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Buffers.dll2025-10-29 13:37:32.411NT AUTHORITY\SYSTEM +11241100x800000000000000014016Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Collections.Concurrent.dll2025-10-29 13:37:32.411NT AUTHORITY\SYSTEM +11241100x800000000000000014017Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Collections.dll2025-10-29 13:37:32.411NT AUTHORITY\SYSTEM +11241100x800000000000000014018Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Collections.Immutable.dll2025-10-29 13:37:32.411NT AUTHORITY\SYSTEM +11241100x800000000000000014019Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.411{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Collections.NonGeneric.dll2025-10-29 13:37:32.411NT AUTHORITY\SYSTEM +11241100x800000000000000014020Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Collections.Specialized.dll2025-10-29 13:37:32.411NT AUTHORITY\SYSTEM +11241100x800000000000000014021Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ComponentModel.Annotations.dll2025-10-29 13:37:32.413NT AUTHORITY\SYSTEM +11241100x800000000000000014022Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ComponentModel.DataAnnotations.dll2025-10-29 13:37:32.413NT AUTHORITY\SYSTEM +11241100x800000000000000014023Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ComponentModel.dll2025-10-29 13:37:32.413NT AUTHORITY\SYSTEM +11241100x800000000000000014024Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ComponentModel.EventBasedAsync.dll2025-10-29 13:37:32.413NT AUTHORITY\SYSTEM +11241100x800000000000000014025Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.413{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ComponentModel.Primitives.dll2025-10-29 13:37:32.413NT AUTHORITY\SYSTEM +11241100x800000000000000014026Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ComponentModel.TypeConverter.dll2025-10-29 13:37:32.413NT AUTHORITY\SYSTEM +11241100x800000000000000014027Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Configuration.dll2025-10-29 13:37:32.415NT AUTHORITY\SYSTEM +11241100x800000000000000014028Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Console.dll2025-10-29 13:37:32.415NT AUTHORITY\SYSTEM +11241100x800000000000000014029Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Core.dll2025-10-29 13:37:32.415NT AUTHORITY\SYSTEM +11241100x800000000000000014030Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Data.Common.dll2025-10-29 13:37:32.415NT AUTHORITY\SYSTEM +11241100x800000000000000014031Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Data.DataSetExtensions.dll2025-10-29 13:37:32.415NT AUTHORITY\SYSTEM +11241100x800000000000000014032Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.415{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Data.dll2025-10-29 13:37:32.415NT AUTHORITY\SYSTEM +11241100x800000000000000014033Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Data.SqlClient.dll2025-10-29 13:37:32.415NT AUTHORITY\SYSTEM +11241100x800000000000000014034Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.Contracts.dll2025-10-29 13:37:32.417NT AUTHORITY\SYSTEM +11241100x800000000000000014035Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.Debug.dll2025-10-29 13:37:32.417NT AUTHORITY\SYSTEM +11241100x800000000000000014036Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.DiagnosticSource.dll2025-10-29 13:37:32.417NT AUTHORITY\SYSTEM +11241100x800000000000000014037Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.EventLog.dll2025-10-29 13:37:32.417NT AUTHORITY\SYSTEM +11241100x800000000000000014038Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.EventLog.Messages.dll2025-10-29 13:37:32.417NT AUTHORITY\SYSTEM +11241100x800000000000000014039Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.417{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.FileVersionInfo.dll2025-10-29 13:37:32.417NT AUTHORITY\SYSTEM +11241100x800000000000000014040Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.Process.dll2025-10-29 13:37:32.419NT AUTHORITY\SYSTEM +11241100x800000000000000014041Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.StackTrace.dll2025-10-29 13:37:32.419NT AUTHORITY\SYSTEM +11241100x800000000000000014042Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.TextWriterTraceListener.dll2025-10-29 13:37:32.419NT AUTHORITY\SYSTEM +11241100x800000000000000014043Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.Tools.dll2025-10-29 13:37:32.419NT AUTHORITY\SYSTEM +11241100x800000000000000014044Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.TraceSource.dll2025-10-29 13:37:32.419NT AUTHORITY\SYSTEM +11241100x800000000000000014045Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.419{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Diagnostics.Tracing.dll2025-10-29 13:37:32.419NT AUTHORITY\SYSTEM +11241100x800000000000000014046Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.DirectoryServices.Protocols.dll2025-10-29 13:37:32.421NT AUTHORITY\SYSTEM +11241100x800000000000000014047Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.dll2025-10-29 13:37:32.421NT AUTHORITY\SYSTEM +11241100x800000000000000014048Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Drawing.Common.dll2025-10-29 13:37:32.421NT AUTHORITY\SYSTEM +11241100x800000000000000014049Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.421{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Drawing.dll2025-10-29 13:37:32.421NT AUTHORITY\SYSTEM +11241100x800000000000000014050Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Drawing.Primitives.dll2025-10-29 13:37:32.421NT AUTHORITY\SYSTEM +11241100x800000000000000014051Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Dynamic.Runtime.dll2025-10-29 13:37:32.423NT AUTHORITY\SYSTEM +11241100x800000000000000014052Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Formats.Asn1.dll2025-10-29 13:37:32.423NT AUTHORITY\SYSTEM +11241100x800000000000000014053Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Formats.Tar.dll2025-10-29 13:37:32.423NT AUTHORITY\SYSTEM +11241100x800000000000000014054Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Globalization.Calendars.dll2025-10-29 13:37:32.423NT AUTHORITY\SYSTEM +11241100x800000000000000014055Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.423{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Globalization.dll2025-10-29 13:37:32.423NT AUTHORITY\SYSTEM +11241100x800000000000000014056Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Globalization.Extensions.dll2025-10-29 13:37:32.425NT AUTHORITY\SYSTEM +11241100x800000000000000014057Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.Compression.Brotli.dll2025-10-29 13:37:32.425NT AUTHORITY\SYSTEM +11241100x800000000000000014058Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.Compression.dll2025-10-29 13:37:32.425NT AUTHORITY\SYSTEM +11241100x800000000000000014059Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.Compression.FileSystem.dll2025-10-29 13:37:32.425NT AUTHORITY\SYSTEM +11241100x800000000000000014060Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.425{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.Compression.Native.dll2025-10-29 13:37:32.425NT AUTHORITY\SYSTEM +11241100x800000000000000014061Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.Compression.ZipFile.dll2025-10-29 13:37:32.425NT AUTHORITY\SYSTEM +11241100x800000000000000014062Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.dll2025-10-29 13:37:32.427NT AUTHORITY\SYSTEM +11241100x800000000000000014063Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.FileSystem.AccessControl.dll2025-10-29 13:37:32.427NT AUTHORITY\SYSTEM +11241100x800000000000000014064Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.FileSystem.dll2025-10-29 13:37:32.427NT AUTHORITY\SYSTEM +11241100x800000000000000014065Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.FileSystem.DriveInfo.dll2025-10-29 13:37:32.427NT AUTHORITY\SYSTEM +11241100x800000000000000014066Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.427{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.FileSystem.Primitives.dll2025-10-29 13:37:32.427NT AUTHORITY\SYSTEM +11241100x800000000000000014067Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.FileSystem.Watcher.dll2025-10-29 13:37:32.429NT AUTHORITY\SYSTEM +11241100x800000000000000014068Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.IsolatedStorage.dll2025-10-29 13:37:32.429NT AUTHORITY\SYSTEM +11241100x800000000000000014069Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.MemoryMappedFiles.dll2025-10-29 13:37:32.429NT AUTHORITY\SYSTEM +11241100x800000000000000014070Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.Pipelines.dll2025-10-29 13:37:32.429NT AUTHORITY\SYSTEM +11241100x800000000000000014071Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.Pipes.AccessControl.dll2025-10-29 13:37:32.429NT AUTHORITY\SYSTEM +11241100x800000000000000014072Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.429{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.Pipes.dll2025-10-29 13:37:32.429NT AUTHORITY\SYSTEM +11241100x800000000000000014073Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.431{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.IO.UnmanagedMemoryStream.dll2025-10-29 13:37:32.429NT AUTHORITY\SYSTEM +11241100x800000000000000014074Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.431{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Linq.dll2025-10-29 13:37:32.431NT AUTHORITY\SYSTEM +11241100x800000000000000014075Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.431{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Linq.Expressions.dll2025-10-29 13:37:32.431NT AUTHORITY\SYSTEM +11241100x800000000000000014076Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.431{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Linq.Parallel.dll2025-10-29 13:37:32.431NT AUTHORITY\SYSTEM +11241100x800000000000000014077Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.431{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Linq.Queryable.dll2025-10-29 13:37:32.431NT AUTHORITY\SYSTEM +11241100x800000000000000014078Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.431{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Management.Automation.dll2025-10-29 13:37:32.431NT AUTHORITY\SYSTEM +11241100x800000000000000014079Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.431{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Memory.dll2025-10-29 13:37:32.431NT AUTHORITY\SYSTEM +11241100x800000000000000014080Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.433{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.dll2025-10-29 13:37:32.433NT AUTHORITY\SYSTEM +11241100x800000000000000014081Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.433{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Http.dll2025-10-29 13:37:32.433NT AUTHORITY\SYSTEM +11241100x800000000000000014082Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.433{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Http.Json.dll2025-10-29 13:37:32.433NT AUTHORITY\SYSTEM +11241100x800000000000000014083Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.433{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Http.WinHttpHandler.dll2025-10-29 13:37:32.433NT AUTHORITY\SYSTEM +11241100x800000000000000014084Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.433{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.HttpListener.dll2025-10-29 13:37:32.433NT AUTHORITY\SYSTEM +11241100x800000000000000014085Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.435{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Mail.dll2025-10-29 13:37:32.433NT AUTHORITY\SYSTEM +11241100x800000000000000014086Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.435{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.NameResolution.dll2025-10-29 13:37:32.435NT AUTHORITY\SYSTEM +11241100x800000000000000014087Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.435{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.NetworkInformation.dll2025-10-29 13:37:32.435NT AUTHORITY\SYSTEM +11241100x800000000000000014088Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.435{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Ping.dll2025-10-29 13:37:32.435NT AUTHORITY\SYSTEM +11241100x800000000000000014089Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.435{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Primitives.dll2025-10-29 13:37:32.435NT AUTHORITY\SYSTEM +11241100x800000000000000014090Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.435{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Quic.dll2025-10-29 13:37:32.435NT AUTHORITY\SYSTEM +11241100x800000000000000014091Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Requests.dll2025-10-29 13:37:32.435NT AUTHORITY\SYSTEM +11241100x800000000000000014092Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Security.dll2025-10-29 13:37:32.436NT AUTHORITY\SYSTEM +11241100x800000000000000014093Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.ServerSentEvents.dll2025-10-29 13:37:32.436NT AUTHORITY\SYSTEM +11241100x800000000000000014094Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.ServicePoint.dll2025-10-29 13:37:32.436NT AUTHORITY\SYSTEM +11241100x800000000000000014095Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.436{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.Sockets.dll2025-10-29 13:37:32.436NT AUTHORITY\SYSTEM +11241100x800000000000000014096Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.WebClient.dll2025-10-29 13:37:32.436NT AUTHORITY\SYSTEM +11241100x800000000000000014097Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.WebHeaderCollection.dll2025-10-29 13:37:32.438NT AUTHORITY\SYSTEM +11241100x800000000000000014098Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.WebProxy.dll2025-10-29 13:37:32.438NT AUTHORITY\SYSTEM +11241100x800000000000000014099Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.WebSockets.Client.dll2025-10-29 13:37:32.438NT AUTHORITY\SYSTEM +11241100x800000000000000014100Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.438{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Net.WebSockets.dll2025-10-29 13:37:32.438NT AUTHORITY\SYSTEM +11241100x800000000000000014101Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Numerics.dll2025-10-29 13:37:32.438NT AUTHORITY\SYSTEM +11241100x800000000000000014102Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Numerics.Vectors.dll2025-10-29 13:37:32.441NT AUTHORITY\SYSTEM +11241100x800000000000000014103Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ObjectModel.dll2025-10-29 13:37:32.441NT AUTHORITY\SYSTEM +11241100x800000000000000014104Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Private.CoreLib.dll2025-10-29 13:37:32.441NT AUTHORITY\SYSTEM +11241100x800000000000000014105Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Private.DataContractSerialization.dll2025-10-29 13:37:32.441NT AUTHORITY\SYSTEM +11241100x800000000000000014106Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Private.Uri.dll2025-10-29 13:37:32.441NT AUTHORITY\SYSTEM +11241100x800000000000000014107Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Private.Xml.dll2025-10-29 13:37:32.443NT AUTHORITY\SYSTEM +11241100x800000000000000014108Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Private.Xml.Linq.dll2025-10-29 13:37:32.443NT AUTHORITY\SYSTEM +11241100x800000000000000014109Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.DispatchProxy.dll2025-10-29 13:37:32.443NT AUTHORITY\SYSTEM +11241100x800000000000000014110Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.dll2025-10-29 13:37:32.443NT AUTHORITY\SYSTEM +11241100x800000000000000014111Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.Emit.dll2025-10-29 13:37:32.443NT AUTHORITY\SYSTEM +11241100x800000000000000014112Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.Emit.ILGeneration.dll2025-10-29 13:37:32.443NT AUTHORITY\SYSTEM +11241100x800000000000000014113Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.Emit.Lightweight.dll2025-10-29 13:37:32.445NT AUTHORITY\SYSTEM +11241100x800000000000000014114Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.Extensions.dll2025-10-29 13:37:32.445NT AUTHORITY\SYSTEM +11241100x800000000000000014115Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.Metadata.dll2025-10-29 13:37:32.445NT AUTHORITY\SYSTEM +11241100x800000000000000014116Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.Primitives.dll2025-10-29 13:37:32.445NT AUTHORITY\SYSTEM +11241100x800000000000000014117Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Reflection.TypeExtensions.dll2025-10-29 13:37:32.445NT AUTHORITY\SYSTEM +11241100x800000000000000014118Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.447{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Resources.Reader.dll2025-10-29 13:37:32.447NT AUTHORITY\SYSTEM +11241100x800000000000000014119Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.447{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Resources.ResourceManager.dll2025-10-29 13:37:32.447NT AUTHORITY\SYSTEM +11241100x800000000000000014120Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.447{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Resources.Writer.dll2025-10-29 13:37:32.447NT AUTHORITY\SYSTEM +11241100x800000000000000014121Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.447{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.CompilerServices.Unsafe.dll2025-10-29 13:37:32.447NT AUTHORITY\SYSTEM +11241100x800000000000000014122Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.447{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.CompilerServices.VisualC.dll2025-10-29 13:37:32.447NT AUTHORITY\SYSTEM +11241100x800000000000000014123Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.449{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.dll2025-10-29 13:37:32.447NT AUTHORITY\SYSTEM +11241100x800000000000000014124Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.449{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Extensions.dll2025-10-29 13:37:32.449NT AUTHORITY\SYSTEM +11241100x800000000000000014125Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.449{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Handles.dll2025-10-29 13:37:32.449NT AUTHORITY\SYSTEM +11241100x800000000000000014126Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.449{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.InteropServices.dll2025-10-29 13:37:32.449NT AUTHORITY\SYSTEM +11241100x800000000000000014127Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.InteropServices.JavaScript.dll2025-10-29 13:37:32.449NT AUTHORITY\SYSTEM +11241100x800000000000000014128Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.InteropServices.RuntimeInformation.dll2025-10-29 13:37:32.451NT AUTHORITY\SYSTEM +11241100x800000000000000014129Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Intrinsics.dll2025-10-29 13:37:32.451NT AUTHORITY\SYSTEM +11241100x800000000000000014130Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Loader.dll2025-10-29 13:37:32.451NT AUTHORITY\SYSTEM +11241100x800000000000000014131Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Numerics.dll2025-10-29 13:37:32.451NT AUTHORITY\SYSTEM +11241100x800000000000000014132Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Serialization.dll2025-10-29 13:37:32.451NT AUTHORITY\SYSTEM +11241100x800000000000000014133Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Serialization.Formatters.dll2025-10-29 13:37:32.452NT AUTHORITY\SYSTEM +11241100x800000000000000014134Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Serialization.Json.dll2025-10-29 13:37:32.452NT AUTHORITY\SYSTEM +11241100x800000000000000014135Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Serialization.Primitives.dll2025-10-29 13:37:32.452NT AUTHORITY\SYSTEM +11241100x800000000000000014136Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Runtime.Serialization.Xml.dll2025-10-29 13:37:32.452NT AUTHORITY\SYSTEM +11241100x800000000000000014137Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.452{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.AccessControl.dll2025-10-29 13:37:32.452NT AUTHORITY\SYSTEM +11241100x800000000000000014138Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Claims.dll2025-10-29 13:37:32.454NT AUTHORITY\SYSTEM +11241100x800000000000000014139Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Cryptography.Algorithms.dll2025-10-29 13:37:32.454NT AUTHORITY\SYSTEM +11241100x800000000000000014140Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Cryptography.Cng.dll2025-10-29 13:37:32.454NT AUTHORITY\SYSTEM +11241100x800000000000000014141Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Cryptography.Csp.dll2025-10-29 13:37:32.454NT AUTHORITY\SYSTEM +11241100x800000000000000014142Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.454{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Cryptography.dll2025-10-29 13:37:32.454NT AUTHORITY\SYSTEM +11241100x800000000000000014143Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Cryptography.Encoding.dll2025-10-29 13:37:32.456NT AUTHORITY\SYSTEM +11241100x800000000000000014144Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Cryptography.OpenSsl.dll2025-10-29 13:37:32.456NT AUTHORITY\SYSTEM +11241100x800000000000000014145Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Cryptography.Primitives.dll2025-10-29 13:37:32.456NT AUTHORITY\SYSTEM +11241100x800000000000000014146Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Cryptography.X509Certificates.dll2025-10-29 13:37:32.456NT AUTHORITY\SYSTEM +11241100x800000000000000014147Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.456{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.dll2025-10-29 13:37:32.456NT AUTHORITY\SYSTEM +11241100x800000000000000014148Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Principal.dll2025-10-29 13:37:32.456NT AUTHORITY\SYSTEM +11241100x800000000000000014149Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.Principal.Windows.dll2025-10-29 13:37:32.458NT AUTHORITY\SYSTEM +11241100x800000000000000014150Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Security.SecureString.dll2025-10-29 13:37:32.458NT AUTHORITY\SYSTEM +11241100x800000000000000014151Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ServiceModel.Web.dll2025-10-29 13:37:32.458NT AUTHORITY\SYSTEM +11241100x800000000000000014152Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ServiceProcess.dll2025-10-29 13:37:32.458NT AUTHORITY\SYSTEM +11241100x800000000000000014153Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.458{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Text.Encoding.CodePages.dll2025-10-29 13:37:32.458NT AUTHORITY\SYSTEM +11241100x800000000000000014154Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.460{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Text.Encoding.dll2025-10-29 13:37:32.460NT AUTHORITY\SYSTEM +11241100x800000000000000014155Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.460{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Text.Encoding.Extensions.dll2025-10-29 13:37:32.460NT AUTHORITY\SYSTEM +11241100x800000000000000014156Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.460{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Text.Encodings.Web.dll2025-10-29 13:37:32.460NT AUTHORITY\SYSTEM +11241100x800000000000000014157Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.460{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Text.Json.dll2025-10-29 13:37:32.460NT AUTHORITY\SYSTEM +11241100x800000000000000014158Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.460{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Text.RegularExpressions.dll2025-10-29 13:37:32.460NT AUTHORITY\SYSTEM +11241100x800000000000000014159Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.AccessControl.dll2025-10-29 13:37:32.460NT AUTHORITY\SYSTEM +11241100x800000000000000014160Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.Channels.dll2025-10-29 13:37:32.462NT AUTHORITY\SYSTEM +11241100x800000000000000014161Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.dll2025-10-29 13:37:32.462NT AUTHORITY\SYSTEM +11241100x800000000000000014162Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.Overlapped.dll2025-10-29 13:37:32.462NT AUTHORITY\SYSTEM +11241100x800000000000000014163Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.Tasks.Dataflow.dll2025-10-29 13:37:32.462NT AUTHORITY\SYSTEM +11241100x800000000000000014164Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.462{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.Tasks.dll2025-10-29 13:37:32.462NT AUTHORITY\SYSTEM +11241100x800000000000000014165Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.Tasks.Extensions.dll2025-10-29 13:37:32.464NT AUTHORITY\SYSTEM +11241100x800000000000000014166Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.Tasks.Parallel.dll2025-10-29 13:37:32.464NT AUTHORITY\SYSTEM +11241100x800000000000000014167Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.Thread.dll2025-10-29 13:37:32.464NT AUTHORITY\SYSTEM +11241100x800000000000000014168Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.ThreadPool.dll2025-10-29 13:37:32.464NT AUTHORITY\SYSTEM +11241100x800000000000000014169Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Threading.Timer.dll2025-10-29 13:37:32.464NT AUTHORITY\SYSTEM +11241100x800000000000000014170Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.464{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Transactions.dll2025-10-29 13:37:32.464NT AUTHORITY\SYSTEM +11241100x800000000000000014171Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.466{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Transactions.Local.dll2025-10-29 13:37:32.466NT AUTHORITY\SYSTEM +11241100x800000000000000014172Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.466{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.ValueTuple.dll2025-10-29 13:37:32.466NT AUTHORITY\SYSTEM +11241100x800000000000000014173Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.466{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Web.dll2025-10-29 13:37:32.466NT AUTHORITY\SYSTEM +11241100x800000000000000014174Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.466{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Web.HttpUtility.dll2025-10-29 13:37:32.466NT AUTHORITY\SYSTEM +11241100x800000000000000014175Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.466{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Windows.dll2025-10-29 13:37:32.466NT AUTHORITY\SYSTEM +11241100x800000000000000014176Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.468{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.dll2025-10-29 13:37:32.468NT AUTHORITY\SYSTEM +11241100x800000000000000014177Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.468{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.Linq.dll2025-10-29 13:37:32.468NT AUTHORITY\SYSTEM +11241100x800000000000000014178Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.468{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.ReaderWriter.dll2025-10-29 13:37:32.468NT AUTHORITY\SYSTEM +11241100x800000000000000014179Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.468{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.Serialization.dll2025-10-29 13:37:32.468NT AUTHORITY\SYSTEM +11241100x800000000000000014180Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.468{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.XDocument.dll2025-10-29 13:37:32.468NT AUTHORITY\SYSTEM +11241100x800000000000000014181Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.468{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.XmlDocument.dll2025-10-29 13:37:32.468NT AUTHORITY\SYSTEM +11241100x800000000000000014182Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.470{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.XmlSerializer.dll2025-10-29 13:37:32.470NT AUTHORITY\SYSTEM +11241100x800000000000000014183Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.470{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.XPath.dll2025-10-29 13:37:32.470NT AUTHORITY\SYSTEM +11241100x800000000000000014184Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.470{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\System.Xml.XPath.XDocument.dll2025-10-29 13:37:32.470NT AUTHORITY\SYSTEM +11241100x800000000000000014185Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.470{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\WindowsBase.dll2025-10-29 13:37:32.470NT AUTHORITY\SYSTEM +11241100x800000000000000014186Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.470{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\WinGetMCPServer.dll2025-10-29 13:37:32.470NT AUTHORITY\SYSTEM +11241100x800000000000000014187Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:32.472{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\DotNet\WinGetMCPServer.exe2025-10-29 13:37:32.470NT AUTHORITY\SYSTEM +11241100x800000000000000014188Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.472{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\libsmartscreenn.dll2025-10-29 13:37:32.472NT AUTHORITY\SYSTEM +11241100x800000000000000014189Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.472{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\Microsoft.Management.Configuration.dll2025-10-29 13:37:32.472NT AUTHORITY\SYSTEM +11241100x800000000000000014190Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.474{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\Microsoft.Web.WebView2.Core.dll2025-10-29 13:37:32.472NT AUTHORITY\SYSTEM +11241100x800000000000000014191Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.476{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\msvcp140_1_app.dll2025-10-29 13:37:32.476NT AUTHORITY\SYSTEM +11241100x800000000000000014192Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.476{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\msvcp140_2_app.dll2025-10-29 13:37:32.476NT AUTHORITY\SYSTEM +11241100x800000000000000014193Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.478{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\msvcp140_app.dll2025-10-29 13:37:32.476NT AUTHORITY\SYSTEM +11241100x800000000000000014194Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.478{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\msvcp140_atomic_wait_app.dll2025-10-29 13:37:32.478NT AUTHORITY\SYSTEM +11241100x800000000000000014195Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.478{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\vcamp140_app.dll2025-10-29 13:37:32.478NT AUTHORITY\SYSTEM +11241100x800000000000000014196Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.480{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\vccorlib140_app.dll2025-10-29 13:37:32.480NT AUTHORITY\SYSTEM +11241100x800000000000000014197Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.480{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\vcomp140_app.dll2025-10-29 13:37:32.480NT AUTHORITY\SYSTEM +11241100x800000000000000014198Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.480{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\vcruntime140_1_app.dll2025-10-29 13:37:32.480NT AUTHORITY\SYSTEM +11241100x800000000000000014199Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.480{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\vcruntime140_app.dll2025-10-29 13:37:32.480NT AUTHORITY\SYSTEM +11241100x800000000000000014200Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.482{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\WindowsPackageManager.dll2025-10-29 13:37:32.480NT AUTHORITY\SYSTEM +11241100x800000000000000014201Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:32.482{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe2025-10-29 13:37:32.482NT AUTHORITY\SYSTEM +11241100x800000000000000014202Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:32.482{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.27.350.0_x64__8wekyb3d8bbwe\winget.exe2025-10-29 13:37:32.482NT AUTHORITY\SYSTEM +11241100x800000000000000014203Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:32.929{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{2FF66A31-3C99-411C-87E1-D08D6D8647FB}\ssshim.dll2025-10-29 13:37:32.929NT AUTHORITY\SYSTEM +11241100x800000000000000014204Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:33.853{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{02D79E49-3A53-425C-8C8F-539C06FE3A81}\ssshim.dll2025-10-29 13:37:33.853NT AUTHORITY\SYSTEM +154100x800000000000000014205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:34.473{8223a6b9-189e-6902-f002-000000002b00}8164C:\Windows\System32\wermgr.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Problem ReportingMicrosoft® Windows® Operating SystemMicrosoft CorporationWerMgr"C:\WINDOWS\system32\wermgr.exe" -uploadC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ABE1D752643419A8252520AABF75C29D,SHA256=1707CB793B8F64B65CA5C2FEEB05CB7198349354E9E67ADE0671EEC3647F351B,IMPHASH=2FEAC3143808B4542A16622000CCFCAE{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:34.619{8223a6b9-189e-6902-f102-000000002b00}6248C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k CameraMonitorC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:34.704{8223a6b9-189e-6902-f302-000000002b00}10592C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:34.746{8223a6b9-189e-6902-f402-000000002b00}5892C:\Windows\System32\backgroundTaskHost.exe10.0.26100.1 (WinBuild.160101.0800)Background Task HostMicrosoft® Windows® Operating SystemMicrosoft CorporationbackgroundTaskHost.exe"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXapskvk16gk8da8kch5g4qxh42vxccved.mcaC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25082.136.0_x64__8wekyb3d8bbwe\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=8BDE0AE40012BD639FC60E494CC32356,SHA256=B7D2C17E0038945AA4B72AE7A89E54D29B04CCC0FEB62DF5C9B7B67DE43C2530,IMPHASH=DC601E2593053A84A6989DE251407AA7{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:35.002{8223a6b9-189f-6902-f502-000000002b00}2452C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXEC:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\AppXDeploymentExtensions.OneCore.dll,ShellRefreshC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +11241100x800000000000000014210Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:35.235{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{702FD759-2611-446C-B99A-A800399DE436}\ssshim.dll2025-10-29 13:37:35.231NT AUTHORITY\SYSTEM +11241100x800000000000000014211Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:36.335{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{69CE4D0E-D9BA-470F-98E0-52510042DCFC}\ssshim.dll2025-10-29 13:37:36.335NT AUTHORITY\SYSTEM +154100x800000000000000014212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:36.338{8223a6b9-18a0-6902-f602-000000002b00}4964C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DevQueryBrokerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:36.442{8223a6b9-18a0-6902-f702-000000002b00}5800C:\Windows\System32\backgroundTaskHost.exe10.0.26100.1 (WinBuild.160101.0800)Background Task HostMicrosoft® Windows® Operating SystemMicrosoft CorporationbackgroundTaskHost.exe"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXapskvk16gk8da8kch5g4qxh42vxccved.mcaC:\Program Files\WindowsApps\Microsoft.YourPhone_1.25082.136.0_x64__8wekyb3d8bbwe\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=8BDE0AE40012BD639FC60E494CC32356,SHA256=B7D2C17E0038945AA4B72AE7A89E54D29B04CCC0FEB62DF5C9B7B67DE43C2530,IMPHASH=DC601E2593053A84A6989DE251407AA7{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +11241100x800000000000000014214Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:37.268{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{E92B6FB0-4617-4E46-BA8C-4DBC8CFAB7AD}\ssshim.dll2025-10-29 13:37:37.268NT AUTHORITY\SYSTEM +11241100x800000000000000014215Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:38.191{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{8EAB4292-5C77-4C16-9689-C460661B023D}\ssshim.dll2025-10-29 13:37:38.191NT AUTHORITY\SYSTEM +11241100x800000000000000014216Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:39.366{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{4C60050C-12D6-44DA-B727-EDDDA26DC5F8}\ssshim.dll2025-10-29 13:37:39.366NT AUTHORITY\SYSTEM +11241100x800000000000000014217Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:40.171{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{5695924B-7E39-40F1-BC9D-8F6DF0B4F5B8}\ssshim.dll2025-10-29 13:37:40.171NT AUTHORITY\SYSTEM +11241100x800000000000000014218Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:41.908{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{946E268C-986E-40C4-AACA-9353517DD26E}\ssshim.dll2025-10-29 13:37:41.908NT AUTHORITY\SYSTEM +11241100x800000000000000014219Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:42.841{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{1BDB1C5C-D35A-4780-8E42-D926A054860E}\ssshim.dll2025-10-29 13:37:42.839NT AUTHORITY\SYSTEM +11241100x800000000000000014220Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.437{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Azure.Core.dll2025-10-29 13:37:43.437NT AUTHORITY\SYSTEM +11241100x800000000000000014221Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.439{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\brotlidec.dll2025-10-29 13:37:43.437NT AUTHORITY\SYSTEM +11241100x800000000000000014222Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.437{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\brotlicommon.dll2025-10-29 13:37:43.437NT AUTHORITY\SYSTEM +11241100x800000000000000014223Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.439{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\brotlienc.dll2025-10-29 13:37:43.439NT AUTHORITY\SYSTEM +11241100x800000000000000014224Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.439{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\CopilotNative.Core.Audio.dll2025-10-29 13:37:43.439NT AUTHORITY\SYSTEM +11241100x800000000000000014225Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\CopilotNative.Core.dll2025-10-29 13:37:43.441NT AUTHORITY\SYSTEM +11241100x800000000000000014226Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\CopilotNative.DesktopEnvironment.Contracts.dll2025-10-29 13:37:43.441NT AUTHORITY\SYSTEM +11241100x800000000000000014227Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\CopilotNative.DesktopEnvironment.Windows.dll2025-10-29 13:37:43.441NT AUTHORITY\SYSTEM +11241100x800000000000000014228Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.441{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\CopilotNative.PlatformSdk.dll2025-10-29 13:37:43.441NT AUTHORITY\SYSTEM +11241100x800000000000000014229Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\CopilotNative.WExp.dll2025-10-29 13:37:43.443NT AUTHORITY\SYSTEM +11241100x800000000000000014230Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\coreclr.dll2025-10-29 13:37:43.443NT AUTHORITY\SYSTEM +11241100x800000000000000014231Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\cpprest_2_10.dll2025-10-29 13:37:43.443NT AUTHORITY\SYSTEM +11241100x800000000000000014232Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\FileExplorerCommandHandler.dll2025-10-29 13:37:43.443NT AUTHORITY\SYSTEM +11241100x800000000000000014233Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.443{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\hostfxr.dll2025-10-29 13:37:43.443NT AUTHORITY\SYSTEM +11241100x800000000000000014234Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\hostpolicy.dll2025-10-29 13:37:43.445NT AUTHORITY\SYSTEM +11241100x800000000000000014235Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\jsoncpp.dll2025-10-29 13:37:43.445NT AUTHORITY\SYSTEM +11241100x800000000000000014236Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\libcrypto-3-x64.dll2025-10-29 13:37:43.445NT AUTHORITY\SYSTEM +11241100x800000000000000014237Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.445{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\libssl-3-x64.dll2025-10-29 13:37:43.445NT AUTHORITY\SYSTEM +11241100x800000000000000014238Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:43.447{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe2025-10-29 13:37:43.447NT AUTHORITY\SYSTEM +11241100x800000000000000014239Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.447{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\McpClient.dll2025-10-29 13:37:43.447NT AUTHORITY\SYSTEM +11241100x800000000000000014240Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.449{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\microsoft-signalr.dll2025-10-29 13:37:43.447NT AUTHORITY\SYSTEM +11241100x800000000000000014241Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.449{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Connections.Abstractions.dll2025-10-29 13:37:43.449NT AUTHORITY\SYSTEM +11241100x800000000000000014242Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.449{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Connections.Client.dll2025-10-29 13:37:43.449NT AUTHORITY\SYSTEM +11241100x800000000000000014243Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.449{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.Http.Connections.Common.dll2025-10-29 13:37:43.449NT AUTHORITY\SYSTEM +11241100x800000000000000014244Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Client.Core.dll2025-10-29 13:37:43.451NT AUTHORITY\SYSTEM +11241100x800000000000000014245Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Client.dll2025-10-29 13:37:43.451NT AUTHORITY\SYSTEM +11241100x800000000000000014246Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Common.dll2025-10-29 13:37:43.451NT AUTHORITY\SYSTEM +11241100x800000000000000014247Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.AspNetCore.SignalR.Protocols.Json.dll2025-10-29 13:37:43.451NT AUTHORITY\SYSTEM +11241100x800000000000000014248Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Bcl.AsyncInterfaces.dll2025-10-29 13:37:43.451NT AUTHORITY\SYSTEM +11241100x800000000000000014249Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.451{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Bcl.TimeProvider.dll2025-10-29 13:37:43.451NT AUTHORITY\SYSTEM +11241100x800000000000000014250Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.453{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.CognitiveServices.Speech.csharp.dll2025-10-29 13:37:43.453NT AUTHORITY\SYSTEM +11241100x800000000000000014251Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.453{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.AI.Abstractions.dll2025-10-29 13:37:43.453NT AUTHORITY\SYSTEM +11241100x800000000000000014252Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.453{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Abstractions.dll2025-10-29 13:37:43.453NT AUTHORITY\SYSTEM +11241100x800000000000000014253Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.453{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Binder.dll2025-10-29 13:37:43.453NT AUTHORITY\SYSTEM +11241100x800000000000000014254Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.455{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.CommandLine.dll2025-10-29 13:37:43.453NT AUTHORITY\SYSTEM +11241100x800000000000000014255Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.455{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.dll2025-10-29 13:37:43.455NT AUTHORITY\SYSTEM +11241100x800000000000000014256Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.455{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.EnvironmentVariables.dll2025-10-29 13:37:43.455NT AUTHORITY\SYSTEM +11241100x800000000000000014257Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.455{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.FileExtensions.dll2025-10-29 13:37:43.455NT AUTHORITY\SYSTEM +11241100x800000000000000014258Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.455{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.Json.dll2025-10-29 13:37:43.455NT AUTHORITY\SYSTEM +11241100x800000000000000014259Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.455{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Configuration.UserSecrets.dll2025-10-29 13:37:43.455NT AUTHORITY\SYSTEM +11241100x800000000000000014260Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.457{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.Abstractions.dll2025-10-29 13:37:43.457NT AUTHORITY\SYSTEM +11241100x800000000000000014261Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.459{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.DependencyInjection.dll2025-10-29 13:37:43.457NT AUTHORITY\SYSTEM +11241100x800000000000000014262Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.459{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Diagnostics.Abstractions.dll2025-10-29 13:37:43.459NT AUTHORITY\SYSTEM +11241100x800000000000000014263Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.459{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Diagnostics.dll2025-10-29 13:37:43.459NT AUTHORITY\SYSTEM +11241100x800000000000000014264Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.459{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Features.dll2025-10-29 13:37:43.459NT AUTHORITY\SYSTEM +11241100x800000000000000014265Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.459{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileProviders.Abstractions.dll2025-10-29 13:37:43.459NT AUTHORITY\SYSTEM +11241100x800000000000000014266Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.461{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileProviders.Physical.dll2025-10-29 13:37:43.459NT AUTHORITY\SYSTEM +11241100x800000000000000014267Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.461{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.FileSystemGlobbing.dll2025-10-29 13:37:43.461NT AUTHORITY\SYSTEM +11241100x800000000000000014268Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.461{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Hosting.Abstractions.dll2025-10-29 13:37:43.461NT AUTHORITY\SYSTEM +11241100x800000000000000014269Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.461{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Hosting.dll2025-10-29 13:37:43.461NT AUTHORITY\SYSTEM +11241100x800000000000000014270Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.461{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Http.dll2025-10-29 13:37:43.461NT AUTHORITY\SYSTEM +11241100x800000000000000014271Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.461{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Http.Polly.dll2025-10-29 13:37:43.461NT AUTHORITY\SYSTEM +11241100x800000000000000014272Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.463{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Abstractions.dll2025-10-29 13:37:43.461NT AUTHORITY\SYSTEM +11241100x800000000000000014273Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.463{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Configuration.dll2025-10-29 13:37:43.463NT AUTHORITY\SYSTEM +11241100x800000000000000014274Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.463{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Console.dll2025-10-29 13:37:43.463NT AUTHORITY\SYSTEM +11241100x800000000000000014275Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.463{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.Debug.dll2025-10-29 13:37:43.463NT AUTHORITY\SYSTEM +11241100x800000000000000014276Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.463{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.dll2025-10-29 13:37:43.463NT AUTHORITY\SYSTEM +11241100x800000000000000014277Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.465{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.EventLog.dll2025-10-29 13:37:43.465NT AUTHORITY\SYSTEM +11241100x800000000000000014278Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.465{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Logging.EventSource.dll2025-10-29 13:37:43.465NT AUTHORITY\SYSTEM +11241100x800000000000000014279Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.465{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.ConfigurationExtensions.dll2025-10-29 13:37:43.465NT AUTHORITY\SYSTEM +11241100x800000000000000014280Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.465{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Options.dll2025-10-29 13:37:43.465NT AUTHORITY\SYSTEM +11241100x800000000000000014281Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.465{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Extensions.Primitives.dll2025-10-29 13:37:43.465NT AUTHORITY\SYSTEM +11241100x800000000000000014282Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.467{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Graphics.Imaging.Projection.dll2025-10-29 13:37:43.465NT AUTHORITY\SYSTEM +11241100x800000000000000014283Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.467{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.InteractiveExperiences.Projection.dll2025-10-29 13:37:43.467NT AUTHORITY\SYSTEM +11241100x800000000000000014284Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.467{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Office.PrivacyGuard.dll2025-10-29 13:37:43.467NT AUTHORITY\SYSTEM +11241100x800000000000000014285Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.467{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Office.Telemetry.EventFlags.dll2025-10-29 13:37:43.467NT AUTHORITY\SYSTEM +11241100x800000000000000014286Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Security.Authentication.OAuth.Projection.dll2025-10-29 13:37:43.467NT AUTHORITY\SYSTEM +11241100x800000000000000014287Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Toolkit.Win32.UI.XamlHost.dll2025-10-29 13:37:43.469NT AUTHORITY\SYSTEM +11241100x800000000000000014288Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Unified.Telemetry.ContractsAndContextProviders.dll2025-10-29 13:37:43.469NT AUTHORITY\SYSTEM +11241100x800000000000000014289Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Unified.Telemetry.dll2025-10-29 13:37:43.469NT AUTHORITY\SYSTEM +11241100x800000000000000014290Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.469{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Unified.Telemetry.JsonSink.dll2025-10-29 13:37:43.469NT AUTHORITY\SYSTEM +11241100x800000000000000014291Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Unified.Telemetry.OpenTelemetrySink.dll2025-10-29 13:37:43.469NT AUTHORITY\SYSTEM +11241100x800000000000000014292Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Web.WebView2.Core.dll2025-10-29 13:37:43.471NT AUTHORITY\SYSTEM +11241100x800000000000000014293Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Web.WebView2.Core.Projection.dll2025-10-29 13:37:43.471NT AUTHORITY\SYSTEM +11241100x800000000000000014294Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Win32.SystemEvents.dll2025-10-29 13:37:43.471NT AUTHORITY\SYSTEM +11241100x800000000000000014295Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.ContentSafety.Projection.dll2025-10-29 13:37:43.471NT AUTHORITY\SYSTEM +11241100x800000000000000014296Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.471{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Imaging.Projection.dll2025-10-29 13:37:43.471NT AUTHORITY\SYSTEM +11241100x800000000000000014297Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Projection.dll2025-10-29 13:37:43.473NT AUTHORITY\SYSTEM +11241100x800000000000000014298Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AI.Text.Projection.dll2025-10-29 13:37:43.473NT AUTHORITY\SYSTEM +11241100x800000000000000014299Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Background.Projection.dll2025-10-29 13:37:43.473NT AUTHORITY\SYSTEM +11241100x800000000000000014300Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll2025-10-29 13:37:43.473NT AUTHORITY\SYSTEM +11241100x800000000000000014301Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.dll2025-10-29 13:37:43.473NT AUTHORITY\SYSTEM +11241100x800000000000000014302Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.473{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.Projection.dll2025-10-29 13:37:43.473NT AUTHORITY\SYSTEM +11241100x800000000000000014303Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.dll2025-10-29 13:37:43.475NT AUTHORITY\SYSTEM +11241100x800000000000000014304Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppLifecycle.Projection.dll2025-10-29 13:37:43.475NT AUTHORITY\SYSTEM +11241100x800000000000000014305Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.475{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppNotifications.Builder.Projection.dll2025-10-29 13:37:43.475NT AUTHORITY\SYSTEM +11241100x800000000000000014306Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.AppNotifications.Projection.dll2025-10-29 13:37:43.475NT AUTHORITY\SYSTEM +11241100x800000000000000014307Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Apps.TraceLogging.dll2025-10-29 13:37:43.477NT AUTHORITY\SYSTEM +11241100x800000000000000014308Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.BadgeNotifications.Projection.dll2025-10-29 13:37:43.477NT AUTHORITY\SYSTEM +11241100x800000000000000014309Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Management.Deployment.Projection.dll2025-10-29 13:37:43.477NT AUTHORITY\SYSTEM +11241100x800000000000000014310Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Media.Capture.Projection.dll2025-10-29 13:37:43.477NT AUTHORITY\SYSTEM +11241100x800000000000000014311Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.PushNotifications.Projection.dll2025-10-29 13:37:43.477NT AUTHORITY\SYSTEM +11241100x800000000000000014312Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.477{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.SDK.NET.dll2025-10-29 13:37:43.477NT AUTHORITY\SYSTEM +11241100x800000000000000014313Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Security.AccessControl.Projection.dll2025-10-29 13:37:43.479NT AUTHORITY\SYSTEM +11241100x800000000000000014314Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Storage.Projection.dll2025-10-29 13:37:43.479NT AUTHORITY\SYSTEM +11241100x800000000000000014315Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.System.Power.Projection.dll2025-10-29 13:37:43.479NT AUTHORITY\SYSTEM +11241100x800000000000000014316Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.System.Projection.dll2025-10-29 13:37:43.479NT AUTHORITY\SYSTEM +11241100x800000000000000014317Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Projection.dll2025-10-29 13:37:43.479NT AUTHORITY\SYSTEM +11241100x800000000000000014318Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.479{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Bootstrap.dll2025-10-29 13:37:43.479NT AUTHORITY\SYSTEM +11241100x800000000000000014319Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Bootstrap.Net.dll2025-10-29 13:37:43.481NT AUTHORITY\SYSTEM +11241100x800000000000000014320Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Microsoft.WinUI.dll2025-10-29 13:37:43.481NT AUTHORITY\SYSTEM +11241100x800000000000000014321Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\minizip.dll2025-10-29 13:37:43.481NT AUTHORITY\SYSTEM +11241100x800000000000000014322Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.481{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\ModelContextProtocol.Core.dll2025-10-29 13:37:43.481NT AUTHORITY\SYSTEM +11241100x800000000000000014323Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.483{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\ModelContextProtocol.dll2025-10-29 13:37:43.483NT AUTHORITY\SYSTEM +11241100x800000000000000014324Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.483{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\MultiModal.dll2025-10-29 13:37:43.483NT AUTHORITY\SYSTEM +11241100x800000000000000014325Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\MultiModalCSharp.dll2025-10-29 13:37:43.485NT AUTHORITY\SYSTEM +11241100x800000000000000014326Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\NAudio.Core.dll2025-10-29 13:37:43.485NT AUTHORITY\SYSTEM +11241100x800000000000000014327Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\NAudio.WinMM.dll2025-10-29 13:37:43.485NT AUTHORITY\SYSTEM +11241100x800000000000000014328Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\nethost.dll2025-10-29 13:37:43.485NT AUTHORITY\SYSTEM +11241100x800000000000000014329Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.485{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Newtonsoft.Json.dll2025-10-29 13:37:43.485NT AUTHORITY\SYSTEM +11241100x800000000000000014330Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\nh.dll2025-10-29 13:37:43.487NT AUTHORITY\SYSTEM +11241100x800000000000000014331Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\OpenTelemetry.Api.dll2025-10-29 13:37:43.487NT AUTHORITY\SYSTEM +11241100x800000000000000014332Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.487{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\OpenTelemetry.Api.ProviderBuilderExtensions.dll2025-10-29 13:37:43.487NT AUTHORITY\SYSTEM +11241100x800000000000000014333Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\OpenTelemetry.dll2025-10-29 13:37:43.489NT AUTHORITY\SYSTEM +11241100x800000000000000014334Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\OpenTelemetry.Exporter.OneCollector.dll2025-10-29 13:37:43.489NT AUTHORITY\SYSTEM +11241100x800000000000000014335Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Polly.Core.dll2025-10-29 13:37:43.489NT AUTHORITY\SYSTEM +11241100x800000000000000014336Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Polly.dll2025-10-29 13:37:43.489NT AUTHORITY\SYSTEM +11241100x800000000000000014337Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.489{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\Polly.Extensions.Http.dll2025-10-29 13:37:43.489NT AUTHORITY\SYSTEM +11241100x800000000000000014338Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.493{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\clretwrc.dll2025-10-29 13:37:43.493NT AUTHORITY\SYSTEM +11241100x800000000000000014339Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.493{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\clrgc.dll2025-10-29 13:37:43.493NT AUTHORITY\SYSTEM +11241100x800000000000000014340Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.493{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\clrjit.dll2025-10-29 13:37:43.493NT AUTHORITY\SYSTEM +11241100x800000000000000014341Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.493{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\coreclr.dll2025-10-29 13:37:43.493NT AUTHORITY\SYSTEM +11241100x800000000000000014342Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:43.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\createdump.exe2025-10-29 13:37:43.495NT AUTHORITY\SYSTEM +11241100x800000000000000014343Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\hostpolicy.dll2025-10-29 13:37:43.495NT AUTHORITY\SYSTEM +11241100x800000000000000014344Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.CognitiveServices.Speech.core.dll2025-10-29 13:37:43.495NT AUTHORITY\SYSTEM +11241100x800000000000000014345Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.CognitiveServices.Speech.extension.audio.sys.dll2025-10-29 13:37:43.495NT AUTHORITY\SYSTEM +11241100x800000000000000014346Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.CognitiveServices.Speech.extension.codec.dll2025-10-29 13:37:43.495NT AUTHORITY\SYSTEM +11241100x800000000000000014347Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.495{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.CognitiveServices.Speech.extension.kws.dll2025-10-29 13:37:43.495NT AUTHORITY\SYSTEM +11241100x800000000000000014348Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.CognitiveServices.Speech.extension.kws.ort.dll2025-10-29 13:37:43.495NT AUTHORITY\SYSTEM +11241100x800000000000000014349Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.CognitiveServices.Speech.extension.lu.dll2025-10-29 13:37:43.497NT AUTHORITY\SYSTEM +11241100x800000000000000014350Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.CSharp.dll2025-10-29 13:37:43.497NT AUTHORITY\SYSTEM +11241100x800000000000000014351Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.497{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.DiaSymReader.Native.amd64.dll2025-10-29 13:37:43.497NT AUTHORITY\SYSTEM +11241100x800000000000000014352Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.498{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.VisualBasic.Core.dll2025-10-29 13:37:43.498NT AUTHORITY\SYSTEM +11241100x800000000000000014353Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.498{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.VisualBasic.dll2025-10-29 13:37:43.498NT AUTHORITY\SYSTEM +11241100x800000000000000014354Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.498{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.Win32.Primitives.dll2025-10-29 13:37:43.498NT AUTHORITY\SYSTEM +11241100x800000000000000014355Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.500{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\Microsoft.Win32.Registry.dll2025-10-29 13:37:43.500NT AUTHORITY\SYSTEM +11241100x800000000000000014356Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.500{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\mscordaccore.dll2025-10-29 13:37:43.500NT AUTHORITY\SYSTEM +11241100x800000000000000014357Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.500{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\mscordaccore_amd64_amd64_8.0.2025.41914.dll2025-10-29 13:37:43.500NT AUTHORITY\SYSTEM +11241100x800000000000000014358Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.500{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\mscordbi.dll2025-10-29 13:37:43.500NT AUTHORITY\SYSTEM +11241100x800000000000000014359Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.500{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\mscorlib.dll2025-10-29 13:37:43.500NT AUTHORITY\SYSTEM +11241100x800000000000000014360Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.502{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\mscorrc.dll2025-10-29 13:37:43.502NT AUTHORITY\SYSTEM +11241100x800000000000000014361Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.502{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\msquic.dll2025-10-29 13:37:43.502NT AUTHORITY\SYSTEM +11241100x800000000000000014362Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.502{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\netstandard.dll2025-10-29 13:37:43.502NT AUTHORITY\SYSTEM +11241100x800000000000000014363Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.502{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.AppContext.dll2025-10-29 13:37:43.502NT AUTHORITY\SYSTEM +11241100x800000000000000014364Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.504{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Buffers.dll2025-10-29 13:37:43.504NT AUTHORITY\SYSTEM +11241100x800000000000000014365Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.504{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Collections.Concurrent.dll2025-10-29 13:37:43.504NT AUTHORITY\SYSTEM +11241100x800000000000000014366Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.504{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Collections.dll2025-10-29 13:37:43.504NT AUTHORITY\SYSTEM +11241100x800000000000000014367Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.504{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Collections.Immutable.dll2025-10-29 13:37:43.504NT AUTHORITY\SYSTEM +11241100x800000000000000014368Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.506{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Collections.NonGeneric.dll2025-10-29 13:37:43.506NT AUTHORITY\SYSTEM +11241100x800000000000000014369Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.506{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Collections.Specialized.dll2025-10-29 13:37:43.506NT AUTHORITY\SYSTEM +11241100x800000000000000014370Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.506{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ComponentModel.Annotations.dll2025-10-29 13:37:43.506NT AUTHORITY\SYSTEM +11241100x800000000000000014371Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.506{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ComponentModel.DataAnnotations.dll2025-10-29 13:37:43.506NT AUTHORITY\SYSTEM +11241100x800000000000000014372Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.508{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ComponentModel.dll2025-10-29 13:37:43.506NT AUTHORITY\SYSTEM +11241100x800000000000000014373Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.510{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ComponentModel.EventBasedAsync.dll2025-10-29 13:37:43.510NT AUTHORITY\SYSTEM +11241100x800000000000000014374Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.510{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ComponentModel.Primitives.dll2025-10-29 13:37:43.510NT AUTHORITY\SYSTEM +11241100x800000000000000014375Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.510{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ComponentModel.TypeConverter.dll2025-10-29 13:37:43.510NT AUTHORITY\SYSTEM +11241100x800000000000000014376Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.510{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Configuration.dll2025-10-29 13:37:43.510NT AUTHORITY\SYSTEM +11241100x800000000000000014377Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.510{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Console.dll2025-10-29 13:37:43.510NT AUTHORITY\SYSTEM +11241100x800000000000000014378Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.510{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Core.dll2025-10-29 13:37:43.510NT AUTHORITY\SYSTEM +11241100x800000000000000014379Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.512{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Data.Common.dll2025-10-29 13:37:43.512NT AUTHORITY\SYSTEM +11241100x800000000000000014380Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.512{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Data.DataSetExtensions.dll2025-10-29 13:37:43.512NT AUTHORITY\SYSTEM +11241100x800000000000000014381Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.512{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Data.dll2025-10-29 13:37:43.512NT AUTHORITY\SYSTEM +11241100x800000000000000014382Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.512{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.Contracts.dll2025-10-29 13:37:43.512NT AUTHORITY\SYSTEM +11241100x800000000000000014383Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.514{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.Debug.dll2025-10-29 13:37:43.512NT AUTHORITY\SYSTEM +11241100x800000000000000014384Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.514{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.DiagnosticSource.dll2025-10-29 13:37:43.514NT AUTHORITY\SYSTEM +11241100x800000000000000014385Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.514{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.FileVersionInfo.dll2025-10-29 13:37:43.514NT AUTHORITY\SYSTEM +11241100x800000000000000014386Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.514{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.Process.dll2025-10-29 13:37:43.514NT AUTHORITY\SYSTEM +11241100x800000000000000014387Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.514{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.StackTrace.dll2025-10-29 13:37:43.514NT AUTHORITY\SYSTEM +11241100x800000000000000014388Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.516{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.TextWriterTraceListener.dll2025-10-29 13:37:43.516NT AUTHORITY\SYSTEM +11241100x800000000000000014389Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.516{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.Tools.dll2025-10-29 13:37:43.516NT AUTHORITY\SYSTEM +11241100x800000000000000014390Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.516{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.TraceSource.dll2025-10-29 13:37:43.516NT AUTHORITY\SYSTEM +11241100x800000000000000014391Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.516{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Diagnostics.Tracing.dll2025-10-29 13:37:43.516NT AUTHORITY\SYSTEM +11241100x800000000000000014392Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.518{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.dll2025-10-29 13:37:43.518NT AUTHORITY\SYSTEM +11241100x800000000000000014393Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.518{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Drawing.dll2025-10-29 13:37:43.518NT AUTHORITY\SYSTEM +11241100x800000000000000014394Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.518{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Drawing.Primitives.dll2025-10-29 13:37:43.518NT AUTHORITY\SYSTEM +11241100x800000000000000014395Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.518{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Dynamic.Runtime.dll2025-10-29 13:37:43.518NT AUTHORITY\SYSTEM +11241100x800000000000000014396Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.518{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Formats.Asn1.dll2025-10-29 13:37:43.518NT AUTHORITY\SYSTEM +11241100x800000000000000014397Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.518{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Formats.Tar.dll2025-10-29 13:37:43.518NT AUTHORITY\SYSTEM +11241100x800000000000000014398Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.520{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Globalization.Calendars.dll2025-10-29 13:37:43.520NT AUTHORITY\SYSTEM +11241100x800000000000000014399Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.520{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Globalization.dll2025-10-29 13:37:43.520NT AUTHORITY\SYSTEM +11241100x800000000000000014400Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.520{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Globalization.Extensions.dll2025-10-29 13:37:43.520NT AUTHORITY\SYSTEM +11241100x800000000000000014401Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.520{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.Compression.Brotli.dll2025-10-29 13:37:43.520NT AUTHORITY\SYSTEM +11241100x800000000000000014402Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.520{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.Compression.dll2025-10-29 13:37:43.520NT AUTHORITY\SYSTEM +11241100x800000000000000014403Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.522{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.Compression.FileSystem.dll2025-10-29 13:37:43.522NT AUTHORITY\SYSTEM +11241100x800000000000000014404Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.522{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.Compression.Native.dll2025-10-29 13:37:43.522NT AUTHORITY\SYSTEM +11241100x800000000000000014405Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.522{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.Compression.ZipFile.dll2025-10-29 13:37:43.522NT AUTHORITY\SYSTEM +11241100x800000000000000014406Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.522{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.dll2025-10-29 13:37:43.522NT AUTHORITY\SYSTEM +11241100x800000000000000014407Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.522{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.FileSystem.AccessControl.dll2025-10-29 13:37:43.522NT AUTHORITY\SYSTEM +11241100x800000000000000014408Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.524{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.FileSystem.dll2025-10-29 13:37:43.522NT AUTHORITY\SYSTEM +11241100x800000000000000014409Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.524{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.FileSystem.DriveInfo.dll2025-10-29 13:37:43.524NT AUTHORITY\SYSTEM +11241100x800000000000000014410Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.524{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.FileSystem.Primitives.dll2025-10-29 13:37:43.524NT AUTHORITY\SYSTEM +11241100x800000000000000014411Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.524{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.FileSystem.Watcher.dll2025-10-29 13:37:43.524NT AUTHORITY\SYSTEM +11241100x800000000000000014412Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.524{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.IsolatedStorage.dll2025-10-29 13:37:43.524NT AUTHORITY\SYSTEM +11241100x800000000000000014413Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.526{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.MemoryMappedFiles.dll2025-10-29 13:37:43.524NT AUTHORITY\SYSTEM +11241100x800000000000000014414Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.526{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.Pipes.AccessControl.dll2025-10-29 13:37:43.526NT AUTHORITY\SYSTEM +11241100x800000000000000014415Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.526{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.Pipes.dll2025-10-29 13:37:43.526NT AUTHORITY\SYSTEM +11241100x800000000000000014416Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.526{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.IO.UnmanagedMemoryStream.dll2025-10-29 13:37:43.526NT AUTHORITY\SYSTEM +11241100x800000000000000014417Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.526{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Linq.dll2025-10-29 13:37:43.526NT AUTHORITY\SYSTEM +11241100x800000000000000014418Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.526{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Linq.Expressions.dll2025-10-29 13:37:43.526NT AUTHORITY\SYSTEM +11241100x800000000000000014419Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.528{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Linq.Parallel.dll2025-10-29 13:37:43.528NT AUTHORITY\SYSTEM +11241100x800000000000000014420Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.528{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Linq.Queryable.dll2025-10-29 13:37:43.528NT AUTHORITY\SYSTEM +11241100x800000000000000014421Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.528{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Memory.dll2025-10-29 13:37:43.528NT AUTHORITY\SYSTEM +11241100x800000000000000014422Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.530{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.dll2025-10-29 13:37:43.528NT AUTHORITY\SYSTEM +11241100x800000000000000014423Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.530{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Http.dll2025-10-29 13:37:43.530NT AUTHORITY\SYSTEM +11241100x800000000000000014424Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.532{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Http.Json.dll2025-10-29 13:37:43.530NT AUTHORITY\SYSTEM +11241100x800000000000000014425Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.532{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.HttpListener.dll2025-10-29 13:37:43.532NT AUTHORITY\SYSTEM +11241100x800000000000000014426Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.532{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Mail.dll2025-10-29 13:37:43.532NT AUTHORITY\SYSTEM +11241100x800000000000000014427Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.532{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.NameResolution.dll2025-10-29 13:37:43.532NT AUTHORITY\SYSTEM +11241100x800000000000000014428Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.534{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.NetworkInformation.dll2025-10-29 13:37:43.534NT AUTHORITY\SYSTEM +11241100x800000000000000014429Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.534{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Ping.dll2025-10-29 13:37:43.534NT AUTHORITY\SYSTEM +11241100x800000000000000014430Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.535{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Primitives.dll2025-10-29 13:37:43.535NT AUTHORITY\SYSTEM +11241100x800000000000000014431Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.536{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Quic.dll2025-10-29 13:37:43.535NT AUTHORITY\SYSTEM +11241100x800000000000000014432Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.537{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Requests.dll2025-10-29 13:37:43.536NT AUTHORITY\SYSTEM +11241100x800000000000000014433Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.537{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Security.dll2025-10-29 13:37:43.537NT AUTHORITY\SYSTEM +11241100x800000000000000014434Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.538{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.ServicePoint.dll2025-10-29 13:37:43.537NT AUTHORITY\SYSTEM +11241100x800000000000000014435Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.538{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.Sockets.dll2025-10-29 13:37:43.538NT AUTHORITY\SYSTEM +11241100x800000000000000014436Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.538{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.WebClient.dll2025-10-29 13:37:43.538NT AUTHORITY\SYSTEM +11241100x800000000000000014437Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.WebHeaderCollection.dll2025-10-29 13:37:43.539NT AUTHORITY\SYSTEM +11241100x800000000000000014438Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.539{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.WebProxy.dll2025-10-29 13:37:43.539NT AUTHORITY\SYSTEM +11241100x800000000000000014439Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.540{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.WebSockets.Client.dll2025-10-29 13:37:43.539NT AUTHORITY\SYSTEM +11241100x800000000000000014440Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.540{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Net.WebSockets.dll2025-10-29 13:37:43.540NT AUTHORITY\SYSTEM +11241100x800000000000000014441Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.540{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Numerics.dll2025-10-29 13:37:43.540NT AUTHORITY\SYSTEM +11241100x800000000000000014442Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.541{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Numerics.Vectors.dll2025-10-29 13:37:43.541NT AUTHORITY\SYSTEM +11241100x800000000000000014443Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.541{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ObjectModel.dll2025-10-29 13:37:43.541NT AUTHORITY\SYSTEM +11241100x800000000000000014444Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.542{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Private.CoreLib.dll2025-10-29 13:37:43.542NT AUTHORITY\SYSTEM +11241100x800000000000000014445Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.542{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Private.DataContractSerialization.dll2025-10-29 13:37:43.542NT AUTHORITY\SYSTEM +11241100x800000000000000014446Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.543{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Private.Uri.dll2025-10-29 13:37:43.542NT AUTHORITY\SYSTEM +11241100x800000000000000014447Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.543{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Private.Xml.dll2025-10-29 13:37:43.543NT AUTHORITY\SYSTEM +11241100x800000000000000014448Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.544{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Private.Xml.Linq.dll2025-10-29 13:37:43.544NT AUTHORITY\SYSTEM +11241100x800000000000000014449Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.544{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.DispatchProxy.dll2025-10-29 13:37:43.544NT AUTHORITY\SYSTEM +11241100x800000000000000014450Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.545{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.dll2025-10-29 13:37:43.545NT AUTHORITY\SYSTEM +11241100x800000000000000014451Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.545{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.Emit.dll2025-10-29 13:37:43.545NT AUTHORITY\SYSTEM +11241100x800000000000000014452Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.545{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.Emit.ILGeneration.dll2025-10-29 13:37:43.545NT AUTHORITY\SYSTEM +11241100x800000000000000014453Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.546{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.Emit.Lightweight.dll2025-10-29 13:37:43.546NT AUTHORITY\SYSTEM +11241100x800000000000000014454Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.546{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.Extensions.dll2025-10-29 13:37:43.546NT AUTHORITY\SYSTEM +11241100x800000000000000014455Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.547{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.Metadata.dll2025-10-29 13:37:43.547NT AUTHORITY\SYSTEM +11241100x800000000000000014456Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.547{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.Primitives.dll2025-10-29 13:37:43.547NT AUTHORITY\SYSTEM +11241100x800000000000000014457Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.548{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Reflection.TypeExtensions.dll2025-10-29 13:37:43.548NT AUTHORITY\SYSTEM +11241100x800000000000000014458Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.548{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Resources.Reader.dll2025-10-29 13:37:43.548NT AUTHORITY\SYSTEM +11241100x800000000000000014459Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.549{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Resources.ResourceManager.dll2025-10-29 13:37:43.549NT AUTHORITY\SYSTEM +11241100x800000000000000014460Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.549{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Resources.Writer.dll2025-10-29 13:37:43.549NT AUTHORITY\SYSTEM +11241100x800000000000000014461Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.550{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.CompilerServices.Unsafe.dll2025-10-29 13:37:43.550NT AUTHORITY\SYSTEM +11241100x800000000000000014462Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.550{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.CompilerServices.VisualC.dll2025-10-29 13:37:43.550NT AUTHORITY\SYSTEM +11241100x800000000000000014463Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.550{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.dll2025-10-29 13:37:43.550NT AUTHORITY\SYSTEM +11241100x800000000000000014464Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.551{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Extensions.dll2025-10-29 13:37:43.551NT AUTHORITY\SYSTEM +11241100x800000000000000014465Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.551{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Handles.dll2025-10-29 13:37:43.551NT AUTHORITY\SYSTEM +11241100x800000000000000014466Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.551{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.InteropServices.dll2025-10-29 13:37:43.551NT AUTHORITY\SYSTEM +11241100x800000000000000014467Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.552{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.InteropServices.JavaScript.dll2025-10-29 13:37:43.551NT AUTHORITY\SYSTEM +11241100x800000000000000014468Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.552{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.InteropServices.RuntimeInformation.dll2025-10-29 13:37:43.552NT AUTHORITY\SYSTEM +11241100x800000000000000014469Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.552{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Intrinsics.dll2025-10-29 13:37:43.552NT AUTHORITY\SYSTEM +11241100x800000000000000014470Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.553{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Loader.dll2025-10-29 13:37:43.553NT AUTHORITY\SYSTEM +11241100x800000000000000014471Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.553{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Numerics.dll2025-10-29 13:37:43.553NT AUTHORITY\SYSTEM +11241100x800000000000000014472Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.554{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Serialization.dll2025-10-29 13:37:43.553NT AUTHORITY\SYSTEM +11241100x800000000000000014473Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Serialization.Formatters.dll2025-10-29 13:37:43.554NT AUTHORITY\SYSTEM +11241100x800000000000000014474Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.555{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Serialization.Json.dll2025-10-29 13:37:43.555NT AUTHORITY\SYSTEM +11241100x800000000000000014475Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.556{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Serialization.Primitives.dll2025-10-29 13:37:43.556NT AUTHORITY\SYSTEM +11241100x800000000000000014476Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.556{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Runtime.Serialization.Xml.dll2025-10-29 13:37:43.556NT AUTHORITY\SYSTEM +11241100x800000000000000014477Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.557{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.AccessControl.dll2025-10-29 13:37:43.556NT AUTHORITY\SYSTEM +11241100x800000000000000014478Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.557{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Claims.dll2025-10-29 13:37:43.557NT AUTHORITY\SYSTEM +11241100x800000000000000014479Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.558{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Cryptography.Algorithms.dll2025-10-29 13:37:43.557NT AUTHORITY\SYSTEM +11241100x800000000000000014480Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.558{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Cryptography.Cng.dll2025-10-29 13:37:43.558NT AUTHORITY\SYSTEM +11241100x800000000000000014481Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.559{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Cryptography.Csp.dll2025-10-29 13:37:43.558NT AUTHORITY\SYSTEM +11241100x800000000000000014482Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.559{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Cryptography.dll2025-10-29 13:37:43.559NT AUTHORITY\SYSTEM +11241100x800000000000000014483Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.559{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Cryptography.Encoding.dll2025-10-29 13:37:43.559NT AUTHORITY\SYSTEM +11241100x800000000000000014484Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.560{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Cryptography.OpenSsl.dll2025-10-29 13:37:43.559NT AUTHORITY\SYSTEM +11241100x800000000000000014485Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.560{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Cryptography.Primitives.dll2025-10-29 13:37:43.560NT AUTHORITY\SYSTEM +11241100x800000000000000014486Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.560{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Cryptography.X509Certificates.dll2025-10-29 13:37:43.560NT AUTHORITY\SYSTEM +11241100x800000000000000014487Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.dll2025-10-29 13:37:43.560NT AUTHORITY\SYSTEM +11241100x800000000000000014488Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Principal.dll2025-10-29 13:37:43.561NT AUTHORITY\SYSTEM +11241100x800000000000000014489Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.Principal.Windows.dll2025-10-29 13:37:43.561NT AUTHORITY\SYSTEM +11241100x800000000000000014490Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Security.SecureString.dll2025-10-29 13:37:43.561NT AUTHORITY\SYSTEM +11241100x800000000000000014491Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.561{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ServiceModel.Web.dll2025-10-29 13:37:43.561NT AUTHORITY\SYSTEM +11241100x800000000000000014492Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ServiceProcess.dll2025-10-29 13:37:43.561NT AUTHORITY\SYSTEM +11241100x800000000000000014493Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Text.Encoding.CodePages.dll2025-10-29 13:37:43.563NT AUTHORITY\SYSTEM +11241100x800000000000000014494Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Text.Encoding.dll2025-10-29 13:37:43.563NT AUTHORITY\SYSTEM +11241100x800000000000000014495Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Text.Encoding.Extensions.dll2025-10-29 13:37:43.563NT AUTHORITY\SYSTEM +11241100x800000000000000014496Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Text.Encodings.Web.dll2025-10-29 13:37:43.563NT AUTHORITY\SYSTEM +11241100x800000000000000014497Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.563{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Text.Json.dll2025-10-29 13:37:43.563NT AUTHORITY\SYSTEM +11241100x800000000000000014498Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Text.RegularExpressions.dll2025-10-29 13:37:43.563NT AUTHORITY\SYSTEM +11241100x800000000000000014499Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.Channels.dll2025-10-29 13:37:43.565NT AUTHORITY\SYSTEM +11241100x800000000000000014500Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.dll2025-10-29 13:37:43.565NT AUTHORITY\SYSTEM +11241100x800000000000000014501Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.565{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.Overlapped.dll2025-10-29 13:37:43.565NT AUTHORITY\SYSTEM +11241100x800000000000000014502Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.Tasks.Dataflow.dll2025-10-29 13:37:43.565NT AUTHORITY\SYSTEM +11241100x800000000000000014503Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.Tasks.dll2025-10-29 13:37:43.567NT AUTHORITY\SYSTEM +11241100x800000000000000014504Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.Tasks.Extensions.dll2025-10-29 13:37:43.567NT AUTHORITY\SYSTEM +11241100x800000000000000014505Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.Tasks.Parallel.dll2025-10-29 13:37:43.567NT AUTHORITY\SYSTEM +11241100x800000000000000014506Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.Thread.dll2025-10-29 13:37:43.567NT AUTHORITY\SYSTEM +11241100x800000000000000014507Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.567{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.ThreadPool.dll2025-10-29 13:37:43.567NT AUTHORITY\SYSTEM +11241100x800000000000000014508Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Threading.Timer.dll2025-10-29 13:37:43.567NT AUTHORITY\SYSTEM +11241100x800000000000000014509Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Transactions.dll2025-10-29 13:37:43.569NT AUTHORITY\SYSTEM +11241100x800000000000000014510Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Transactions.Local.dll2025-10-29 13:37:43.569NT AUTHORITY\SYSTEM +11241100x800000000000000014511Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.ValueTuple.dll2025-10-29 13:37:43.569NT AUTHORITY\SYSTEM +11241100x800000000000000014512Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.569{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Web.dll2025-10-29 13:37:43.569NT AUTHORITY\SYSTEM +11241100x800000000000000014513Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.571{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Web.HttpUtility.dll2025-10-29 13:37:43.569NT AUTHORITY\SYSTEM +11241100x800000000000000014514Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.571{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Windows.dll2025-10-29 13:37:43.571NT AUTHORITY\SYSTEM +11241100x800000000000000014515Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.571{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.dll2025-10-29 13:37:43.571NT AUTHORITY\SYSTEM +11241100x800000000000000014516Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.571{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.Linq.dll2025-10-29 13:37:43.571NT AUTHORITY\SYSTEM +11241100x800000000000000014517Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.573{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.ReaderWriter.dll2025-10-29 13:37:43.571NT AUTHORITY\SYSTEM +11241100x800000000000000014518Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.573{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.Serialization.dll2025-10-29 13:37:43.573NT AUTHORITY\SYSTEM +11241100x800000000000000014519Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.575{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.XDocument.dll2025-10-29 13:37:43.573NT AUTHORITY\SYSTEM +11241100x800000000000000014520Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.575{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.XmlDocument.dll2025-10-29 13:37:43.575NT AUTHORITY\SYSTEM +11241100x800000000000000014521Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.575{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.XmlSerializer.dll2025-10-29 13:37:43.575NT AUTHORITY\SYSTEM +11241100x800000000000000014522Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.575{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.XPath.dll2025-10-29 13:37:43.575NT AUTHORITY\SYSTEM +11241100x800000000000000014523Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.577{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\System.Xml.XPath.XDocument.dll2025-10-29 13:37:43.577NT AUTHORITY\SYSTEM +11241100x800000000000000014524Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.577{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\shared\Microsoft.NETCore.App\8.0.20\WindowsBase.dll2025-10-29 13:37:43.577NT AUTHORITY\SYSTEM +11241100x800000000000000014525Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.579{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\sqlite3.dll2025-10-29 13:37:43.579NT AUTHORITY\SYSTEM +11241100x800000000000000014526Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.579{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.ClientModel.dll2025-10-29 13:37:43.579NT AUTHORITY\SYSTEM +11241100x800000000000000014527Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.579{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Configuration.ConfigurationManager.dll2025-10-29 13:37:43.579NT AUTHORITY\SYSTEM +11241100x800000000000000014528Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.579{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Diagnostics.DiagnosticSource.dll2025-10-29 13:37:43.579NT AUTHORITY\SYSTEM +11241100x800000000000000014529Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.581{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Diagnostics.EventLog.dll2025-10-29 13:37:43.581NT AUTHORITY\SYSTEM +11241100x800000000000000014530Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.581{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Drawing.Common.dll2025-10-29 13:37:43.581NT AUTHORITY\SYSTEM +11241100x800000000000000014531Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.581{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.IO.Pipelines.dll2025-10-29 13:37:43.581NT AUTHORITY\SYSTEM +11241100x800000000000000014532Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.581{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Memory.Data.dll2025-10-29 13:37:43.581NT AUTHORITY\SYSTEM +11241100x800000000000000014533Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.581{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Net.ServerSentEvents.dll2025-10-29 13:37:43.581NT AUTHORITY\SYSTEM +11241100x800000000000000014534Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.581{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Private.Windows.Core.dll2025-10-29 13:37:43.581NT AUTHORITY\SYSTEM +11241100x800000000000000014535Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.581{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Security.Cryptography.ProtectedData.dll2025-10-29 13:37:43.581NT AUTHORITY\SYSTEM +11241100x800000000000000014536Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.583{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Text.Encodings.Web.dll2025-10-29 13:37:43.583NT AUTHORITY\SYSTEM +11241100x800000000000000014537Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.583{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Text.Json.dll2025-10-29 13:37:43.583NT AUTHORITY\SYSTEM +11241100x800000000000000014538Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.583{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Threading.Channels.dll2025-10-29 13:37:43.583NT AUTHORITY\SYSTEM +11241100x800000000000000014539Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.583{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\System.Threading.Tasks.Dataflow.dll2025-10-29 13:37:43.583NT AUTHORITY\SYSTEM +11241100x800000000000000014540Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.585{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\UnexpectedExitHandlers.dll2025-10-29 13:37:43.585NT AUTHORITY\SYSTEM +11241100x800000000000000014541Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.585{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\UserDataCache.dll2025-10-29 13:37:43.585NT AUTHORITY\SYSTEM +11241100x800000000000000014542Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.585{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\VoiceClarity.dll2025-10-29 13:37:43.585NT AUTHORITY\SYSTEM +11241100x800000000000000014543Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.585{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\VoiceClarityManaged.dll2025-10-29 13:37:43.585NT AUTHORITY\SYSTEM +11241100x800000000000000014544Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.587{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\WebView2Loader.dll2025-10-29 13:37:43.587NT AUTHORITY\SYSTEM +11241100x800000000000000014545Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:37:43.587{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\WebViewHost.exe2025-10-29 13:37:43.587NT AUTHORITY\SYSTEM +11241100x800000000000000014546Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.587{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\WinRT.Host.dll2025-10-29 13:37:43.587NT AUTHORITY\SYSTEM +11241100x800000000000000014547Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.587{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\WinRT.Host.Shim.dll2025-10-29 13:37:43.587NT AUTHORITY\SYSTEM +11241100x800000000000000014548Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.587{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\WinRT.Runtime.dll2025-10-29 13:37:43.587NT AUTHORITY\SYSTEM +11241100x800000000000000014549Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.589{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\xpdAPI.dll2025-10-29 13:37:43.589NT AUTHORITY\SYSTEM +11241100x800000000000000014550Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.589{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\zlib1.dll2025-10-29 13:37:43.589NT AUTHORITY\SYSTEM +11241100x800000000000000014551Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:43.974{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{AE0B476C-F8DC-4633-BCAC-7866230B1F3D}\ssshim.dll2025-10-29 13:37:43.974NT AUTHORITY\SYSTEM +11241100x800000000000000014552Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:37:44.765{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{2AA99469-66D8-426F-9983-1684A1387CC0}\ssshim.dll2025-10-29 13:37:44.764NT AUTHORITY\SYSTEM +354300x800000000000000014553Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:37:56.738{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50496-false172.67.69.92-443https +354300x800000000000000014554Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:37:56.754{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50497-false104.26.7.153-443https +22542200x800000000000000014555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:37:56.691{8223a6b9-15de-6902-6702-000000002b00}10092search.lmstudio.ai0::ffff:172.67.69.92;::ffff:104.26.7.153;::ffff:104.26.6.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +11241100x800000000000000014556Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:38:15.411{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{3ECE2704-BC1A-4B4A-9868-2A35CDA867D7}\ssshim.dll2025-10-29 13:38:15.411NT AUTHORITY\SYSTEM +11241100x800000000000000014557Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:38:17.768{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{0A02AEAB-830F-4423-9A35-ED740458CFE9}\ssshim.dll2025-10-29 13:38:17.768NT AUTHORITY\SYSTEM +11241100x800000000000000014558Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.801{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\WindowsPackageManagerServer.exe2025-09-03 13:55:25.231NT AUTHORITY\SYSTEM +11241100x800000000000000014559Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.803{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\WindowsPackageManagerServer.exe2025-09-03 13:55:25.232NT AUTHORITY\SYSTEM +11241100x800000000000000014560Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.805{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\winget.exe2025-09-03 13:55:25.233NT AUTHORITY\SYSTEM +11241100x800000000000000014561Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.807{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\winget.exe2025-09-03 13:55:25.233NT AUTHORITY\SYSTEM +11241100x800000000000000014562Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.810{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\python3.exe2025-09-03 13:55:25.235NT AUTHORITY\SYSTEM +11241100x800000000000000014563Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.811{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\python3.exe2025-09-03 13:55:25.236NT AUTHORITY\SYSTEM +11241100x800000000000000014564Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.816{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\python.exe2025-09-03 13:55:25.237NT AUTHORITY\SYSTEM +11241100x800000000000000014565Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.817{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\python.exe2025-09-03 13:55:25.238NT AUTHORITY\SYSTEM +11241100x800000000000000014566Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.820{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\WindowsPackageManagerMCPServer.exe2025-10-29 13:38:17.820NT AUTHORITY\SYSTEM +11241100x800000000000000014567Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 13:38:17.821{8223a6b9-131b-6902-7300-000000002b00}5976C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\WindowsPackageManagerMCPServer.exe2025-10-29 13:38:17.821NT AUTHORITY\SYSTEM +154100x800000000000000014568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:38:17.903{8223a6b9-18c9-6902-f902-000000002b00}6068C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXEC:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\AppXDeploymentExtensions.OneCore.dll,ShellRefreshC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-131b-6902-7300-000000002b00}5976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +11241100x800000000000000014569Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:38:20.843{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{94E8FD94-5CCC-4547-BAB0-84C9A4943A92}\ssshim.dll2025-10-29 13:38:20.842NT AUTHORITY\SYSTEM +11241100x800000000000000014570Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:38:21.852{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{21E934D0-5F07-43F4-9C74-9788D211933F}\ssshim.dll2025-10-29 13:38:21.852NT AUTHORITY\SYSTEM +11241100x800000000000000014571Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:39:03.450{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{A1C5F7D3-21AA-44C8-A361-ECE6FB5DA856}\ssshim.dll2025-10-29 13:39:03.450NT AUTHORITY\SYSTEM +11241100x800000000000000014572Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:39:05.837{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{4791E061-DBAA-4F85-B475-A1621C22FCB7}\ssshim.dll2025-10-29 13:39:05.837NT AUTHORITY\SYSTEM +13241300x800000000000000014573Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:42:14.719{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\EventsCreateSessionNT AUTHORITY\SYSTEM +13241300x800000000000000014574Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:42:56.683{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\Events(Empty)NT AUTHORITY\SYSTEM +11241100x800000000000000014575Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:42:57.105{8223a6b9-178a-6902-c802-000000002b00}960C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SystemTemp\{9BEEC134-D862-479F-83A9-4A0A4C8346ED}\ssshim.dll2025-10-29 13:42:57.105NT AUTHORITY\SYSTEM +13241300x800000000000000014576Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:42:58.466{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\EventsCreateSessionNT AUTHORITY\SYSTEM +13241300x800000000000000014577Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 13:43:16.323{8223a6b9-16ac-6902-b202-000000002b00}4072C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\Events(Empty)NT AUTHORITY\SYSTEM +154100x800000000000000014578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:43:17.617{8223a6b9-19f5-6902-0303-000000002b00}6008C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:43:17.958{8223a6b9-19f5-6902-0403-000000002b00}10684C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exe4.8.9032.0 built by: NET481REL1Microsoft .NET Framework optimization serviceMicrosoft® .NET FrameworkMicrosoft CorporationNGenTask.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /Critical /StopEvent:456C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=22EA2B65E14D50E28BDD50010B06AACF,SHA256=EFE1C3D4543EAA67A436B933EFFA65FE3FBA358ADE1EF01B3F92F4971E92A1AD,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744{8223a6b9-19f5-6902-0303-000000002b00}6008C:\Windows\System32\taskhostw.exetaskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}NT AUTHORITY\SYSTEM +154100x800000000000000014580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:43:17.986{8223a6b9-19f5-6902-0503-000000002b00}3264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe4.8.9032.0 built by: NET481REL1Microsoft .NET Framework optimization serviceMicrosoft® .NET FrameworkMicrosoft CorporationNGenTask.exe"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /RuntimeWide /Critical /StopEvent:552C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=1CA52739F7F494012F1AACC925328C7F,SHA256=9FD133B11ABCBBED33CCEA71BD4743E8F35E42CD637FB763F5AB2A8FBB9B6261,IMPHASH=00000000000000000000000000000000{8223a6b9-19f5-6902-0303-000000002b00}6008C:\Windows\System32\taskhostw.exetaskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}NT AUTHORITY\SYSTEM +11241100x800000000000000014581Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:43:18.563{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{9CC65324-93C0-4E5A-9F49-1CEBA1A5372C}\ssshim.dll2025-10-29 13:43:18.563NT AUTHORITY\SYSTEM +154100x800000000000000014582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:43:20.550{8223a6b9-19f8-6902-0f03-000000002b00}10148C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /ClearActiveNotifications /CV x2sHkZhQTUqT3y32.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +11241100x800000000000000014583Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:43:23.322{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{E0C1CECD-4794-4A29-869C-8F2A6376ADA3}\ssshim.dll2025-10-29 13:43:23.322NT AUTHORITY\SYSTEM +154100x800000000000000014584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:43:24.982{8223a6b9-19fc-6902-1103-000000002b00}10136C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +11241100x800000000000000014585Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:43:28.654{8223a6b9-19f8-6902-0d03-000000002b00}8408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\20d8-0\System.dll2025-10-29 13:43:28.652NT AUTHORITY\SYSTEM +11241100x800000000000000014586Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:43:36.556{8223a6b9-1a01-6902-1203-000000002b00}10244C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\2804-0\System.Core.dll2025-10-29 13:43:36.556NT AUTHORITY\SYSTEM +11241100x800000000000000014587Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:43:38.392{8223a6b9-1a08-6902-1303-000000002b00}3840C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\f00-0\Microsoft.VisualBasic.dll2025-10-29 13:43:38.392NT AUTHORITY\SYSTEM +11241100x800000000000000014588Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:43:41.816{8223a6b9-1a0a-6902-1603-000000002b00}2232C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\8b8-0\WindowsBase.dll2025-10-29 13:43:41.814NT AUTHORITY\SYSTEM +11241100x800000000000000014589Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:43:51.324{8223a6b9-1a0d-6902-1703-000000002b00}5872C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\16f0-0\PresentationCore.dll2025-10-29 13:43:51.324NT AUTHORITY\SYSTEM +11241100x800000000000000014590Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:10.747{8223a6b9-1a17-6902-1903-000000002b00}1852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\73c-0\PresentationFramework.dll2025-10-29 13:44:10.747NT AUTHORITY\SYSTEM +11241100x800000000000000014591Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:12.269{8223a6b9-1a2b-6902-1b03-000000002b00}5896C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\1708-0\PresentationFramework.Aero2.dll2025-10-29 13:44:12.268NT AUTHORITY\SYSTEM +11241100x800000000000000014592Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:13.570{8223a6b9-1a2c-6902-1e03-000000002b00}912C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\390-0\System.Configuration.dll2025-10-29 13:44:13.570NT AUTHORITY\SYSTEM +11241100x800000000000000014593Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:14.071{8223a6b9-1a2d-6902-2003-000000002b00}11668C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\2d94-0\System.Configuration.Install.dll2025-10-29 13:44:14.071NT AUTHORITY\SYSTEM +11241100x800000000000000014594Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:21.920{8223a6b9-1a2e-6902-2303-000000002b00}10388C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\2894-0\System.Data.dll2025-10-29 13:44:21.919NT AUTHORITY\SYSTEM +11241100x800000000000000014595Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:23.636{8223a6b9-1a36-6902-2703-000000002b00}7444C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\1d14-0\System.DirectoryServices.dll2025-10-29 13:44:23.636NT AUTHORITY\SYSTEM +11241100x800000000000000014596Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:25.190{8223a6b9-1a37-6902-2903-000000002b00}7156C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\1bf4-0\System.Drawing.dll2025-10-29 13:44:25.189NT AUTHORITY\SYSTEM +154100x800000000000000014597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:44:26.603{8223a6b9-1a3a-6902-2c03-000000002b00}12000C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k GPSvcGroupC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +11241100x800000000000000014598Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:26.717{8223a6b9-1a39-6902-2b03-000000002b00}6104C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\17d8-0\System.Management.dll2025-10-29 13:44:26.717NT AUTHORITY\SYSTEM +11241100x800000000000000014599Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:27.436{8223a6b9-1a3a-6902-2e03-000000002b00}11988C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\2ed4-0\System.Net.Http.dll2025-10-29 13:44:27.436NT AUTHORITY\SYSTEM +11241100x800000000000000014600Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:28.265{8223a6b9-1a3b-6902-3003-000000002b00}11992C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\2ed8-0\System.Runtime.Remoting.dll2025-10-29 13:44:28.265NT AUTHORITY\SYSTEM +11241100x800000000000000014601Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:31.185{8223a6b9-1a3c-6902-3203-000000002b00}10912C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\2aa0-0\System.Runtime.Serialization.dll2025-10-29 13:44:31.184NT AUTHORITY\SYSTEM +11241100x800000000000000014602Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:52.850{8223a6b9-1a40-6902-3503-000000002b00}7484C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\1d3c-0\System.ServiceModel.dll2025-10-29 13:44:52.850NT AUTHORITY\SYSTEM +11241100x800000000000000014603Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:54.041{8223a6b9-1a55-6902-3703-000000002b00}6904C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\1af8-0\System.ServiceProcess.dll2025-10-29 13:44:54.041NT AUTHORITY\SYSTEM +11241100x800000000000000014604Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:54.933{8223a6b9-1a56-6902-3903-000000002b00}720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\2d0-0\System.Transactions.dll2025-10-29 13:44:54.933NT AUTHORITY\SYSTEM +11241100x800000000000000014605Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:44:57.046{8223a6b9-1a57-6902-3b03-000000002b00}2072C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\818-0\System.Web.Services.dll2025-10-29 13:44:57.046NT AUTHORITY\SYSTEM +11241100x800000000000000014606Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:45:09.497{8223a6b9-1a59-6902-3d03-000000002b00}2676C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\a74-0\System.Windows.Forms.dll2025-10-29 13:45:09.497NT AUTHORITY\SYSTEM +11241100x800000000000000014607Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:45:11.907{8223a6b9-1a66-6902-3f03-000000002b00}2672C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\a70-0\System.Xaml.dll2025-10-29 13:45:11.907NT AUTHORITY\SYSTEM +11241100x800000000000000014608Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:45:19.028{8223a6b9-1a68-6902-4103-000000002b00}8260C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\2044-0\System.Xml.dll2025-10-29 13:45:19.027NT AUTHORITY\SYSTEM +11241100x800000000000000014609Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:45:20.021{8223a6b9-1a6f-6902-4303-000000002b00}4668C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\123c-0\System.Xml.Linq.dll2025-10-29 13:45:20.021NT AUTHORITY\SYSTEM +11241100x800000000000000014610Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:45:33.460{8223a6b9-1a71-6902-4703-000000002b00}6908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE806.tmp\System.dll2025-10-29 13:45:33.460NT AUTHORITY\SYSTEM +11241100x800000000000000014611Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:45:40.343{8223a6b9-1a7e-6902-4803-000000002b00}12024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP1995.tmp\WindowsBase.dll2025-10-29 13:45:40.343NT AUTHORITY\SYSTEM +354300x800000000000000014612Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 13:45:54.807{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50529-false20.42.65.91-443https +11241100x800000000000000014613Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:46:01.482{8223a6b9-1a84-6902-4903-000000002b00}5640C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3451.tmp\PresentationCore.dll2025-10-29 13:46:01.482NT AUTHORITY\SYSTEM +11241100x800000000000000014614Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:46:06.483{8223a6b9-1a9a-6902-4b03-000000002b00}5828C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP8995.tmp\System.Core.dll2025-10-29 13:46:06.483NT AUTHORITY\SYSTEM +154100x800000000000000014615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:46:28.162{8223a6b9-1ab4-6902-4e03-000000002b00}9952C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe525.28301.10.0-Microsoft® Windows® Operating SystemMicrosoft CorporationWidgets.exe"C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe" -ServerName:Microsoft.Windows.DashboardServerC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4493DF43D8924F7931B29E21C548E68D,SHA256=4F7EE0786719E2A9B4B0A53A70F9687D756A1DCA2F683A3B5D2979C0E47575A4,IMPHASH=18F4C68545C5D3070BF221F0E6B4F08D{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +11241100x800000000000000014616Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:46:34.568{8223a6b9-1a9e-6902-4c03-000000002b00}11120C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP9935.tmp\PresentationFramework.dll2025-10-29 13:46:34.568NT AUTHORITY\SYSTEM +11241100x800000000000000014617Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:46:35.846{8223a6b9-1abb-6902-5003-000000002b00}1304C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP954.tmp\PresentationFramework.Aero.dll2025-10-29 13:46:35.846NT AUTHORITY\SYSTEM +11241100x800000000000000014618Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:46:46.136{8223a6b9-1abc-6902-5303-000000002b00}4788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPC71.tmp\System.Data.dll2025-10-29 13:46:46.135NT AUTHORITY\SYSTEM +11241100x800000000000000014619Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:46:49.524{8223a6b9-1ac6-6902-5503-000000002b00}5688C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP35F2.tmp\System.Drawing.dll2025-10-29 13:46:49.524NT AUTHORITY\SYSTEM +11241100x800000000000000014620Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:47:09.207{8223a6b9-1ac9-6902-5703-000000002b00}11036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP4246.tmp\System.Windows.Forms.dll2025-10-29 13:47:09.207NT AUTHORITY\SYSTEM +11241100x800000000000000014621Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:47:19.433{8223a6b9-1ade-6902-5903-000000002b00}6368C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP9170.tmp\System.Xml.dll2025-10-29 13:47:19.433NT AUTHORITY\SYSTEM +11241100x800000000000000014622Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:47:29.154{8223a6b9-1aec-6902-7c03-000000002b00}6628C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC949.tmp\System.dll2025-10-29 13:47:29.154NT AUTHORITY\SYSTEM +11241100x800000000000000014623Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:47:32.325{8223a6b9-1af1-6902-7d03-000000002b00}10660C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDD9C.tmp\WindowsBase.dll2025-10-29 13:47:32.323NT AUTHORITY\SYSTEM +11241100x800000000000000014624Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:47:41.821{8223a6b9-1af4-6902-7e03-000000002b00}2740C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE9E1.tmp\PresentationCore.dll2025-10-29 13:47:41.821NT AUTHORITY\SYSTEM +11241100x800000000000000014625Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:47:44.589{8223a6b9-1afe-6902-8003-000000002b00}10332C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP10F1.tmp\System.Core.dll2025-10-29 13:47:44.589NT AUTHORITY\SYSTEM +11241100x800000000000000014626Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:47:55.699{8223a6b9-1b00-6902-8103-000000002b00}8976C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP18D0.tmp\PresentationFramework.dll2025-10-29 13:47:55.699NT AUTHORITY\SYSTEM +11241100x800000000000000014627Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:47:57.094{8223a6b9-1b0c-6902-8303-000000002b00}2380C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4724.tmp\PresentationFramework.Aero.dll2025-10-29 13:47:57.094NT AUTHORITY\SYSTEM +11241100x800000000000000014628Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:01.368{8223a6b9-1b0d-6902-8603-000000002b00}7456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4B0C.tmp\System.Data.dll2025-10-29 13:48:01.368NT AUTHORITY\SYSTEM +11241100x800000000000000014629Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:02.912{8223a6b9-1b12-6902-8803-000000002b00}10364C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5BB5.tmp\System.Drawing.dll2025-10-29 13:48:02.912NT AUTHORITY\SYSTEM +11241100x800000000000000014630Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:09.183{8223a6b9-1b13-6902-8a03-000000002b00}3980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6088.tmp\System.Windows.Forms.dll2025-10-29 13:48:09.182NT AUTHORITY\SYSTEM +11241100x800000000000000014631Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:13.104{8223a6b9-1b1a-6902-8c03-000000002b00}9972C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7B92.tmp\System.Xml.dll2025-10-29 13:48:13.103NT AUTHORITY\SYSTEM +154100x800000000000000014632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:48:15.129{8223a6b9-1b1f-6902-9103-000000002b00}11192C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000014633Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:20.522{8223a6b9-1b1e-6902-9003-000000002b00}6344C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\18c8-0\System.dll2025-10-29 13:48:20.521NT AUTHORITY\SYSTEM +11241100x800000000000000014634Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:26.796{8223a6b9-1b24-6902-9203-000000002b00}8288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\2060-0\System.Core.dll2025-10-29 13:48:26.795NT AUTHORITY\SYSTEM +11241100x800000000000000014635Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:29.641{8223a6b9-1b2b-6902-9303-000000002b00}12224C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\2fc0-0\WindowsBase.dll2025-10-29 13:48:29.640NT AUTHORITY\SYSTEM +11241100x800000000000000014636Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:38.497{8223a6b9-1b2d-6902-9403-000000002b00}6636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\19ec-0\PresentationCore.dll2025-10-29 13:48:38.497NT AUTHORITY\SYSTEM +11241100x800000000000000014637Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:51.908{8223a6b9-1b37-6902-9603-000000002b00}11976C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\2ec8-0\PresentationFramework.dll2025-10-29 13:48:51.908NT AUTHORITY\SYSTEM +11241100x800000000000000014638Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:53.381{8223a6b9-1b44-6902-9803-000000002b00}5656C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\1618-0\PresentationFramework.Aero2.dll2025-10-29 13:48:53.381NT AUTHORITY\SYSTEM +11241100x800000000000000014639Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:54.441{8223a6b9-1b45-6902-9b03-000000002b00}7960C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\1f18-0\System.Configuration.dll2025-10-29 13:48:54.439NT AUTHORITY\SYSTEM +11241100x800000000000000014640Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:55.456{8223a6b9-1b47-6902-9e03-000000002b00}11200C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\2bc0-0\System.Net.Http.dll2025-10-29 13:48:55.455NT AUTHORITY\SYSTEM +11241100x800000000000000014641Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:57.681{8223a6b9-1b47-6902-a003-000000002b00}8412C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\20dc-0\System.Runtime.Serialization.dll2025-10-29 13:48:57.681NT AUTHORITY\SYSTEM +11241100x800000000000000014642Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:48:59.303{8223a6b9-1b4a-6902-a303-000000002b00}9212C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\23fc-0\System.Xaml.dll2025-10-29 13:48:59.303NT AUTHORITY\SYSTEM +11241100x800000000000000014643Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:03.616{8223a6b9-1b4b-6902-a503-000000002b00}11484C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\2cdc-0\System.Xml.dll2025-10-29 13:49:03.615NT AUTHORITY\SYSTEM +11241100x800000000000000014644Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:04.461{8223a6b9-1b50-6902-a703-000000002b00}5892C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\1704-0\System.Xml.Linq.dll2025-10-29 13:49:04.461NT AUTHORITY\SYSTEM +11241100x800000000000000014645Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:41.947{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{CBED97A1-481E-487F-85A6-C475052FD459}\ssshim.dll2025-10-29 13:49:41.947NT AUTHORITY\SYSTEM +11241100x800000000000000014646Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.565{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateCompression.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014647Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.570{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\featurestaging.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014648Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.581{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\updatedeploy.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014649Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.587{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\AppxDeviceInventory.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014650Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.615{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\TurboStack.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014651Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.642{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UAOneSettings.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014652Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.648{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\wcp.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014653Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.688{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\MsixPackageProvisioner.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014654Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.696{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\dpx.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014655Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.711{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\WinREAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014656Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.722{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\ReserveManager.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014657Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.726{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\Mitigation.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014658Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:49:42.731{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +154100x800000000000000014659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:49:48.595{8223a6b9-1b7c-6902-bc03-000000002b00}4484C:\Windows\servicing\TrustedInstaller.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Modules InstallerMicrosoft® Windows® Operating SystemMicrosoft CorporationTrustedInstaller.exeC:\WINDOWS\servicing\TrustedInstaller.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=23CF29D35F32448C19398B91E3C31186,SHA256=C037F1D455B27EF75391EECE7F25711CF3055006FA29C5D872DB4D54FEF0ADE8,IMPHASH=5E159CE7599ACD6CA7EC3122186D5DBC{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:49:48.658{8223a6b9-1b7c-6902-bd03-000000002b00}1220C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe10.0.26100.4933 (WinBuild.160101.0800)Windows Modules Installer WorkerMicrosoft® Windows® Operating SystemMicrosoft CorporationTiWorker.exeC:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=749679E003C18036BF998EB9BCE36A63,SHA256=3F42DBAF2BD7AD92577AFB6D47A8F3DC32DCB6A8E52BA7738FAEB31ED197ACDC,IMPHASH=0B85588480DF97BD963732E20722340E{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:50:15.306{8223a6b9-1b97-6902-be03-000000002b00}2492C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /cC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000014662Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:42.683{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{A5553B08-5F65-4831-B394-71ABC82B859F}\ssshim.dll2025-10-29 13:52:42.681NT AUTHORITY\SYSTEM +11241100x800000000000000014663Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:47.945{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateCompression.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014664Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:47.953{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\featurestaging.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014665Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:47.958{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\updatedeploy.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014666Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:47.968{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\AppxDeviceInventory.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014667Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:47.987{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\TurboStack.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014668Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.031{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UAOneSettings.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014669Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.035{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\wcp.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014670Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.091{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\MsixPackageProvisioner.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014671Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.101{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\dpx.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014672Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.116{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\WinREAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014673Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.125{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\ReserveManager.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014674Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.131{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\Mitigation.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014675Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.142{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014676Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.333{8223a6b9-16aa-6902-ab02-000000002b00}11008C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exeC:\Windows\SystemTemp\{0945CF98-02B2-463B-974B-81556283ABBD}\ssshim.dll2025-10-29 13:52:48.333NT AUTHORITY\SYSTEM +11241100x800000000000000014677Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 13:52:48.510{8223a6b9-1317-6902-3f00-000000002b00}3008C:\WINDOWS\system32\svchost.exeC:\Windows\SystemTemp\{2045B4A6-062E-4F83-896A-19C0BBD9A5B3}\ssshim.dll2025-10-29 13:52:48.509NT AUTHORITY\SYSTEM +154100x800000000000000014678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:54:18.036{8223a6b9-1c8a-6902-c003-000000002b00}11920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1776,i,3191266903891849080,14785981096155531668,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4004 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:56:42.429{8223a6b9-1d1a-6902-c103-000000002b00}10964C:\Windows\System32\smartscreen.exe10.0.26100.4652 (WinBuild.160101.0800)Windows Defender SmartScreenMicrosoft® Windows® Operating SystemMicrosoft Corporationsmartscreen.exeC:\Windows\System32\smartscreen.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4B9FD8FEFBA636B66F81E0CDBD12B3DA,SHA256=86530447A3E2B502FE2AC164434B13137E5505A86743A96A091EC18A9377D9D9,IMPHASH=C84171DF6E7F087EA4E625CCCE2AB167{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:56:42.524{8223a6b9-1d1a-6902-c203-000000002b00}11884C:\Windows\System32\mmc.exe10.0.26100.4946 (WinBuild.160101.0800)Microsoft Management ConsoleMicrosoft® Windows® Operating SystemMicrosoft Corporationmmc.exe"C:\WINDOWS\system32\mmc.exe" "C:\WINDOWS\system32\eventvwr.msc" C:\Users\Administrator\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=E9C9E840B2DF6AF778AD25AA493F7920,SHA256=1183F57334EE4B297EBCF9CCCBDE85CCC161639961748DEF2215D20B5CFCB59F,IMPHASH=3720EE41511B64228B9D8C515B609003{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000014681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:59:02.457{8223a6b9-1da6-6902-c403-000000002b00}1828C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +22542200x800000000000000014682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:59:01.359{8223a6b9-135e-6902-0501-000000002b00}11608javadl-esd-secure.oracle.com0type: 5 javadl-esd-secure.oracle.com.edgekey.net;type: 5 e13073.g.akamaiedge.net;::ffff:23.205.134.132;C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exesoc101win11\Administrator +154100x800000000000000014683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 13:59:26.683{8223a6b9-1dbe-6902-c703-000000002b00}6904C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k GPSvcGroupC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:02:20.599{8223a6b9-1e6c-6902-cc03-000000002b00}5632C:\Windows\System32\smartscreen.exe10.0.26100.4652 (WinBuild.160101.0800)Windows Defender SmartScreenMicrosoft® Windows® Operating SystemMicrosoft Corporationsmartscreen.exeC:\Windows\System32\smartscreen.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4B9FD8FEFBA636B66F81E0CDBD12B3DA,SHA256=86530447A3E2B502FE2AC164434B13137E5505A86743A96A091EC18A9377D9D9,IMPHASH=C84171DF6E7F087EA4E625CCCE2AB167{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:02:20.650{8223a6b9-1e6c-6902-cd03-000000002b00}9996C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.Exe"C:\WINDOWS\system32\cmd.exe" C:\Users\Administrator\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000014686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:02:20.740{8223a6b9-1e6c-6902-cf03-000000002b00}8208C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exe1.23.2510.08001Console Window and PTY Host (Open Source)Windows TerminalMicrosoft CorporationOpenConsole.exe"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C48D95C59D686E879C4462C9C2D1348D,SHA256=D1FE7FAA62F9E955E2AC2371F95D7E5513DF4D496255097158F979C94782C5FC,IMPHASH=1EDFB3B6D30801669E386A7B8C579338{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:02:20.907{8223a6b9-1e6c-6902-d003-000000002b00}10196C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe1.23.2510.08001Windows Terminal HostWindows TerminalMicrosoft CorporationWindowsTerminal.exe"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CB1205C3A413F8C2D53CA5BA21A4B3D8,SHA256=AA293DC0FE288C4B40CD5126A047A3AE706DAFBA8D6B6AC67DB125C782FD5926,IMPHASH=81A75FA8EDB493CBDD67C454393BB059{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:02:34.607{8223a6b9-1e7a-6902-d103-000000002b00}440C:\Windows\System32\Taskmgr.exe10.0.26100.4768 (WinBuild.160101.0800)Task ManagerMicrosoft® Windows® Operating SystemMicrosoft CorporationTaskmgr.exe"C:\WINDOWS\system32\taskmgr.exe" /4C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B04B647A27204DC3E7889C3D6C8CA0E2,SHA256=AE125A8D361A9B87921762EE3B8AD99E8413D30742D45507FCAE0B72491862E5,IMPHASH=AEB83FC85EAC652029966193AA3B1B20{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000014689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:02:50.742{8223a6b9-1e8a-6902-d403-000000002b00}5304C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXEC:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x800000000000000014690Microsoft-Windows-Sysmon/Operationalsoc101win11-SetValue2025-10-29 14:02:50.811{8223a6b9-1327-6902-af00-000000002b00}7368C:\WINDOWS\Explorer.EXEHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{07CA83F0-DF06-4E67-89DD-E80924A49512} {AAEE03A7-A7F6-50BE-A9B0-8E82D0C81082} 0xFFFFBinary Datasoc101win11\Administrator +154100x800000000000000014691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:02:50.985{8223a6b9-1e8a-6902-d503-000000002b00}10204C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exe25.189.0928.0002Microsoft OneDriveFile Co-Authoring ExecutableMicrosoft OneDriveMicrosoft CorporationFileCoAuth.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=2E043FAFFD4F8931BC1A842F9E4FA32F,SHA256=236A8DB7FD45AC294EF9AA9BAFE1F9FC70ECDB598B27410DE41B9E57A070DE96,IMPHASH=21DEF170CFADB4655DEEFF3322622D63{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:04:07.219{8223a6b9-1ed7-6902-d803-000000002b00}11564C:\Users\research\Desktop\systernals\Sysmon64.exe15.15System activity monitorSysinternals SysmonSysinternals - www.sysinternals.com-sysmon64.exeC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7663C565BF28115506CB7EBD1DA389E0,SHA256=D9C8FDFDCE510FD9922DA3A1084B6AC4476C1407D1D8BBB67FC0A61988552771,IMPHASH=A039666F8D08DD16E0909469DA998438{8223a6b9-1e6c-6902-cd03-000000002b00}9996C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" soc101win11\Administrator +534500x800000000000000014693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:04:07.264{8223a6b9-1ed7-6902-d803-000000002b00}11564C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +154100x800000000000000014694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:04:16.850{8223a6b9-1ee0-6902-da03-000000002b00}3328C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.Exe"C:\WINDOWS\system32\cmd.exe" C:\Users\Administrator\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000014695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:04:16.926{8223a6b9-1ee0-6902-dc03-000000002b00}7988C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exe1.23.2510.08001Console Window and PTY Host (Open Source)Windows TerminalMicrosoft CorporationOpenConsole.exe"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exe" -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C48D95C59D686E879C4462C9C2D1348D,SHA256=D1FE7FAA62F9E955E2AC2371F95D7E5513DF4D496255097158F979C94782C5FC,IMPHASH=1EDFB3B6D30801669E386A7B8C579338{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:04:33.904{8223a6b9-1ef1-6902-dd03-000000002b00}1568C:\Users\research\Desktop\systernals\Sysmon64.exe15.15System activity monitorSysinternals SysmonSysinternals - www.sysinternals.com-Sysmon64.exeC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7663C565BF28115506CB7EBD1DA389E0,SHA256=D9C8FDFDCE510FD9922DA3A1084B6AC4476C1407D1D8BBB67FC0A61988552771,IMPHASH=A039666F8D08DD16E0909469DA998438{8223a6b9-1ee0-6902-da03-000000002b00}3328C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" soc101win11\Administrator +534500x800000000000000014697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:04:33.930{8223a6b9-1ef1-6902-dd03-000000002b00}1568C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +154100x800000000000000014698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:05:25.367{8223a6b9-1f25-6902-de03-000000002b00}8576C:\Users\research\Desktop\systernals\Sysmon.exe15.15System activity monitorSysinternals SysmonSysinternals - www.sysinternals.com-sysmon -i sysmonconfig-export.xmlC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7BB6C3A0F6C177784F5C64DB992F5412,SHA256=16E4ED3EA1D4C67213799905D61A2722CF08A0B74A885E58B743B91D3CDDFC87,IMPHASH=585F6F71377CDF184B4A45BA1F63FD55{8223a6b9-1ee0-6902-da03-000000002b00}3328C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" soc101win11\Administrator +11241100x800000000000000014699Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:05:25.471{8223a6b9-1f25-6902-de03-000000002b00}8576C:\Users\research\Desktop\systernals\Sysmon.exeC:\Users\ADMINI~1\AppData\Local\Temp\Sysmon.exe2025-10-29 14:05:25.471soc101win11\Administrator +154100x800000000000000014700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:05:25.538{8223a6b9-1f25-6902-df03-000000002b00}1052C:\Users\ADMINI~1\AppData\Local\Temp\Sysmon.exe15.15System activity monitorSysinternals SysmonSysinternals - www.sysinternals.com-sysmon -i sysmonconfig-export.xmlC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7663C565BF28115506CB7EBD1DA389E0,SHA256=D9C8FDFDCE510FD9922DA3A1084B6AC4476C1407D1D8BBB67FC0A61988552771,IMPHASH=A039666F8D08DD16E0909469DA998438{8223a6b9-1f25-6902-de03-000000002b00}8576C:\Users\research\Desktop\systernals\Sysmon.exesysmon -i sysmonconfig-export.xmlsoc101win11\Administrator +13241300x800000000000000014701Microsoft-Windows-Sysmon/Operationalsoc101win11Alert,Sysinternals Tool UsedSetValue2025-10-29 14:05:25.637{8223a6b9-1f25-6902-df03-000000002b00}1052C:\Users\ADMINI~1\AppData\Local\Temp\Sysmon.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Sysinternals\System Monitor\EulaAcceptedDWORD (0x00000001)soc101win11\Administrator +534500x800000000000000014702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:05:25.642{8223a6b9-1f25-6902-df03-000000002b00}1052C:\Users\ADMINI~1\AppData\Local\Temp\Sysmon.exesoc101win11\Administrator +534500x800000000000000014703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:05:25.652{8223a6b9-1f25-6902-de03-000000002b00}8576C:\Users\research\Desktop\systernals\Sysmon.exesoc101win11\Administrator +154100x800000000000000014704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:05:56.393{8223a6b9-1f44-6902-e003-000000002b00}2740C:\Windows\System32\sc.exe10.0.26100.4484 (WinBuild.160101.0800)Service Control Manager Configuration ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationsc.exesc query sysmonC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=C8F632A326219F85927B3F33A13F7C7D,SHA256=A452BFCB6000D03942DDFADDCDA5A7EB121447ED99B1BA090446B4A989F1F7AE,IMPHASH=42DADBD60BBC453DD1773FDC089E19B7{8223a6b9-1ee0-6902-da03-000000002b00}3328C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" soc101win11\Administrator +154100x800000000000000014705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:06:14.994{8223a6b9-1f56-6902-e103-000000002b00}8592C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEpowershellC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-1ee0-6902-da03-000000002b00}3328C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" soc101win11\Administrator +11241100x800000000000000014706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:06:15.227{8223a6b9-1f56-6902-e103-000000002b00}8592C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_ryomt5ik.day.ps12025-10-29 14:06:15.227soc101win11\Administrator +154100x800000000000000014707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:06.493{8223a6b9-1f8a-6902-e203-000000002b00}4540C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +534500x800000000000000014708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:09.040{8223a6b9-15e8-6902-7502-000000002b00}10044C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000014709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:11.295{8223a6b9-1f8f-6902-e303-000000002b00}10088C:\Windows\System32\Taskmgr.exe10.0.26100.4768 (WinBuild.160101.0800)Task ManagerMicrosoft® Windows® Operating SystemMicrosoft CorporationTaskmgr.exe"C:\WINDOWS\system32\taskmgr.exe" /4C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B04B647A27204DC3E7889C3D6C8CA0E2,SHA256=AE125A8D361A9B87921762EE3B8AD99E8413D30742D45507FCAE0B72491862E5,IMPHASH=AEB83FC85EAC652029966193AA3B1B20{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +534500x800000000000000014710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.160{8223a6b9-1609-6902-9f02-000000002b00}8760C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.175{8223a6b9-15e1-6902-6902-000000002b00}6920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.175{8223a6b9-15e1-6902-6b02-000000002b00}2976C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.180{8223a6b9-15de-6902-6702-000000002b00}10092C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.195{8223a6b9-15e0-6902-6802-000000002b00}3844C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.211{8223a6b9-1609-6902-a002-000000002b00}4512C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.215{8223a6b9-15e1-6902-6a02-000000002b00}10756C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.217{8223a6b9-15e5-6902-7202-000000002b00}8356C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.225{8223a6b9-1c8a-6902-c003-000000002b00}11920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.227{8223a6b9-15e3-6902-6f02-000000002b00}1928C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:18.239{8223a6b9-1605-6902-9202-000000002b00}6820C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000014721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:26.593{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000014722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:27.163{8223a6b9-1f9f-6902-e703-000000002b00}4724C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Administrator\AppData\Roaming\LM Studio" /prefetch:4 --no-rate-limit --no-upload-gzip --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad" "--annotation=_productName=LM Studio" --annotation=_version=0.3.30+2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=37.2.0 --initial-client-data=0x4a8,0x4ac,0x4b0,0x4a4,0x4b4,0x7ff6780dbb44,0x7ff6780dbb50,0x7ff6780dbb60C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +13241300x800000000000000014723Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 14:07:27.662{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\lmstudio\shell\open\command\(Default)"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" "%%1"soc101win11\Administrator +154100x800000000000000014724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:27.713{8223a6b9-1f9f-6902-e803-000000002b00}10772C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1712 /prefetch:2C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:27.729{8223a6b9-1f9f-6902-e903-000000002b00}1384C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1988 /prefetch:11C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:27.773{8223a6b9-1f9f-6902-ea03-000000002b00}11692C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:28.562{8223a6b9-1fa0-6902-eb03-000000002b00}2812C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000014728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:28.774{8223a6b9-1f9f-6902-e703-000000002b00}4724C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\a93b5ea3-db94-4f88-b83a-c804834349ec.dmp2025-10-29 14:07:28.774soc101win11\Administrator +534500x800000000000000014729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:28.840{8223a6b9-1fa0-6902-eb03-000000002b00}2812C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000014730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:28.851{8223a6b9-1fa0-6902-ec03-000000002b00}2160C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator + "C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator + } + [Console]::WriteLine($gpu.Name) + foreach ($gpu in $gpuInfo) { + $gpuInfo = Get-WmiObject -Class Win32_VideoController | Select-Object -Property Name +154100x800000000000000014731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:28.967{8223a6b9-1fa0-6902-ed03-000000002b00}10072C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -Command " +11241100x800000000000000014732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:29.177{8223a6b9-1fa0-6902-ed03-000000002b00}10072C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_2dgfjt2l.xd3.ps12025-10-29 14:07:29.177soc101win11\Administrator +154100x800000000000000014733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:30.735{8223a6b9-1fa2-6902-ef03-000000002b00}6556C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:31.083{8223a6b9-1fa3-6902-f003-000000002b00}4392C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --app-user-model-id="electron.app.LM Studio" --app-path="C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app" --no-sandbox --no-zygote --node-integration-in-worker --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1761743627040774 --launch-time-ticks=3224034016 --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3328 /prefetch:1C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +13241300x800000000000000014735Microsoft-Windows-Sysmon/Operationalsoc101win11T1060,RunKeySetValue2025-10-29 14:07:32.019{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows\CurrentVersion\Run\electron.app.LM StudioC:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe --run-as-servicesoc101win11\Administrator +154100x800000000000000014736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:32.033{8223a6b9-1fa4-6902-f103-000000002b00}8636C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -c "[Environment]::GetEnvironmentVariable('PATH', 'User')"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000014737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:32.262{8223a6b9-1fa4-6902-f103-000000002b00}8636C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_wdv23ksc.wzk.ps12025-10-29 14:07:32.261soc101win11\Administrator +22542200x800000000000000014738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:31.061{8223a6b9-1f9e-6902-e603-000000002b00}8680versions-prod.lmstudio.ai0::ffff:104.26.7.153;::ffff:104.26.6.153;::ffff:172.67.69.92;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +354300x800000000000000014739Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:07:31.159{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50593-false104.26.7.153-443https +11241100x800000000000000014740Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:07:33.281{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\bin\lms.exe2025-10-29 13:25:54.446soc101win11\Administrator +154100x800000000000000014741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.353{8223a6b9-1fa5-6902-f303-000000002b00}1912C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.396{8223a6b9-1fa5-6902-f403-000000002b00}12148C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=74A434608B94BD66721A01808B3F3300,SHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4,IMPHASH=C91715637F89CFF9813ED6D375592AA2{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.410{8223a6b9-1fa5-6902-f503-000000002b00}7572C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=74A434608B94BD66721A01808B3F3300,SHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4,IMPHASH=C91715637F89CFF9813ED6D375592AA2{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.553{8223a6b9-1fa5-6902-f803-000000002b00}1084C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-1fa5-6902-f403-000000002b00}12148C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +154100x800000000000000014745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.562{8223a6b9-1fa5-6902-f903-000000002b00}10364C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-1fa5-6902-f503-000000002b00}7572C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +534500x800000000000000014746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.840{8223a6b9-1fa5-6902-f903-000000002b00}10364C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000014747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.840{8223a6b9-1fa5-6902-f803-000000002b00}1084C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +22542200x800000000000000014748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:32.139{8223a6b9-1f9e-6902-e603-000000002b00}8680extensions.lmstudio.ai0::ffff:104.26.6.153;::ffff:104.26.7.153;::ffff:172.67.69.92;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +22542200x800000000000000014749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:32.370{8223a6b9-1f9e-6902-e603-000000002b00}8680models.lmstudio.ai0::ffff:104.26.6.153;::ffff:172.67.69.92;::ffff:104.26.7.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000014750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.871{8223a6b9-1fa5-6902-f403-000000002b00}12148C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000014751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.871{8223a6b9-1fa5-6902-f503-000000002b00}7572C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +154100x800000000000000014752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.878{8223a6b9-1fa5-6902-fa03-000000002b00}4908C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:33.962{8223a6b9-1fa5-6902-fc03-000000002b00}1940C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=B415B7AE268C0945629ABE36C166BC22,SHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3,IMPHASH=0A1C54D1A59D88BDB6AA412E07FF0619{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000014754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:34.089{8223a6b9-1fa5-6902-fa03-000000002b00}4908C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000014755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:34.105{8223a6b9-1fa5-6902-fc03-000000002b00}1940C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +354300x800000000000000014756Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:07:33.446{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50594-false104.26.6.153-443https +354300x800000000000000014757Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:07:33.446{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50595-false104.26.6.153-443https +354300x800000000000000014758Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:07:33.446{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50596-false104.26.6.153-443https +22542200x800000000000000014759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:34.857{8223a6b9-1f9f-6902-e903-000000002b00}1384wpad1460-C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +22542200x800000000000000014760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:35.526{8223a6b9-1f9e-6902-e603-000000002b00}8680lmstudio.ai0::ffff:104.26.6.153;::ffff:172.67.69.92;::ffff:104.26.7.153;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000014761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:36.910{8223a6b9-1fa8-6902-fe03-000000002b00}11208C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\js-code-sandbox\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5E3ABA1CBDA9F8BB9BBB279F6402E0C6,SHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94,IMPHASH=F205B027C46CADF1E2534D1AA11A4093{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +354300x800000000000000014762Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:07:35.600{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50597-false104.26.6.153-443https +154100x800000000000000014763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:37.146{8223a6b9-1fa9-6902-0004-000000002b00}10812C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\rag-v1\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5E3ABA1CBDA9F8BB9BBB279F6402E0C6,SHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94,IMPHASH=F205B027C46CADF1E2534D1AA11A4093{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:37.227{8223a6b9-1fa9-6902-0204-000000002b00}6044C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "taskkill /pid 11208 /T /F"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:37.278{8223a6b9-1fa9-6902-0404-000000002b00}7576C:\Windows\System32\taskkill.exe10.0.26100.1 (WinBuild.160101.0800)Terminates ProcessesMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskkill.exetaskkill /pid 11208 /T /FC:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CBF904BC6835B56A4BD5AC4141F8D131,SHA256=1249717315FC8F4D2DF17D5DB9DA0444795FDB9FB83DFB1F763C3F39282244F7,IMPHASH=FFE513AF7F8477FE56A2B3C63BE2D148{8223a6b9-1fa9-6902-0204-000000002b00}6044C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "taskkill /pid 11208 /T /F"soc101win11\Administrator +534500x800000000000000014766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:37.372{8223a6b9-1fa8-6902-fe03-000000002b00}11208C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +154100x800000000000000014767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:37.458{8223a6b9-1fa9-6902-0504-000000002b00}10100C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "taskkill /pid 10812 /T /F"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:37.489{8223a6b9-1fa9-6902-0704-000000002b00}12116C:\Windows\System32\taskkill.exe10.0.26100.1 (WinBuild.160101.0800)Terminates ProcessesMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskkill.exetaskkill /pid 10812 /T /FC:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CBF904BC6835B56A4BD5AC4141F8D131,SHA256=1249717315FC8F4D2DF17D5DB9DA0444795FDB9FB83DFB1F763C3F39282244F7,IMPHASH=FFE513AF7F8477FE56A2B3C63BE2D148{8223a6b9-1fa9-6902-0504-000000002b00}10100C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "taskkill /pid 10812 /T /F"soc101win11\Administrator +534500x800000000000000014769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:37.575{8223a6b9-1fa9-6902-0004-000000002b00}10812C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +254200x800000000000000014770Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:07:41.108{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\3e80ddcb-fc89-4f46-96c8-02f2010f46fd.tmp2025-10-29 13:26:10.9722025-10-29 14:07:41.105soc101win11\Administrator +354300x800000000000000014771Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:07:41.350{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50600-false104.26.7.153-443https +22542200x800000000000000014772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:41.295{8223a6b9-1f9e-6902-e603-000000002b00}8680search.lmstudio.ai0::ffff:104.26.7.153;::ffff:104.26.6.153;::ffff:172.67.69.92;C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000014773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:07:45.525{8223a6b9-1fb1-6902-0804-000000002b00}776C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000014774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:08:10.918{8223a6b9-1fca-6902-0a04-000000002b00}8400C:\Windows\System32\mmc.exe10.0.26100.4946 (WinBuild.160101.0800)Microsoft Management ConsoleMicrosoft® Windows® Operating SystemMicrosoft Corporationmmc.exe"C:\WINDOWS\system32\mmc.exe" "C:\WINDOWS\system32\eventvwr.msc" /sC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=E9C9E840B2DF6AF778AD25AA493F7920,SHA256=1183F57334EE4B297EBCF9CCCBDE85CCC161639961748DEF2215D20B5CFCB59F,IMPHASH=3720EE41511B64228B9D8C515B609003{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000014775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:09:27.724{8223a6b9-2017-6902-0b04-000000002b00}11920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5549 --gpu-device-id=1029 --gpu-sub-system-id=67442093 --gpu-revision=0 --gpu-driver-version=9.17.7.4 --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:10C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CF2B4038B1118E044418C8A1D92D782A,SHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080,IMPHASH=3687CC090FBF8C913764492C5CD3A58B{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000014776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:09:27.857{8223a6b9-2017-6902-0b04-000000002b00}11920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000014777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:10:10.560{8223a6b9-2042-6902-0c04-000000002b00}3012C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe525.28301.10.0-Microsoft® Windows® Operating SystemMicrosoft CorporationWidgets.exe"C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe" DashboardBackgroundFeedsTaskArg -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4493DF43D8924F7931B29E21C548E68D,SHA256=4F7EE0786719E2A9B4B0A53A70F9687D756A1DCA2F683A3B5D2979C0E47575A4,IMPHASH=18F4C68545C5D3070BF221F0E6B4F08D{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:13:31.366{8223a6b9-210b-6902-0f04-000000002b00}8524C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:14:26.778{8223a6b9-2142-6902-1604-000000002b00}3440C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k GPSvcGroupC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:14:44.230{8223a6b9-2154-6902-1704-000000002b00}8628C:\Windows\System32\appidcertstorecheck.exe10.0.26100.3037 (WinBuild.160101.0800)AppID Certificate Store Verification TaskMicrosoft® Windows® Operating SystemMicrosoft CorporationAppIDCertstoreCheck.exe"C:\WINDOWS\system32\appidcertstorecheck.exe"C:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=B14AE123FE8C9391063FCA6A27E80B1C,SHA256=442A6A8546B9B2EE4159760B04E8FD33E6F3310C92C66709C27AFA47C8653808,IMPHASH=5472981C962523EC2271513DBA5F1CCC{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:15:30.055{8223a6b9-2182-6902-1a04-000000002b00}12072C:\Windows\System32\sdbinst.exe10.0.26100.4768 (WinBuild.160101.0800)Application Compatibility Database InstallerMicrosoft® Windows® Operating SystemMicrosoft Corporationsdbinst.exeC:\WINDOWS\System32\sdbinst.exe -m -bgC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=C4CECD71AF13D419723A55D845363E8B,SHA256=DB97C0FF14FD17FB7B2974E64CDE7F564AFF7D380F955F0C3AB6BE1563E08C5C,IMPHASH=1B6EE3C1899EA90A8A3811555E1DA64E{8223a6b9-1371-6902-1601-000000002b00}11820C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvcNT AUTHORITY\SYSTEM +13241300x800000000000000014782Microsoft-Windows-Sysmon/Operationalsoc101win11Context,DeviceConnectedOrUpdatedSetValue2025-10-29 14:15:30.138{8223a6b9-2182-6902-1a04-000000002b00}12072C:\WINDOWS\System32\sdbinst.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\sysmain.sdb\01DA54B25CE0D000.sysmain.sdb\FriendlyNameMicrosoft Windows Application Compatibility Fix DatabaseNT AUTHORITY\SYSTEM +13241300x800000000000000014783Microsoft-Windows-Sysmon/Operationalsoc101win11Context,DeviceConnectedOrUpdatedSetValue2025-10-29 14:15:30.142{8223a6b9-2182-6902-1a04-000000002b00}12072C:\WINDOWS\System32\sdbinst.exeHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\msimain.sdb\01DA54B25CE0D000.msimain.sdb\FriendlyNameMicrosoft System Installer Compatibility DatabaseNT AUTHORITY\SYSTEM +154100x800000000000000014784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:15:46.614{8223a6b9-2192-6902-1c04-000000002b00}11488C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe25.189.0928.0002Standalone UpdaterMicrosoft OneDriveMicrosoft CorporationOneDriveStandaloneUpdater.exe"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe" /reportingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5E7499E58A3D2A15A08EFD8D4A5F8597,SHA256=378685419E4124BE02F4277A0B31EF638B5038C5471136B865CA745CF9424DC3,IMPHASH=3BF487005E1B1E1DE4C8941898CAE521{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +22542200x800000000000000014785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:15:51.554{8223a6b9-2192-6902-1d04-000000002b00}8636oneclient.sfx.ms0type: 5 oneclient.sfx.ms.edgesuite.net;type: 5 a124.dscd.akamai.net;::ffff:23.221.212.203;::ffff:23.221.212.202;C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +354300x800000000000000014786Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:15:52.237{8223a6b9-2192-6902-1c04-000000002b00}11488C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50632-false52.123.129.14-443https +22542200x800000000000000014787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:15:52.209{8223a6b9-2192-6902-1c04-000000002b00}11488ecs.office.com0type: 5 ecs.office.trafficmanager.net;type: 5 dual-s-0005-office.config.skype.com;type: 5 ecs-office.s-0005.dual-s-msedge.net;type: 5 s-0005.dual-s-msedge.net;::ffff:52.123.129.14;::ffff:52.123.128.14;C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exesoc101win11\Administrator +354300x800000000000000014788Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:15:54.613{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50633-false20.42.65.91-443https +354300x800000000000000014789Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:16:03.146{8223a6b9-1385-6902-2801-000000002b00}4888C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50634-false13.107.137.11-443https +154100x800000000000000014790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:25.387{8223a6b9-21b9-6902-1e04-000000002b00}1564C:\Windows\System32\appidcertstorecheck.exe10.0.26100.3037 (WinBuild.160101.0800)AppID Certificate Store Verification TaskMicrosoft® Windows® Operating SystemMicrosoft CorporationAppIDCertstoreCheck.exe"C:\WINDOWS\system32\appidcertstorecheck.exe"C:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=B14AE123FE8C9391063FCA6A27E80B1C,SHA256=442A6A8546B9B2EE4159760B04E8FD33E6F3310C92C66709C27AFA47C8653808,IMPHASH=5472981C962523EC2271513DBA5F1CCC{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:48.186{8223a6b9-21d0-6902-2004-000000002b00}8524C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe1450.2506.28022.0MoUSO Core Worker ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationMoUSOCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E048EE9A14933FFA4A9C9FC7A8A7F83B,SHA256=B4A080E7ABAC28ADCBB172B53060508457C9CEC25BC339F3DFA0A031CD881737,IMPHASH=D3DBFEDBF38C961BD70D128454E64766{8223a6b9-1393-6902-3901-000000002b00}10328C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvcNT AUTHORITY\SYSTEM +154100x800000000000000014792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:48.252{8223a6b9-21d0-6902-2104-000000002b00}5404C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.Exe"C:\WINDOWS\system32\cmd.exe" /d /c C:\WINDOWS\system32\hpatchmonTask.cmdC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:48.281{8223a6b9-21d0-6902-2204-000000002b00}5936C:\Windows\System32\provtool.exe10.0.26100.3470 (WinBuild.160101.0800)Provisioning package runtime processing toolMicrosoft® Windows® Operating SystemMicrosoft Corporationprovtool"C:\WINDOWS\system32\ProvTool.exe" /turn 5 /source LogonIdleTaskC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=7E4F7E74F10829CB1CDF2BC924D8FF21,SHA256=7909684488BD8A235D655708BB9DE7E8A4861696E3DF12D89C8287860DA40D7A,IMPHASH=CF16AACF6AEF93FA7E23E88838BA2F1F{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:48.297{8223a6b9-21d0-6902-2404-000000002b00}11880C:\Windows\System32\UCPDMgr.exe4.3.0.593133User Choice Protection ManagerMicrosoft® Windows® Operating SystemMicrosoft CorporationUCPDMgr.exe"C:\WINDOWS\system32\UCPDMgr.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=73E9F62520E2CAE04A804A6DCD42A014,SHA256=B5987DA2D84826B80AD74ACD9340EED6D502BA3F0CF69B434D67608CC7988127,IMPHASH=610A622F6677305876B7D5009F927B7A{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:48.322{8223a6b9-21d0-6902-2504-000000002b00}568C:\Windows\System32\Speech_OneCore\common\SpeechModelDownload.exe10.0.26100.3624 (WinBuild.160101.0800)Speech Model Download ExecutableMicrosoft® Windows® Operating SystemMicrosoft CorporationSpeechModelDownload.exe"C:\WINDOWS\system32\speech_onecore\common\SpeechModelDownload.exe"C:\WINDOWS\system32\NT AUTHORITY\NETWORK SERVICE{8223a6b9-1315-6902-e403-000000000000}0x3e40SystemMD5=E64309430E4DA051DECC00508A7AB94F,SHA256=579C133833AFA89A43AB7669A185DEE7C83226EA68B0BF573824ACC54C54911A,IMPHASH=6D2E148506954B93F6EF19515283236F{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:48.338{8223a6b9-21d0-6902-2604-000000002b00}2088C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe -IntegrityCheckC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:48.741{8223a6b9-21d0-6902-2904-000000002b00}8424C:\Windows\System32\tasklist.exe10.0.26100.1 (WinBuild.160101.0800)Lists the current running tasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtasklist.exetasklist /FI "IMAGENAME eq Secure System" /v /FO list C:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=8ADD46C82B40A6F635F1406CF28DABA1,SHA256=62800679C55682F2F5F38B3DF9080D12480BEA78B5B8476EACE9DF014F353B14,IMPHASH=1EC449474B2F8125DB72AC9B593E4CA6{8223a6b9-21d0-6902-2104-000000002b00}5404C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" /d /c C:\WINDOWS\system32\hpatchmonTask.cmdNT AUTHORITY\SYSTEM +13241300x800000000000000014798Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 14:16:48.812{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\speechmodeldownl|3eda1bd364507136\LowerCaseLongPathc:\windows\system32\speech_onecore\common\speechmodeldownload.exeNT AUTHORITY\SYSTEM +13241300x800000000000000014799Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:16:48.812{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\speechmodeldownl|3eda1bd364507136\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000014800Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 14:16:48.812{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\speechmodeldownl|3eda1bd364507136\LinkDate07/14/2057 22:01:03NT AUTHORITY\SYSTEM +13241300x800000000000000014801Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 14:16:48.814{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\speechmodeldownl|3eda1bd364507136\BinProductVersion10.0.26100.3624NT AUTHORITY\SYSTEM +154100x800000000000000014802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:48.884{8223a6b9-21d0-6902-2b04-000000002b00}1856C:\Windows\System32\findstr.exe10.0.26100.1150 (WinBuild.160101.0800)Find String (QGREP) UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationFINDSTR.EXEfindstr /i "Image Name: Secure System" C:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E43DE137E75349CACF2760ABFC338340,SHA256=46BDB9125C43BD3F63C233A7B0D021B04E867C4D19B72DDBCF6E5F2A392014D3,IMPHASH=FAF6C2ABBD03B51B5852A294EAAFC7CE{8223a6b9-21d0-6902-2104-000000002b00}5404C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" /d /c C:\WINDOWS\system32\hpatchmonTask.cmdNT AUTHORITY\SYSTEM +154100x800000000000000014803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:49.139{8223a6b9-21d1-6902-2d04-000000002b00}7080C:\Windows\System32\Defrag.exe10.0.26100.1150 (WinBuild.160101.0800)Disk Defragmenter ModuleWindows Drive OptimizerMicrosoft Corp.Defrag.EXE"C:\WINDOWS\system32\defrag.exe" -p 574 -s 00000000000003CC -b -OnlyPreferred C:C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=15C3C6BE189C71F6634DFB95E758AD5B,SHA256=92444CF8EA0D6C5B610606560194EB5CCE67CF3662D8A774F3DF2F082683595A,IMPHASH=A1CC5447BEB5CDF0C46F628BD6F46BA2{8223a6b9-1316-6902-2900-000000002b00}1396C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMainNT AUTHORITY\SYSTEM +154100x800000000000000014804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:49.344{8223a6b9-21d1-6902-3004-000000002b00}6344C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:49.356{8223a6b9-21d1-6902-3104-000000002b00}6576C:\Windows\System32\cleanmgr.exe10.0.26100.4484 (WinBuild.160101.0800)Disk Space Cleanup Manager for WindowsMicrosoft® Windows® Operating SystemMicrosoft CorporationCLEANMGR.DLL"C:\WINDOWS\system32\cleanmgr.exe" /autocleanstoragesense /d C:C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7BDDC3F3A32C1C332666F7982AB7792D,SHA256=3D1C43E25EB71B55061ED692F4C465586966FF4FB9707E50986AB44131981810,IMPHASH=488595BD443146197CBE6F7EDB89F66A{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:50.267{8223a6b9-21d2-6902-3204-000000002b00}12112C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -pC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:51.637{8223a6b9-21d3-6902-3504-000000002b00}8308C:\Windows\System32\Dism\DismHost.exe10.0.26100.1150 (WinBuild.160101.0800)Dism Host Servicing ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationDismHost.exeC:\Windows\System32\Dism\dismhost.exe {27E9ADD8-BDA2-44A6-BF48-2CB5AC1CF80B}C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=A5CA984A40E37049FDF649BDCBFA5C88,SHA256=D8EADC9DB05FE0A9C06774DB36C7765E7113F17D8464AD0F3EBAFA5B803B3230,IMPHASH=9DDBEC2516241A81664067A928EDBA2E{8223a6b9-21d1-6902-3104-000000002b00}6576C:\Windows\System32\cleanmgr.exe"C:\WINDOWS\system32\cleanmgr.exe" /autocleanstoragesense /d C:soc101win11\Administrator +154100x800000000000000014808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:53.117{8223a6b9-21d5-6902-3704-000000002b00}12036C:\Windows\servicing\TrustedInstaller.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Modules InstallerMicrosoft® Windows® Operating SystemMicrosoft CorporationTrustedInstaller.exeC:\WINDOWS\servicing\TrustedInstaller.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=23CF29D35F32448C19398B91E3C31186,SHA256=C037F1D455B27EF75391EECE7F25711CF3055006FA29C5D872DB4D54FEF0ADE8,IMPHASH=5E159CE7599ACD6CA7EC3122186D5DBC{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:53.175{8223a6b9-21d5-6902-3804-000000002b00}10300C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe10.0.26100.4933 (WinBuild.160101.0800)Windows Modules Installer WorkerMicrosoft® Windows® Operating SystemMicrosoft CorporationTiWorker.exeC:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4933_none_a4edf32577775419\TiWorker.exe -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=749679E003C18036BF998EB9BCE36A63,SHA256=3F42DBAF2BD7AD92577AFB6D47A8F3DC32DCB6A8E52BA7738FAEB31ED197ACDC,IMPHASH=0B85588480DF97BD963732E20722340E{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000014810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:54.299{8223a6b9-21d6-6902-3904-000000002b00}4512C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /ClearActiveNotifications /CV L1T5pfd+k0e87uoF.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-21d0-6902-2004-000000002b00}8524C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +154100x800000000000000014811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:55.504{8223a6b9-21d7-6902-3b04-000000002b00}2540C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:16:56.672{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe1407.2506.11012.0Windows UpdateMicrosoft® Windows® Operating SystemMicrosoft Corporationwuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 1dbe56bc-d31c-4673-bd0b-52f23bb664ae /RunHandlerComServerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=EA98A3ECEF7902605B361FC16D3D8081,SHA256=9C685412986F3939E7A84E62B09E319F4FA5B5C2B7006DE3441F6D4BB0CAC02D,IMPHASH=5FB5459A8931EA77DFAA79FC37CD9756{8223a6b9-21d2-6902-3304-000000002b00}10272C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauservNT AUTHORITY\SYSTEM +11241100x800000000000000014813Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.579{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateCompression.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014814Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.589{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\featurestaging.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014815Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.592{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\updatedeploy.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014816Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.599{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\AppxDeviceInventory.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014817Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.612{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\TurboStack.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014818Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.632{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UAOneSettings.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014819Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.636{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\wcp.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014820Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.676{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\MsixPackageProvisioner.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014821Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.685{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\dpx.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014822Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.701{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\WinREAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014823Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.709{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\ReserveManager.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014824Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.838{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\Mitigation.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000014825Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:16:59.846{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +534500x800000000000000014826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:17:02.906{8223a6b9-2192-6902-1c04-000000002b00}11488C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exesoc101win11\Administrator +154100x800000000000000014827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:17:04.993{8223a6b9-21e0-6902-3d04-000000002b00}2408C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXEC:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\AppXDeploymentExtensions.OneCore.dll,ShellRefreshC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-2181-6902-1904-000000002b00}12164C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +13241300x800000000000000014828Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 14:17:11.915{8223a6b9-21d5-6902-3704-000000002b00}12036C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\EventsCreateSessionNT AUTHORITY\SYSTEM +11241100x800000000000000014829Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:17:12.209{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\GetHelp.exe2025-09-03 14:11:30.312NT AUTHORITY\SYSTEM +11241100x800000000000000014830Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:17:12.209{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Users\Administrator\AppData\Local\Microsoft\WindowsApps\Microsoft.GetHelp_8wekyb3d8bbwe\GetHelp.exe2025-10-29 14:17:12.209NT AUTHORITY\SYSTEM +13241300x800000000000000014831Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 14:17:17.468{8223a6b9-21d5-6902-3704-000000002b00}12036C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\Events(Empty)NT AUTHORITY\SYSTEM +154100x800000000000000014832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:17:18.212{8223a6b9-21ee-6902-3e04-000000002b00}2772C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exe10.0.26100.6893 (WinBuild.160101.0800)Windows Modules Installer WorkerMicrosoft® Windows® Operating SystemMicrosoft CorporationTiWorker.exeC:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exe -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=BAA8104ECBAA635AA0CDDF7B486AA1E6,SHA256=FB4FA48B149A3D9B060921FD37E0EC8154D3A1EF731F94E8925AA56DFD045823,IMPHASH=042B1C6A348A0ADDB5A8617349DA1006{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +11241100x800000000000000014833Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:17:18.970{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.130.16001.0_x64__8wekyb3d8bbwe\XboxIdp.dll2025-10-29 14:17:18.970NT AUTHORITY\SYSTEM +11241100x800000000000000014834Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:17:18.972{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.130.16001.0_x64__8wekyb3d8bbwe\XboxIdp.exe2025-10-29 14:17:18.972NT AUTHORITY\SYSTEM +11241100x800000000000000014835Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:17:18.976{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.130.16001.0_x64__8wekyb3d8bbwe\XboxIdp.Native.dll2025-10-29 14:17:18.972NT AUTHORITY\SYSTEM +154100x800000000000000014836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:17:28.196{8223a6b9-21f8-6902-3f04-000000002b00}5388C:\Windows\System32\wevtutil.exe10.0.26100.1150 (WinBuild.160101.0800)Windows Event Log UtilityMicrosoft® Windows® Operating SystemMicrosoft Corporationwevtutil.exe"C:\WINDOWS\system32\wevtutil.exe" qe Microsoft-Windows-Sysmon/Operational /c:1 /f:textC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=AF54D4FA49CD679D47064D30BD1B7641,SHA256=0EA582D5A4EB48096B40C2F7A102E465DAEA69C816C8FAEA481B68D8FD0929D5,IMPHASH=9D0B0164498DEE3DA72DF328E7AE8C0B{8223a6b9-1f56-6902-e103-000000002b00}8592C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershellsoc101win11\Administrator +13241300x800000000000000014837Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 14:17:35.313{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tiworker.exe|9742576e53fb7756\LowerCaseLongPathc:\windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\tiworker.exeNT AUTHORITY\SYSTEM +13241300x800000000000000014838Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:17:35.313{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tiworker.exe|9742576e53fb7756\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000014839Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 14:17:35.313{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tiworker.exe|9742576e53fb7756\LinkDate06/02/2054 15:49:48NT AUTHORITY\SYSTEM +13241300x800000000000000014840Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 14:17:35.313{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\tiworker.exe|9742576e53fb7756\BinProductVersion10.0.26100.6893NT AUTHORITY\SYSTEM +13241300x800000000000000014841Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 14:17:35.763{8223a6b9-21d5-6902-3704-000000002b00}12036C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\EventsCreateSessionNT AUTHORITY\SYSTEM +154100x800000000000000014842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:18:06.101{8223a6b9-221e-6902-4104-000000002b00}10388C:\Windows\System32\reg.exe10.0.26100.4484 (WinBuild.160101.0800)Registry Console ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationreg.exe"C:\WINDOWS\system32\reg.exe" add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Audit /v ProcessCreationIncludeCmdLine_Enabled /t REG_DWORD /d 1 /fC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=AB6C6B22FF2F2585DB01ECB18BFC0BE8,SHA256=5CEBCDCCD46D30D8B72D7790A81CC21B523D43680C11062FEB1E497524DAFBD1,IMPHASH=3B322244D4C64F3C932F94E6E3457771{8223a6b9-1f56-6902-e103-000000002b00}8592C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershellsoc101win11\Administrator +154100x800000000000000014843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:18:06.220{8223a6b9-221e-6902-4204-000000002b00}2356C:\Windows\System32\auditpol.exe10.0.26100.3037 (WinBuild.160101.0800)Audit Policy ProgramMicrosoft® Windows® Operating SystemMicrosoft CorporationAUDITPOL.EXE"C:\WINDOWS\system32\auditpol.exe" /set "/subcategory:Process Creation" /success:enableC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0CB01A07EBCBBEDC392F719668941AF4,SHA256=F78A48ACC9B61F4086B74F54DC8F4E8D0139745C4004AF6C98603486D8D210D5,IMPHASH=FA2CFAB845A1096FB0F05EE99677BDD0{8223a6b9-1f56-6902-e103-000000002b00}8592C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershellsoc101win11\Administrator +13241300x800000000000000014844Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 14:18:06.727{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\auditpol.exe|e9c8e2597e13d574\LowerCaseLongPathc:\windows\system32\auditpol.exeNT AUTHORITY\SYSTEM +13241300x800000000000000014845Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:18:06.727{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\auditpol.exe|e9c8e2597e13d574\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000014846Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 14:18:06.727{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\auditpol.exe|e9c8e2597e13d574\LinkDate05/30/1998 04:04:38NT AUTHORITY\SYSTEM +13241300x800000000000000014847Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 14:18:06.727{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\auditpol.exe|e9c8e2597e13d574\BinProductVersion10.0.26100.3037NT AUTHORITY\SYSTEM +154100x800000000000000014848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:49.946{8223a6b9-2285-6902-4804-000000002b00}7736C:\Windows\System32\smartscreen.exe10.0.26100.4652 (WinBuild.160101.0800)Windows Defender SmartScreenMicrosoft® Windows® Operating SystemMicrosoft Corporationsmartscreen.exeC:\Windows\System32\smartscreen.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4B9FD8FEFBA636B66F81E0CDBD12B3DA,SHA256=86530447A3E2B502FE2AC164434B13137E5505A86743A96A091EC18A9377D9D9,IMPHASH=C84171DF6E7F087EA4E625CCCE2AB167{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x800000000000000014849Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 14:19:52.390{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpdefendercorese|74e9f00b2ce29d33\LowerCaseLongPathc:\programdata\microsoft\windows defender\platform\4.18.25090.3009-0\mpdefendercoreservice.exeNT AUTHORITY\SYSTEM +13241300x800000000000000014850Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:19:52.390{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpdefendercorese|74e9f00b2ce29d33\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000014851Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 14:19:52.390{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpdefendercorese|74e9f00b2ce29d33\LinkDate11/30/2018 21:37:47NT AUTHORITY\SYSTEM +13241300x800000000000000014852Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 14:19:52.390{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\mpdefendercorese|74e9f00b2ce29d33\BinProductVersion4.18.25090.3009NT AUTHORITY\SYSTEM +154100x800000000000000014853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:53.055{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exesihost.exesoc101win11\Administrator +154100x800000000000000014854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:53.090{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exesihost.exesoc101win11\Administrator +13241300x800000000000000014855Microsoft-Windows-Sysmon/Operationalsoc101win11InvDBSetValue2025-10-29 14:19:53.874{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeBinary DataNT AUTHORITY\SYSTEM +154100x800000000000000014856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:54.006{8223a6b9-228a-6902-4c04-000000002b00}5932C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exesihost.exesoc101win11\Administrator +154100x800000000000000014857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:53.143{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exesihost.exesoc101win11\Administrator +154100x800000000000000014858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.281{8223a6b9-228b-6902-4d04-000000002b00}8136C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --gpu-preferences=WAAAAAAAAADgAAAMAAAAQAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1692,i,17255727092632466820,6042323384861473739,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1684 /prefetch:2C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.290{8223a6b9-228b-6902-4f04-000000002b00}6176C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --gpu-preferences=WAAAAAAAAADgAAAMAAAAQAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1704,i,6243302701757353808,2952567926733770104,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1696 /prefetch:2C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-228a-6902-4c04-000000002b00}5932C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.289{8223a6b9-228b-6902-4e04-000000002b00}3640C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --gpu-preferences=WAAAAAAAAADgAAAMAAAAQAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1684,i,14038764646938993879,566343918937534040,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1676 /prefetch:2C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.291{8223a6b9-228b-6902-5004-000000002b00}272C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --gpu-preferences=WAAAAAAAAADgAAAMAAAAQAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1744,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1736 /prefetch:2C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.348{8223a6b9-228b-6902-5104-000000002b00}4064C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=1968,i,6243302701757353808,2952567926733770104,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1964 /prefetch:3C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-228a-6902-4c04-000000002b00}5932C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.356{8223a6b9-228b-6902-5204-000000002b00}8508C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=1956,i,17255727092632466820,6042323384861473739,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1952 /prefetch:3C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.371{8223a6b9-228b-6902-5304-000000002b00}5688C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=1952,i,14038764646938993879,566343918937534040,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:3C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.418{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=1988,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1980 /prefetch:3C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +254200x800000000000000014866Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:55.935{8223a6b9-228a-6902-4c04-000000002b00}5932C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\Code Cache\wasm\index-dir\temp-index2025-10-29 14:19:55.9212025-10-29 14:19:55.921soc101win11\Administrator +154100x800000000000000014867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:56.031{8223a6b9-228c-6902-5504-000000002b00}12452C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "%%windir%%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:56.157{8223a6b9-228c-6902-5704-000000002b00}12524C:\Windows\System32\reg.exe10.0.26100.4484 (WinBuild.160101.0800)Registry Console ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationreg.exeC:\WINDOWS\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuidC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=AB6C6B22FF2F2585DB01ECB18BFC0BE8,SHA256=5CEBCDCCD46D30D8B72D7790A81CC21B523D43680C11062FEB1E497524DAFBD1,IMPHASH=3B322244D4C64F3C932F94E6E3457771{8223a6b9-228c-6902-5504-000000002b00}12452C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"soc101win11\Administrator +22542200x800000000000000014869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.416{8223a6b9-228a-6902-4c04-000000002b00}5932api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.86.193.81;::ffff:52.206.136.236;::ffff:44.207.65.80;::ffff:52.86.225.235;::ffff:44.220.102.97;::ffff:3.213.0.110;::ffff:75.101.143.244;::ffff:54.80.229.50;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +22542200x800000000000000014870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.496{8223a6b9-2289-6902-4b04-000000002b00}4124api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.86.193.81;::ffff:52.206.136.236;::ffff:44.207.65.80;::ffff:52.86.225.235;::ffff:44.220.102.97;::ffff:3.213.0.110;::ffff:75.101.143.244;::ffff:54.80.229.50;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +22542200x800000000000000014871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.497{8223a6b9-2289-6902-4a04-000000002b00}472api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.86.193.81;::ffff:52.206.136.236;::ffff:44.207.65.80;::ffff:52.86.225.235;::ffff:44.220.102.97;::ffff:3.213.0.110;::ffff:75.101.143.244;::ffff:54.80.229.50;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +22542200x800000000000000014872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:55.499{8223a6b9-2289-6902-4904-000000002b00}3616api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.86.193.81;::ffff:52.206.136.236;::ffff:44.207.65.80;::ffff:52.86.225.235;::ffff:44.220.102.97;::ffff:3.213.0.110;::ffff:75.101.143.244;::ffff:54.80.229.50;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +13241300x800000000000000014873Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 14:19:56.804{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500_Classes\cursor\shell\open\command\(Default)"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" "--open-url" "--" "%%1"soc101win11\Administrator +154100x800000000000000014874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:57.180{8223a6b9-228d-6902-5804-000000002b00}12712C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=Anysphere.Cursor --app-path="C:\Users\research\AppData\Local\Programs\cursor\resources\app" --enable-sandbox --enable-blink-features=HighlightAPI --force-gpu-mem-available-mb=1024 --disable-blink-features=FontMatchingCTMigration, --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1761743627039869 --launch-time-ticks=3970127585 --field-trial-handle=3128,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3124 --vscode-window-config=vscode:4d34ea72-4f58-4320-87f7-7061cf400c71 /prefetch:1C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:57.577{8223a6b9-228d-6902-5904-000000002b00}12784C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=Anysphere.Cursor --app-path="C:\Users\research\AppData\Local\Programs\cursor\resources\app" --enable-sandbox --enable-blink-features=HighlightAPI --force-gpu-mem-available-mb=1024 --disable-blink-features=FontMatchingCTMigration, --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1761743627039869 --launch-time-ticks=3970515546 --field-trial-handle=3600,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3592 --vscode-window-config=vscode:a2b47c02-1ce7-41ce-8ca1-3e6e007695da /prefetch:1C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +354300x800000000000000014876Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:55.476{8223a6b9-228a-6902-4c04-000000002b00}5932C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50681-false52.86.193.81ec2-52-86-193-81.compute-1.amazonaws.com443https +354300x800000000000000014877Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:55.593{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50682-false52.86.193.81ec2-52-86-193-81.compute-1.amazonaws.com443https +354300x800000000000000014878Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:55.593{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50683-false52.86.193.81ec2-52-86-193-81.compute-1.amazonaws.com443https +354300x800000000000000014879Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:55.605{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50684-false52.86.193.81ec2-52-86-193-81.compute-1.amazonaws.com443https +154100x800000000000000014880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:57.632{8223a6b9-228d-6902-5a04-000000002b00}12800C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=Anysphere.Cursor --app-path="C:\Users\research\AppData\Local\Programs\cursor\resources\app" --enable-sandbox --enable-blink-features=HighlightAPI --force-gpu-mem-available-mb=1024 --disable-blink-features=FontMatchingCTMigration, --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-epoch=-1761743627039869 --launch-time-ticks=3970566015 --field-trial-handle=3744,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3740 --vscode-window-config=vscode:9ed72a0d-2c5c-4f1b-ba10-7ae70bf5cdb5 /prefetch:1C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +254200x800000000000000014881Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.699{8223a6b9-228a-6902-4c04-000000002b00}5932C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\da643a01-5692-4ff5-8c3e-c013ffcc9432.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.672soc101win11\Administrator +154100x800000000000000014882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:57.678{8223a6b9-228d-6902-5b04-000000002b00}12820C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --app-user-model-id=Anysphere.Cursor --app-path="C:\Users\research\AppData\Local\Programs\cursor\resources\app" --enable-sandbox --enable-blink-features=HighlightAPI --force-gpu-mem-available-mb=1024 --disable-blink-features=FontMatchingCTMigration, --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-epoch=-1761743627039869 --launch-time-ticks=3970602646 --field-trial-handle=3872,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3868 --vscode-window-config=vscode:dd54d333-3026-4c23-9111-247c87c55be5 /prefetch:1C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +254200x800000000000000014883Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.731{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\24a39a0c-562b-4ed2-a826-f26bf9417406.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.725soc101win11\Administrator +254200x800000000000000014884Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.731{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\88579158-acda-4d32-b369-1c45e1c2c037.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.725soc101win11\Administrator +254200x800000000000000014885Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.731{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\8ff5d8cc-ab68-4cbd-8b48-41e235158d4c.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.725soc101win11\Administrator +254200x800000000000000014886Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.733{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\c42c5f14-c1a3-42f7-97a3-70c3e12ab17c.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.727soc101win11\Administrator +254200x800000000000000014887Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.745{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\34e34756-a656-42a2-9281-83d0d1864f05.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.725soc101win11\Administrator +254200x800000000000000014888Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.747{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\660e2e6d-55bd-40e4-925b-a6f22dbe1a64.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.728soc101win11\Administrator +254200x800000000000000014889Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.853{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\660e2e6d-55bd-40e4-925b-a6f22dbe1a64.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.673soc101win11\Administrator +254200x800000000000000014890Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.853{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\8ff5d8cc-ab68-4cbd-8b48-41e235158d4c.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.673soc101win11\Administrator +254200x800000000000000014891Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:57.853{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\c42c5f14-c1a3-42f7-97a3-70c3e12ab17c.tmp2025-10-29 14:19:57.6732025-10-29 14:19:57.673soc101win11\Administrator +354300x800000000000000014892Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.022{8223a6b9-228b-6902-5104-000000002b00}4064C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain52163-false172.16.143.2-53domain +354300x800000000000000014893Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.034{8223a6b9-228b-6902-5204-000000002b00}8508C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain60563-false172.16.143.2-53domain +354300x800000000000000014894Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.051{8223a6b9-228b-6902-5204-000000002b00}8508C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain59974-false172.16.143.2-53domain +354300x800000000000000014895Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.077{8223a6b9-228b-6902-5304-000000002b00}5688C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain64975-false172.16.143.2-53domain +354300x800000000000000014896Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.078{8223a6b9-228b-6902-5304-000000002b00}5688C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain57128-false172.16.143.2-53domain +354300x800000000000000014897Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.080{8223a6b9-228b-6902-5104-000000002b00}4064C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain59187-false172.16.143.2-53domain +354300x800000000000000014898Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.168{8223a6b9-228b-6902-5304-000000002b00}5688C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50685-false104.18.13.243-443https +354300x800000000000000014899Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.190{8223a6b9-228b-6902-5104-000000002b00}4064C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50687-false104.18.13.243-443https +354300x800000000000000014900Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:57.190{8223a6b9-228b-6902-5204-000000002b00}8508C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50686-false104.18.13.243-443https +254200x800000000000000014901Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:59.745{8223a6b9-228b-6902-5204-000000002b00}8508C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\Network\ef241cb7-0e35-4ed3-ad67-92a6007b58fc.tmp2025-10-29 14:19:59.7112025-10-29 14:19:59.730soc101win11\Administrator +254200x800000000000000014902Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:19:59.745{8223a6b9-228b-6902-5304-000000002b00}5688C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\Network\106a0eb3-fa4b-4a6b-9aae-7982580222e5.tmp2025-10-29 14:19:59.7112025-10-29 14:19:59.732soc101win11\Administrator +534500x800000000000000014903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:59.756{8223a6b9-228b-6902-5204-000000002b00}8508C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:59.758{8223a6b9-228b-6902-5104-000000002b00}4064C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:59.762{8223a6b9-228b-6902-5304-000000002b00}5688C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:59.799{8223a6b9-228b-6902-4f04-000000002b00}6176C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:59.807{8223a6b9-228b-6902-4e04-000000002b00}3640C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:59.814{8223a6b9-228b-6902-4d04-000000002b00}8136C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:19:59.854{8223a6b9-2289-6902-4a04-000000002b00}472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000014910Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:58.753{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain59348-false172.16.143.2-53domain +354300x800000000000000014911Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:58.754{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain51895-false172.16.143.2-53domain +534500x800000000000000014912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:00.022{8223a6b9-228a-6902-4c04-000000002b00}5932C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:00.024{8223a6b9-2289-6902-4b04-000000002b00}4124C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:00.112{8223a6b9-228d-6902-5b04-000000002b00}12820C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000014915Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:19:58.923{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50688-false104.18.12.243-443https +11241100x800000000000000014916Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:20:00.822{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Local\cursor-updater\pending\temp-Cursor Setup 0.45.14 - Build 250219jnihavxsz.exe2025-10-29 14:20:00.821soc101win11\Administrator +534500x800000000000000014917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:00.889{8223a6b9-228d-6902-5a04-000000002b00}12800C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000014918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:01.533{8223a6b9-228d-6902-5904-000000002b00}12784C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +154100x800000000000000014919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:02.163{8223a6b9-2292-6902-5d04-000000002b00}13096C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=3800,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:8C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:02.189{8223a6b9-2292-6902-5e04-000000002b00}13108C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=3576,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:8C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:02.210{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4040,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:8C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:03.210{8223a6b9-2293-6902-6004-000000002b00}13276C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "wsl.exe -l -q"C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +354300x800000000000000014923Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.004{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain51401-false172.16.143.2-53domain +354300x800000000000000014924Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.005{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain59376-false172.16.143.2-53domain +354300x800000000000000014925Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.304{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50692-false76.76.21.21-443https +354300x800000000000000014926Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.304{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50690-false76.76.21.21-443https +354300x800000000000000014927Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.304{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50691-false76.76.21.21-443https +354300x800000000000000014928Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.304{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50689-false76.76.21.21-443https +354300x800000000000000014929Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.363{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain61694-false172.16.143.2-53domain +354300x800000000000000014930Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.364{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain56483-false172.16.143.2-53domain +354300x800000000000000014931Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:02.458{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50693-false44.207.65.80-443https +22542200x800000000000000014932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:03.056{8223a6b9-228b-6902-5404-000000002b00}11992wpad1460-C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +154100x800000000000000014933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:04.620{8223a6b9-2294-6902-6204-000000002b00}4416C:\Windows\System32\wsl.exe10.0.26100.4202 (WinBuild.160101.0800)Windows Subsystem for LinuxMicrosoft® Windows® Operating SystemMicrosoft Corporationwsl.exeC:\WINDOWS\System32\wsl.exe --statusC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5CCB9097709FABBC0384627CE42CA713,SHA256=FD798872D95FA936796A7F8F239C95436FA36F3663F81CA3D1B68C24E8E7CAF9,IMPHASH=0C10F678C215A3D65052DD9AE1DC6571{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:04.891{8223a6b9-2294-6902-6404-000000002b00}6800C:\Program Files\WSL\wsl.exe2.3.26.0Windows Subsystem for LinuxWindows Subsystem for LinuxMicrosoft Corporationwsl.exeC:\WINDOWS\System32\wsl.exe --statusC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CD2052559D00EC4FC572BFB19D5B93C9,SHA256=D831ABA07CF0F159F99E5A749BD31C4CBBBA26FD6D582A2F0095164C583FEF26,IMPHASH=44988ACB2AD729F827AD11A70759F972{8223a6b9-2294-6902-6204-000000002b00}4416C:\Windows\System32\wsl.exeC:\WINDOWS\System32\wsl.exe --statussoc101win11\Administrator +254200x800000000000000014935Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:20:05.183{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\c393a768-0754-4d78-b8d3-a251f8a15a89.tmp2025-10-29 14:19:57.6732025-10-29 14:20:05.168soc101win11\Administrator +254200x800000000000000014936Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:20:05.730{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\76981974-07ac-4127-9884-a7962875a163.tmp2025-10-29 14:19:57.6732025-10-29 14:20:05.726soc101win11\Administrator +354300x800000000000000014937Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:04.659{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain56304-false172.16.143.2-53domain +354300x800000000000000014938Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:04.659{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain62743-false172.16.143.2-53domain +22542200x800000000000000014939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:04.979{8223a6b9-228b-6902-5404-000000002b00}11992az764295.vo.msecnd.net9003type: 5 sni1gl.wpc.zetacdn.net;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000014940Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:04.979{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain55223-false172.16.143.2-53domain +354300x800000000000000014941Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:04.980{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain57073-false172.16.143.2-53domain +154100x800000000000000014942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:06.563{8223a6b9-2296-6902-6504-000000002b00}12272C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exe"C:\Program Files\Git\cmd\git.exe" --versionC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4040,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:8soc101win11\Administrator +22542200x800000000000000014943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:05.129{8223a6b9-228b-6902-5404-000000002b00}11992az764295.vo.msecnd.net9003-C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +154100x800000000000000014944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:07.144{8223a6b9-2297-6902-6704-000000002b00}7664C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe --versionC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-2296-6902-6504-000000002b00}12272C:\Program Files\Git\cmd\git.exe"C:\Program Files\Git\cmd\git.exe" --versionsoc101win11\Administrator +254200x800000000000000014945Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:20:07.477{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\Network\08fd793e-2852-4ef1-b00f-aa28c7e75312.tmp2025-10-29 14:19:59.7112025-10-29 14:20:07.459soc101win11\Administrator +254200x800000000000000014946Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:20:07.707{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\91ffe4c9-57c4-4ca8-a877-e953f4179938.tmp2025-10-29 14:19:57.6732025-10-29 14:20:07.683soc101win11\Administrator +154100x800000000000000014947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:09.088{8223a6b9-2299-6902-6804-000000002b00}9944C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "git config --get remote.origin.url"C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4040,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:8soc101win11\Administrator +154100x800000000000000014948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:09.196{8223a6b9-2299-6902-6a04-000000002b00}12672C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit config --get remote.origin.urlC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-2299-6902-6804-000000002b00}9944C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "git config --get remote.origin.url"soc101win11\Administrator +154100x800000000000000014949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:09.234{8223a6b9-2299-6902-6b04-000000002b00}7532C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe config --get remote.origin.urlC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-2299-6902-6a04-000000002b00}12672C:\Program Files\Git\cmd\git.exegit config --get remote.origin.urlsoc101win11\Administrator +22542200x800000000000000014950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:09.463{8223a6b9-2292-6902-5f04-000000002b00}13128api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.206.136.236;::ffff:52.86.225.235;::ffff:75.101.143.244;::ffff:52.86.193.81;::ffff:44.220.102.97;::ffff:44.207.65.80;::ffff:54.80.229.50;::ffff:3.213.0.110;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000014951Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.593{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50695-false52.206.136.236-443https +354300x800000000000000014952Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.599{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50696-false52.206.136.236-443https +354300x800000000000000014953Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.605{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50697-false52.206.136.236-443https +354300x800000000000000014954Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.605{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50698-false52.206.136.236-443https +354300x800000000000000014955Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.605{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50701-false52.206.136.236-443https +354300x800000000000000014956Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.608{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50702-false52.206.136.236-443https +354300x800000000000000014957Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.612{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50699-false52.206.136.236-443https +354300x800000000000000014958Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.619{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50703-false52.206.136.236-443https +354300x800000000000000014959Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:09.619{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50700-false52.206.136.236-443https +22542200x800000000000000014960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:10.074{8223a6b9-2292-6902-5f04-000000002b00}13128api4.cursor.sh0::ffff:35.71.162.24;::ffff:13.248.241.7;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000014961Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:10.194{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50704-false35.71.162.24a5ed1f62d2db4427e.awsglobalaccelerator.com443https +354300x800000000000000014962Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:10.340{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain50705-false20.189.173.11-443https +154100x800000000000000014963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:13.695{8223a6b9-229d-6902-6c04-000000002b00}6804C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:13.786{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginC:\Program Files (x86)\Microsoft\Edge\Application\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-229d-6902-6c04-000000002b00}6804C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +13241300x800000000000000014965Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 14:20:14.568{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\git.exe|52b02c4a618839ad\LowerCaseLongPathc:\program files\git\cmd\git.exeNT AUTHORITY\SYSTEM +13241300x800000000000000014966Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:20:14.568{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\git.exe|52b02c4a618839ad\Publisherthe git development communityNT AUTHORITY\SYSTEM +13241300x800000000000000014967Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 14:20:14.568{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\git.exe|52b02c4a618839ad\LinkDate10/22/2024 20:22:36NT AUTHORITY\SYSTEM +13241300x800000000000000014968Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 14:20:14.568{8223a6b9-1371-6902-1601-000000002b00}11820C:\WINDOWS\system32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\git.exe|52b02c4a618839ad\BinProductVersion2.47.0.0NT AUTHORITY\SYSTEM +154100x800000000000000014969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:14.590{8223a6b9-229e-6902-6e04-000000002b00}11472C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=141.0.7390.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=141.0.3537.99 --initial-client-data=0x268,0x26c,0x270,0x264,0x278,0x7ff86586a9d8,0x7ff86586a9e4,0x7ff86586a9f0C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +154100x800000000000000014970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:14.779{8223a6b9-229e-6902-7004-000000002b00}6624C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1808,i,6165480098656481624,8053200336513989300,262144 --field-trial-handle=2232,i,9651194223934910714,13708373865746267889,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +154100x800000000000000014971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:14.780{8223a6b9-229e-6902-7104-000000002b00}2116C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2044,i,18409095786224461061,1221555231694790860,524288 --field-trial-handle=2232,i,9651194223934910714,13708373865746267889,262144 --variations-seed-version --mojo-platform-channel-handle=1288 /prefetch:11C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +154100x800000000000000014972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:14.769{8223a6b9-229e-6902-6f04-000000002b00}5668C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\elevation_service.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationelevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\elevation_service.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=7302DEEFE6AFFECE4FEDD6BD2A09DD33,SHA256=18883285D6307DB81826C14DF1BF2B1B5333B4D64A1051EBF9C90B6363E383A0,IMPHASH=1B99EABC90625B9B18980E9BB386F7FD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000014973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:14.823{8223a6b9-229e-6902-7204-000000002b00}4524C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --startup-read-main-dll --metrics-shmem-handle=2240,i,8186760223309231007,8954720880952137449,524288 --field-trial-handle=2232,i,9651194223934910714,13708373865746267889,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:13C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +154100x800000000000000014974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:16.118{8223a6b9-22a0-6902-7904-000000002b00}12196C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe1.3.185.27Microsoft Edge UpdateMicrosoft Edge UpdateMicrosoft Corporationmsedgeupdate.dll"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource schedulerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=733ADFA5081059A471115660D7C11EBB,SHA256=F3C7BAB6A7652E58719CE96EDFEFF483316668BD48D912694F1175FB397B86FD,IMPHASH=CD3B2D99C6655A5D4A14E30E380F5BF9{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000014975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:18.931{8223a6b9-22a2-6902-7c04-000000002b00}2664C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=5320,i,11281977887541187944,4246559732713424736,524288 --field-trial-handle=2232,i,9651194223934910714,13708373865746267889,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +154100x800000000000000014976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:18.934{8223a6b9-22a2-6902-7d04-000000002b00}10404C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=5324,i,11467052050084294740,8281396064802273365,524288 --field-trial-handle=2232,i,9651194223934910714,13708373865746267889,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +154100x800000000000000014977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:19.517{8223a6b9-22a3-6902-7f04-000000002b00}1168C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe141.0.3537.99Microsoft EdgeMicrosoft EdgeMicrosoft Corporationmsedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=6936,i,493647022680565690,17742341481145318408,524288 --field-trial-handle=2232,i,9651194223934910714,13708373865746267889,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:14C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=2CB9DCC4B733F88A7155F0D63AC634B8,SHA256=151A7E879BB4B534AC95D61B982C899CFF3DC01EDC2575FC8D71B3B9B44C8834,IMPHASH=4C2A67DEB457B8BF9F317820EE11E05D{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +154100x800000000000000014978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:19.858{8223a6b9-22a3-6902-8004-000000002b00}7076C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exe141.0.3537.99PWA Identity Proxy HostMicrosoft EdgeMicrosoft Corporationidentity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=7016,i,17135828739915215231,12343553089606562675,524288 --field-trial-handle=2232,i,9651194223934910714,13708373865746267889,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:14C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=AA935F5F935F702D34CB7C975AA159D0,SHA256=501C9EB3F5D3F10A337C3E6D3D1109635AFD193CB012F78A093BD43307EF1009,IMPHASH=55C92788DC86824DCF85360071E9FCAC{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +154100x800000000000000014979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:19.926{8223a6b9-22a3-6902-8104-000000002b00}4660C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exe141.0.3537.99PWA Identity Proxy HostMicrosoft EdgeMicrosoft Corporationidentity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --skip-read-main-dll --metrics-shmem-handle=7016,i,17135828739915215231,12343553089606562675,524288 --field-trial-handle=2232,i,9651194223934910714,13708373865746267889,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:14C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=AA935F5F935F702D34CB7C975AA159D0,SHA256=501C9EB3F5D3F10A337C3E6D3D1109635AFD193CB012F78A093BD43307EF1009,IMPHASH=55C92788DC86824DCF85360071E9FCAC{8223a6b9-229d-6902-6d04-000000002b00}12612C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://cursor.com/loginDeepControl?challenge=E9EjtONi4iaHVCOIED5l7-UsZ6sF9CAu76r48uqSqs0&uuid=a2ff8ad4-590c-4633-84ba-c959199302c5&mode=loginsoc101win11\Administrator +254200x800000000000000014980Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:20:21.140{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\CachedData\001668006cc714afd397f4ef0d52862f5a095530\chrome\js\index-dir\temp-index2025-10-29 14:19:56.0292025-10-29 14:20:21.129soc101win11\Administrator +22542200x800000000000000014981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:22.388{8223a6b9-229e-6902-7104-000000002b00}2116wpad1460-C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +254200x800000000000000014982Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:20:25.103{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\Network\b2d2a4f2-bf75-4a1f-8bcc-68dbedca3a9f.tmp2025-10-29 14:19:59.7112025-10-29 14:20:25.080soc101win11\Administrator +154100x800000000000000014983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:28.037{8223a6b9-22ac-6902-8204-000000002b00}10860C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "git log -n 25 --pretty=format:"%%H<|ENT|><|RY|>%%s<|COM|><|MIT|>" --grep="" -i"C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4040,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:8soc101win11\Administrator +154100x800000000000000014984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:28.149{8223a6b9-22ac-6902-8304-000000002b00}6532C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "for hash in $(git rev-parse --disambiguate=""); do git cat-file -t $hash 2>/dev/null | grep -q '^commit$' && echo $(git log -n 1 --pretty=format:'%%H<|ENT|><|RY|>%%s<|COM|><|MIT|>' $hash); done"C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4040,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:8soc101win11\Administrator +254200x800000000000000014985Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:20:28.286{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\UJDEOO57Z03BF400O63F.temp2025-10-29 14:19:59.9592025-10-29 14:20:28.210soc101win11\Administrator +154100x800000000000000014986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:29.336{8223a6b9-22ad-6902-8604-000000002b00}8352C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit log -n 25 --pretty=format:"%%H<|ENT|><|RY|>%%s<|COM|><|MIT|>" --grep="" -iC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-22ac-6902-8204-000000002b00}10860C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "git log -n 25 --pretty=format:"%H<|ENT|><|RY|>%s<|COM|><|MIT|>" --grep="" -i"soc101win11\Administrator +154100x800000000000000014987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:29.411{8223a6b9-22ad-6902-8704-000000002b00}12568C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe log -n 25 --pretty=format:"%%H<|ENT|><|RY|>%%s<|COM|><|MIT|>" --grep="" -iC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-22ad-6902-8604-000000002b00}8352C:\Program Files\Git\cmd\git.exegit log -n 25 --pretty=format:"%H<|ENT|><|RY|>%s<|COM|><|MIT|>" --grep="" -isoc101win11\Administrator +22542200x800000000000000014988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:27.881{8223a6b9-2292-6902-5f04-000000002b00}13128api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.206.136.236;::ffff:52.86.193.81;::ffff:3.213.0.110;::ffff:54.80.229.50;::ffff:75.101.143.244;::ffff:44.220.102.97;::ffff:52.86.225.235;::ffff:44.207.65.80;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000014989Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:28.159{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16392-false52.206.136.236ec2-52-206-136-236.compute-1.amazonaws.com443https +154100x800000000000000014990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:29.958{8223a6b9-22ad-6902-8804-000000002b00}12588C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4588,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:8C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:30.032{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4560,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:30.636{8223a6b9-22ae-6902-8a04-000000002b00}12420C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "wsl.exe -l -q"C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +154100x800000000000000014993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:31.114{8223a6b9-22af-6902-8c04-000000002b00}6036C:\Windows\System32\wsl.exe10.0.26100.4202 (WinBuild.160101.0800)Windows Subsystem for LinuxMicrosoft® Windows® Operating SystemMicrosoft Corporationwsl.exewsl.exe -l -qC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=5CCB9097709FABBC0384627CE42CA713,SHA256=FD798872D95FA936796A7F8F239C95436FA36F3663F81CA3D1B68C24E8E7CAF9,IMPHASH=0C10F678C215A3D65052DD9AE1DC6571{8223a6b9-22ae-6902-8a04-000000002b00}12420C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "wsl.exe -l -q"soc101win11\Administrator +154100x800000000000000014994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:31.276{8223a6b9-22af-6902-8d04-000000002b00}7228C:\Program Files\WSL\wsl.exe2.3.26.0Windows Subsystem for LinuxWindows Subsystem for LinuxMicrosoft Corporationwsl.exewsl.exe -l -qC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=CD2052559D00EC4FC572BFB19D5B93C9,SHA256=D831ABA07CF0F159F99E5A749BD31C4CBBBA26FD6D582A2F0095164C583FEF26,IMPHASH=44988ACB2AD729F827AD11A70759F972{8223a6b9-22af-6902-8c04-000000002b00}6036C:\Windows\System32\wsl.exewsl.exe -l -qsoc101win11\Administrator +154100x800000000000000014995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:31.688{8223a6b9-22af-6902-8e04-000000002b00}4400C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exe"C:\Program Files\Git\cmd\git.exe" --versionC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4560,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8soc101win11\Administrator +154100x800000000000000014996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:31.840{8223a6b9-22af-6902-9004-000000002b00}5204C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe --versionC:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-22af-6902-8e04-000000002b00}4400C:\Program Files\Git\cmd\git.exe"C:\Program Files\Git\cmd\git.exe" --versionsoc101win11\Administrator +154100x800000000000000014997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:31.928{8223a6b9-22af-6902-9104-000000002b00}11496C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exe"C:\Program Files\Git\cmd\git.exe" rev-parse --show-toplevelC:\Users\Administrator\.cursor-tutor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4560,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8soc101win11\Administrator +154100x800000000000000014998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:32.035{8223a6b9-22b0-6902-9304-000000002b00}10412C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe rev-parse --show-toplevelC:\Users\Administrator\.cursor-tutor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-22af-6902-9104-000000002b00}11496C:\Program Files\Git\cmd\git.exe"C:\Program Files\Git\cmd\git.exe" rev-parse --show-toplevelsoc101win11\Administrator +534500x800000000000000014999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:32.265{8223a6b9-2292-6902-5e04-000000002b00}13108C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +154100x800000000000000015000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:33.181{8223a6b9-22b1-6902-9404-000000002b00}12052C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.ExeC:\WINDOWS\system32\cmd.exe /d /s /c "git config --get remote.origin.url"c:\Users\Administrator\.cursor-tutor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4560,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8soc101win11\Administrator +154100x800000000000000015001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:33.223{8223a6b9-22b1-6902-9504-000000002b00}12920C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exe"C:\Program Files\Git\cmd\git.exe" rev-parse --show-toplevelC:\Users\Administrator\.cursor-tutor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4560,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8soc101win11\Administrator +154100x800000000000000015002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:33.294{8223a6b9-22b1-6902-9804-000000002b00}11632C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit config --get remote.origin.urlc:\Users\Administrator\.cursor-tutor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-22b1-6902-9404-000000002b00}12052C:\Windows\System32\cmd.exeC:\WINDOWS\system32\cmd.exe /d /s /c "git config --get remote.origin.url"soc101win11\Administrator +154100x800000000000000015003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:33.312{8223a6b9-22b1-6902-9904-000000002b00}12880C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe rev-parse --show-toplevelC:\Users\Administrator\.cursor-tutor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-22b1-6902-9504-000000002b00}12920C:\Program Files\Git\cmd\git.exe"C:\Program Files\Git\cmd\git.exe" rev-parse --show-toplevelsoc101win11\Administrator +154100x800000000000000015004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:33.328{8223a6b9-22b1-6902-9a04-000000002b00}12440C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe config --get remote.origin.urlc:\Users\Administrator\.cursor-tutor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-22b1-6902-9804-000000002b00}11632C:\Program Files\Git\cmd\git.exegit config --get remote.origin.urlsoc101win11\Administrator +534500x800000000000000015005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:33.723{8223a6b9-2292-6902-5f04-000000002b00}13128C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015006Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:32.516{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain56321-false172.16.143.2-53domain +354300x800000000000000015007Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:32.516{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain61156-false172.16.143.2-53domain +354300x800000000000000015008Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:32.764{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain54949-false172.16.143.2-53domain +354300x800000000000000015009Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:32.765{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain62811-false172.16.143.2-53domain +22542200x800000000000000015010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:33.568{8223a6b9-22ae-6902-8904-000000002b00}9948api4.cursor.sh0::ffff:35.71.162.24;::ffff:13.248.241.7;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +22542200x800000000000000015011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:33.610{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:75.101.143.244;::ffff:3.213.0.110;::ffff:54.80.229.50;::ffff:52.206.136.236;::ffff:52.86.225.235;::ffff:44.220.102.97;::ffff:52.86.193.81;::ffff:44.207.65.80;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015012Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.820{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16393-false35.71.162.24a5ed1f62d2db4427e.awsglobalaccelerator.com443https +354300x800000000000000015013Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.866{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16394-false75.101.143.244-443https +354300x800000000000000015014Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.896{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16395-false75.101.143.244-443https +354300x800000000000000015015Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.896{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16396-false75.101.143.244-443https +354300x800000000000000015016Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.896{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16397-false75.101.143.244-443https +354300x800000000000000015017Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.896{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16399-false75.101.143.244-443https +354300x800000000000000015018Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.896{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16401-false75.101.143.244-443https +354300x800000000000000015019Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.896{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16402-false75.101.143.244-443https +354300x800000000000000015020Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.896{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16398-false75.101.143.244-443https +354300x800000000000000015021Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:33.897{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16400-false75.101.143.244-443https +354300x800000000000000015022Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:34.169{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16403-false35.71.162.24a5ed1f62d2db4427e.awsglobalaccelerator.com443https +354300x800000000000000015023Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:35.648{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16404-false20.44.10.123-443https +22542200x800000000000000015024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:40.742{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:3.213.0.110;::ffff:44.220.102.97;::ffff:52.86.225.235;::ffff:52.86.193.81;::ffff:44.207.65.80;::ffff:52.206.136.236;::ffff:75.101.143.244;::ffff:54.80.229.50;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015025Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:20:40.961{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16407-false3.213.0.110-443https +254200x800000000000000015026Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:20:49.362{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\CachedData\001668006cc714afd397f4ef0d52862f5a095530\chrome\js\index-dir\temp-index2025-10-29 14:19:56.0292025-10-29 14:20:49.346soc101win11\Administrator +154100x800000000000000015027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:50.602{8223a6b9-22c2-6902-9c04-000000002b00}4884C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe10.0.26100.3323 (WinBuild.160101.0800)Windows PowerShellMicrosoft® Windows® Operating SystemMicrosoft CorporationPowerShell.EXEpowershell.exe -NoProfile -NonInteractive -InputFormat None -Command "Get-AuthenticodeSignature 'C:\Users\Administrator\AppData\Local\cursor-updater\pending\temp-Cursor Setup 0.45.14 - Build 250219jnihavxsz.exe' | ConvertTo-Json -Compress | ForEach-Object { [Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($_)) }"C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=BD542C1197F3B5217B5C5B5C4A25BD0C,SHA256=75F490D70F821AFBBBB28D8AE45FA712C0EF39F73832AF5FF0DF284BEB22A9FC,IMPHASH=AFACF6DC9041114B198160AAB4D0AE77{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +11241100x800000000000000015028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:52.318{8223a6b9-22c2-6902-9c04-000000002b00}4884C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_cvcc1lbr.vsh.ps12025-10-29 14:20:52.318soc101win11\Administrator +11241100x800000000000000015029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:20:55.081{8223a6b9-22c2-6902-9c04-000000002b00}4884C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_2vdlth2c.b2u.ps12025-10-29 14:20:55.081soc101win11\Administrator +254200x800000000000000015030Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:21:12.517{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\Network\eb2225a4-e14b-4efe-9abb-1c8832a71f03.tmp2025-10-29 14:19:59.7112025-10-29 14:21:12.489soc101win11\Administrator +254200x800000000000000015031Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:21:25.126{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\U36N3D01TCCI608UJER9.temp2025-10-29 14:19:59.9592025-10-29 14:21:25.103soc101win11\Administrator +154100x800000000000000015032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:21:25.332{8223a6b9-22e5-6902-9e04-000000002b00}12040C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exe"C:\Program Files\Git\cmd\git.exe" rev-parse --show-toplevelC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4560,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8soc101win11\Administrator +154100x800000000000000015033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:21:26.666{8223a6b9-22e6-6902-a104-000000002b00}12888C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe rev-parse --show-toplevelC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-22e5-6902-9e04-000000002b00}12040C:\Program Files\Git\cmd\git.exe"C:\Program Files\Git\cmd\git.exe" rev-parse --show-toplevelsoc101win11\Administrator +22542200x800000000000000015034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:21:25.515{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:44.193.137.250;::ffff:3.227.54.244;::ffff:54.157.160.145;::ffff:52.86.162.68;::ffff:52.54.113.134;::ffff:35.168.224.220;::ffff:44.217.67.48;::ffff:52.207.119.68;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015035Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:21:25.569{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16409-false44.193.137.250-443https +254200x800000000000000015036Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:21:45.624{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\CachedData\001668006cc714afd397f4ef0d52862f5a095530\chrome\js\index-dir\temp-index2025-10-29 14:19:56.0292025-10-29 14:21:45.581soc101win11\Administrator +13241300x800000000000000015037Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 14:21:52.319{8223a6b9-21d5-6902-3704-000000002b00}12036C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\Events(Empty)NT AUTHORITY\SYSTEM +154100x800000000000000015038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:21:55.387{8223a6b9-2303-6902-a204-000000002b00}13188C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe24111460bf2loz1CursorCursorCursor AI, Inc.-"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5549 --gpu-device-id=1029 --gpu-sub-system-id=67442093 --gpu-revision=0 --gpu-driver-version=9.17.7.4 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --gpu-preferences=WAAAAAAAAADoAAAMAAAAQAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=6468,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8C:\Users\research\AppData\Local\Programs\cursor\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=687ABF6542D73C42DA493FAFBA381CD5,SHA256=70AC2AFBF023230C2460FB4B0924EA863BFCB002714CBFB896D8E956FF4DC342,IMPHASH=EEA21D00618BBFE564316E536D300F50{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" soc101win11\Administrator +534500x800000000000000015039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:21:55.545{8223a6b9-2303-6902-a204-000000002b00}13188C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +11241100x800000000000000015040Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:21:58.935{8223a6b9-21d8-6902-3c04-000000002b00}1928C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exeC:\Windows\SystemTemp\{A6681C8E-2DD6-4398-AACB-94F9FE67CFF9}\ssshim.dll2025-10-29 14:21:58.935NT AUTHORITY\SYSTEM +13241300x800000000000000015041Microsoft-Windows-Sysmon/Operationalsoc101win11Tamper-WinlogonSetValue2025-10-29 14:22:00.640{8223a6b9-21d5-6902-3704-000000002b00}12036C:\WINDOWS\servicing\TrustedInstaller.exeHKLM\System\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller\EventsCreateSessionNT AUTHORITY\SYSTEM +22542200x800000000000000015042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:22:31.868{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:18.211.186.168;::ffff:52.201.191.150;::ffff:54.162.117.12;::ffff:34.202.221.223;::ffff:44.220.102.97;::ffff:3.220.56.153;::ffff:34.231.135.113;::ffff:44.212.108.12;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015043Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:22:31.929{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16413-false18.211.186.168-443https +22542200x800000000000000015044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:23:31.495{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.201.191.150;::ffff:3.220.56.153;::ffff:44.212.108.12;::ffff:54.162.117.12;::ffff:18.211.186.168;::ffff:34.202.221.223;::ffff:34.231.135.113;::ffff:44.220.102.97;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015045Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:23:31.636{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16415-false52.201.191.150ec2-52-201-191-150.compute-1.amazonaws.com443https +22542200x800000000000000015046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:24:31.574{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:98.86.74.37;::ffff:52.5.253.80;::ffff:3.215.148.45;::ffff:13.216.152.172;::ffff:35.169.241.50;::ffff:98.82.143.81;::ffff:54.162.117.12;::ffff:18.233.125.87;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015047Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:24:31.670{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16419-false98.86.74.37ec2-98-86-74-37.compute-1.amazonaws.com443https +154100x800000000000000015048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:24:57.264{8223a6b9-23b9-6902-a304-000000002b00}3652C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000015049Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.860{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateCompression.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015050Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.860{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\featurestaging.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015051Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.860{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\updatedeploy.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015052Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.876{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\AppxDeviceInventory.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015053Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.876{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\TurboStack.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015054Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.892{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UAOneSettings.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015055Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.892{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\wcp.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015056Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.924{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\MsixPackageProvisioner.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015057Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.942{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\dpx.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015058Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.952{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\WinREAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015059Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.957{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\ReserveManager.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015060Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.961{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\Mitigation.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +11241100x800000000000000015061Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:26.967{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\bd14d107061d4dedbfb9bbde796b7ad3\Metadata\UpdateAgent.dll2025-10-11 21:42:08.000NT AUTHORITY\SYSTEM +154100x800000000000000015062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:30.295{8223a6b9-23da-6902-a504-000000002b00}9668C:\Windows\System32\UIEOrchestrator.exe-----C:\WINDOWS\System32\UIEOrchestrator.exe /StartServer -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=67EC4745AE66DB0F157BFFDF4DBED3EF,SHA256=0AC38DD6AC47808487B401BC87FA984AADDF558AC9118E9290C6A2A81C560EA8,IMPHASH=74AB2C7F85AC6BE882524A9D7D8063E9{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000015063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:31.041{8223a6b9-23db-6902-a604-000000002b00}12808C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /NotificationType Reboot_Engaged /FormFactor Passive /CV L1T5pfd+k0e87uoF.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-21d0-6902-2004-000000002b00}8524C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +13241300x800000000000000015064Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:25:31.174{8223a6b9-1327-6902-af00-000000002b00}7368C:\WINDOWS\Explorer.EXEHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Control Panel\NotifyIconSettings\14756299155767351579\PublisherMicrosoft Windowssoc101win11\Administrator +22542200x800000000000000015065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:31.046{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:98.86.74.37;::ffff:54.162.117.12;::ffff:18.233.125.87;::ffff:13.216.152.172;::ffff:98.82.143.81;::ffff:52.5.253.80;::ffff:35.169.241.50;::ffff:3.215.148.45;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015066Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:25:31.224{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16425-false98.86.74.37ec2-98-86-74-37.compute-1.amazonaws.com443https +354300x800000000000000015067Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:25:31.552{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16426-false98.86.74.37ec2-98-86-74-37.compute-1.amazonaws.com443https +354300x800000000000000015068Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:25:31.556{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16427-false98.86.74.37ec2-98-86-74-37.compute-1.amazonaws.com443https +354300x800000000000000015069Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:25:32.968{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain64026-false172.16.143.2-53domain +354300x800000000000000015070Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:25:32.969{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain62330-false172.16.143.2-53domain +354300x800000000000000015071Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:25:33.127{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain59449-false172.16.143.2-53domain +354300x800000000000000015072Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:25:33.128{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain65132-false172.16.143.2-53domain +22542200x800000000000000015073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:40.982{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.204.102.74;::ffff:3.224.55.137;::ffff:35.168.224.3;::ffff:44.197.36.2;::ffff:34.235.74.153;::ffff:44.217.218.65;::ffff:98.90.130.106;::ffff:3.214.104.99;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015074Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:25:41.053{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16428-false52.204.102.74ec2-52-204-102-74.compute-1.amazonaws.com443https +154100x800000000000000015075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:45.644{8223a6b9-23e9-6902-aa04-000000002b00}2756C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe1407.2506.11012.0Windows UpdateMicrosoft® Windows® Operating SystemMicrosoft Corporationwuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 3cd95fc7-d559-467b-a933-32d343d21397 /RunHandlerComServerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=EA98A3ECEF7902605B361FC16D3D8081,SHA256=9C685412986F3939E7A84E62B09E319F4FA5B5C2B7006DE3441F6D4BB0CAC02D,IMPHASH=5FB5459A8931EA77DFAA79FC37CD9756{8223a6b9-21d2-6902-3304-000000002b00}10272C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauservNT AUTHORITY\SYSTEM +11241100x800000000000000015076Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:25:46.091{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\Install\Windows-KB890830-x64-V5.136.exe2025-10-29 14:25:46.091NT AUTHORITY\SYSTEM +154100x800000000000000015077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:46.923{8223a6b9-23ea-6902-ae04-000000002b00}8384C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000015078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:46.834{8223a6b9-23ea-6902-ad04-000000002b00}6376C:\Windows\SoftwareDistribution\Download\Install\Windows-KB890830-x64-V5.136.exe5.136.25100.1002 (cc04db6a47b0a9743a6604dbcfae224932855c19)Microsoft Windows Malicious Software Removal Tool (KB890830)Malicious Software Removal ToolMicrosoft Corporationmrtstub.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\Windows-KB890830-x64-V5.136.exe" /Q /WC:\WINDOWS\SoftwareDistribution\Download\Install\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4127D74B90238C0404AD10B1BB5EFEBF,SHA256=09AE8CD4D0517EE72F3B3E6A9A6C6C7C175A788713B6D250125EEAB2934FFCAF,IMPHASH=F15CF2504E08F37FB9E340373525A112{8223a6b9-23e9-6902-aa04-000000002b00}2756C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId 3cd95fc7-d559-467b-a933-32d343d21397 /RunHandlerComServerNT AUTHORITY\SYSTEM +154100x800000000000000015079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:47.545{8223a6b9-23eb-6902-af04-000000002b00}6636C:\Windows\System32\UIEOrchestrator.exe-----C:\WINDOWS\System32\UIEOrchestrator.exe /StartServer -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=67EC4745AE66DB0F157BFFDF4DBED3EF,SHA256=0AC38DD6AC47808487B401BC87FA984AADDF558AC9118E9290C6A2A81C560EA8,IMPHASH=74AB2C7F85AC6BE882524A9D7D8063E9{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000015080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:48.398{8223a6b9-23ec-6902-b004-000000002b00}7284C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /NotificationType Reboot_Engaged /FormFactor Passive /CV FDslsuw6lEuUlbVM.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-21d0-6902-2004-000000002b00}8524C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +13241300x800000000000000015081Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:25:48.529{8223a6b9-1327-6902-af00-000000002b00}7368C:\WINDOWS\Explorer.EXEHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Control Panel\NotifyIconSettings\14756299155767351579\PublisherMicrosoft Windowssoc101win11\Administrator +11241100x800000000000000015082Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:25:49.562{8223a6b9-23ea-6902-ad04-000000002b00}6376C:\WINDOWS\SoftwareDistribution\Download\Install\Windows-KB890830-x64-V5.136.exeC:\Windows\System32\MRT.exe2025-09-03 14:59:16.762NT AUTHORITY\SYSTEM +154100x800000000000000015083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:50.430{8223a6b9-23ee-6902-b204-000000002b00}11488C:\Windows\System32\wermgr.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Problem ReportingMicrosoft® Windows® Operating SystemMicrosoft CorporationWerMgr"C:\WINDOWS\system32\wermgr.exe" -uploadC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ABE1D752643419A8252520AABF75C29D,SHA256=1707CB793B8F64B65CA5C2FEEB05CB7198349354E9E67ADE0671EEC3647F351B,IMPHASH=2FEAC3143808B4542A16622000CCFCAE{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:25:53.535{8223a6b9-23f1-6902-b304-000000002b00}4428C:\Windows\System32\MRT.exe5.136.25100.1002 (cc04db6a47b0a9743a6604dbcfae224932855c19)Microsoft Windows Malicious Software Removal ToolMicrosoft Windows Malicious Software Removal ToolMicrosoft Corporationmrt.exe"C:\WINDOWS\system32\MRT.exe" /Q /WC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5E9298866FDB29E736345F9D501F47E6,SHA256=2A1C7007AEE4AEC6494E8BCA3CDC93890078DEAED14D76A14C700BD91894899B,IMPHASH=D12345A28D4AA44B6AF04E34DC3F0587{8223a6b9-23ea-6902-ad04-000000002b00}6376C:\Windows\SoftwareDistribution\Download\Install\Windows-KB890830-x64-V5.136.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\Windows-KB890830-x64-V5.136.exe" /Q /WNT AUTHORITY\SYSTEM +13241300x800000000000000015085Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 14:25:54.378{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windows-kb890830|ffc22253a29c1c45\LowerCaseLongPathc:\windows\softwaredistribution\download\install\windows-kb890830-x64-v5.136.exeNT AUTHORITY\SYSTEM +13241300x800000000000000015086Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:25:54.378{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windows-kb890830|ffc22253a29c1c45\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000015087Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 14:25:54.378{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windows-kb890830|ffc22253a29c1c45\LinkDate09/19/2025 08:42:09NT AUTHORITY\SYSTEM +13241300x800000000000000015088Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 14:25:54.378{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\windows-kb890830|ffc22253a29c1c45\BinProductVersion5.136.25100.1002NT AUTHORITY\SYSTEM +11241100x800000000000000015089Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:54.407{8223a6b9-23f1-6902-b304-000000002b00}4428C:\WINDOWS\system32\MRT.exeC:\Windows\System32\MRT\B635EC47-D5D8-673A-4A54-6DBFD515F583\MPGEAR.DLL2025-10-29 14:25:54.407NT AUTHORITY\SYSTEM +11241100x800000000000000015090Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:25:54.411{8223a6b9-23f1-6902-b304-000000002b00}4428C:\WINDOWS\system32\MRT.exeC:\Windows\System32\MRT\B635EC47-D5D8-673A-4A54-6DBFD515F583\MPENGINE.DLL2025-10-29 14:25:54.411NT AUTHORITY\SYSTEM +22542200x800000000000000015091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:26:31.491{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:34.235.74.153;::ffff:52.204.102.74;::ffff:35.168.224.3;::ffff:44.217.218.65;::ffff:3.224.55.137;::ffff:3.214.104.99;::ffff:44.197.36.2;::ffff:98.90.130.106;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015092Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:26:31.611{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16438-false34.235.74.153-443https +154100x800000000000000015093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:21.381{8223a6b9-2449-6902-b904-000000002b00}3208C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe1407.2506.11012.0Windows UpdateMicrosoft® Windows® Operating SystemMicrosoft Corporationwuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId e54a2138-6542-463e-a945-47bc2642be5d /RunHandlerComServerC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=EA98A3ECEF7902605B361FC16D3D8081,SHA256=9C685412986F3939E7A84E62B09E319F4FA5B5C2B7006DE3441F6D4BB0CAC02D,IMPHASH=5FB5459A8931EA77DFAA79FC37CD9756{8223a6b9-21d2-6902-3304-000000002b00}10272C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauservNT AUTHORITY\SYSTEM +11241100x800000000000000015094Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:27:21.505{8223a6b9-21d2-6902-3304-000000002b00}10272C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe2025-10-29 14:27:21.505NT AUTHORITY\SYSTEM +154100x800000000000000015095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:21.658{8223a6b9-2449-6902-ba04-000000002b00}7376C:\Windows\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe10.0.29429.1000Windows Security app undocked setupMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthSetup.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe" C:\WINDOWS\SoftwareDistribution\Download\Install\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=066B1B9D108AB6D0ACD330923E136E73,SHA256=158118C560D77231554D02DE82B4A81DD3F9DD9EFD3525A260D38047CB21A155,IMPHASH=6AE4B3CEC0BA2F98933F9F8018CA8897{8223a6b9-2449-6902-b904-000000002b00}3208C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exe"C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe" /DeploymentHandlerFullPath \\?\C:\Windows\UUS\Packages\Preview\AMD64\UpdateDeploy.dll /ClassId e54a2138-6542-463e-a945-47bc2642be5d /RunHandlerComServerNT AUTHORITY\SYSTEM +154100x800000000000000015096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:21.742{8223a6b9-2449-6902-bb04-000000002b00}9780C:\Windows\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe10.0.29429.1000Windows Security app undocked setupMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthSetup.exeC:\WINDOWS\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe "C:\WINDOWS\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe" nulC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=066B1B9D108AB6D0ACD330923E136E73,SHA256=158118C560D77231554D02DE82B4A81DD3F9DD9EFD3525A260D38047CB21A155,IMPHASH=6AE4B3CEC0BA2F98933F9F8018CA8897{8223a6b9-2449-6902-ba04-000000002b00}7376C:\Windows\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe"C:\WINDOWS\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe" NT AUTHORITY\SYSTEM +11241100x800000000000000015097Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:27:21.751{8223a6b9-2449-6902-bb04-000000002b00}9780C:\WINDOWS\SoftwareDistribution\Download\Install\SecurityHealthSetup.exeC:\Windows\System32\SecurityHealth\SecurityHealthSetup.exe2025-10-29 14:27:21.751NT AUTHORITY\SYSTEM +154100x800000000000000015098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:21.890{8223a6b9-2449-6902-bc04-000000002b00}4116C:\Windows\System32\SecurityHealth\SecurityHealthSetup.exe10.0.29429.1000Windows Security app undocked setupMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthSetup.exe"\\?\C:\Windows\System32\SecurityHealth\SecurityHealthSetup.exe" "C:\WINDOWS\system32\SecurityHealth\10.0.29429.1000-0"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=066B1B9D108AB6D0ACD330923E136E73,SHA256=158118C560D77231554D02DE82B4A81DD3F9DD9EFD3525A260D38047CB21A155,IMPHASH=6AE4B3CEC0BA2F98933F9F8018CA8897{8223a6b9-1335-6902-d700-000000002b00}10524C:\Windows\System32\SecurityHealthService.exeC:\WINDOWS\system32\SecurityHealthService.exeNT AUTHORITY\SYSTEM +11241100x800000000000000015099Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:27:21.967{8223a6b9-2449-6902-bc04-000000002b00}4116\\?\C:\Windows\System32\SecurityHealth\SecurityHealthSetup.exeC:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dll2025-10-29 14:27:21.967NT AUTHORITY\SYSTEM +11241100x800000000000000015100Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:27:21.969{8223a6b9-2449-6902-bc04-000000002b00}4116\\?\C:\Windows\System32\SecurityHealth\SecurityHealthSetup.exeC:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthProxyStub.dll2025-10-29 14:27:21.969NT AUTHORITY\SYSTEM +11241100x800000000000000015101Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:27:21.970{8223a6b9-2449-6902-bc04-000000002b00}4116\\?\C:\Windows\System32\SecurityHealth\SecurityHealthSetup.exeC:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthSSO.dll2025-10-29 14:27:21.969NT AUTHORITY\SYSTEM +11241100x800000000000000015102Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:27:21.972{8223a6b9-2449-6902-bc04-000000002b00}4116\\?\C:\Windows\System32\SecurityHealth\SecurityHealthSetup.exeC:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthCore.dll2025-10-29 14:27:21.972NT AUTHORITY\SYSTEM +11241100x800000000000000015103Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:27:21.973{8223a6b9-2449-6902-bc04-000000002b00}4116\\?\C:\Windows\System32\SecurityHealth\SecurityHealthSetup.exeC:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe2025-10-29 14:27:21.973NT AUTHORITY\SYSTEM +13241300x800000000000000015104Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 14:27:22.215{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthse|a17d04621fb4672\LowerCaseLongPathc:\windows\softwaredistribution\download\install\securityhealthsetup.exeNT AUTHORITY\SYSTEM +13241300x800000000000000015105Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:27:22.215{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthse|a17d04621fb4672\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000015106Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 14:27:22.215{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthse|a17d04621fb4672\LinkDate01/11/2040 11:55:29NT AUTHORITY\SYSTEM +13241300x800000000000000015107Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 14:27:22.215{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthse|a17d04621fb4672\BinProductVersion10.0.29429.1000NT AUTHORITY\SYSTEM +154100x800000000000000015108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:22.333{8223a6b9-244a-6902-bd04-000000002b00}4192C:\Windows\System32\UIEOrchestrator.exe-----C:\WINDOWS\System32\UIEOrchestrator.exe /StartServer -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=67EC4745AE66DB0F157BFFDF4DBED3EF,SHA256=0AC38DD6AC47808487B401BC87FA984AADDF558AC9118E9290C6A2A81C560EA8,IMPHASH=74AB2C7F85AC6BE882524A9D7D8063E9{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000015109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:22.831{8223a6b9-244a-6902-be04-000000002b00}12968C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /NotificationType Reboot_Engaged /FormFactor Passive /CV FDslsuw6lEuUlbVM.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-21d0-6902-2004-000000002b00}8524C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +13241300x800000000000000015110Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:27:22.895{8223a6b9-1327-6902-af00-000000002b00}7368C:\WINDOWS\Explorer.EXEHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Control Panel\NotifyIconSettings\14756299155767351579\PublisherMicrosoft Windowssoc101win11\Administrator +13241300x800000000000000015111Microsoft-Windows-Sysmon/Operationalsoc101win11T1042SetValue2025-10-29 14:27:23.145{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\WdMam\Shell\Open\Command\(Default)C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe %%1NT AUTHORITY\SYSTEM +13241300x800000000000000015112Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.192{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{E3C9166D-1D39-4D4E-A45D-BC7BE9B00578}\InProcServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthSSO.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015113Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.200{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{36383E77-35C2-4B45-8277-329E4BEDF47F}\InProcServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthProxyStub.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015114Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.277{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{08728914-3F57-4D52-9E31-49DAECA5A80A}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015115Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.285{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{E041C90B-68BA-42C9-991E-477B73A75C90}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015116Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.295{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{6CED0DAA-4CDE-49C9-BA3A-AE163DC3D7AF}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015117Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.313{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{45F2C32F-ED16-4C94-8493-D72EF93A051B}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015118Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.317{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{3522D7AF-4617-4237-AAD8-5860231FC9BA}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015119Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.319{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{3213CD15-4DF2-415F-83F2-9FC58F3AEB3A}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015120Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.321{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{8E67B5C5-BAD3-4263-9F80-F769D50884F7}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015121Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.323{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{3886CA90-AB09-49D1-A047-7A62D096D275}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015122Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.325{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{3CD3CA1E-2232-4BBF-A733-18B700409DA0}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015123Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.327{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{2EF44DE8-80C9-42D9-8541-F40EF0862FA3}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015124Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.329{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{5FFAB5C8-9A36-4B65-9FC6-FB69F451F99C}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015125Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.333{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{88866959-07B0-4ED8-8EF5-54BC7443D28C}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015126Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.335{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{E476E4C0-409C-43CD-BBC0-5905B4138494}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015127Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.337{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{C8DFF91D-B243-4797-BAE6-C461B65EDED3}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015128Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.339{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{DBF393FC-230C-46CC-8A85-E9C599A81EFB}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015129Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.341{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{849F5497-5C61-4023-8E10-A28F1A8C6A70}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015130Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.343{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{10964DDD-6A53-4C60-917F-7B5723014344}\InprocServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +13241300x800000000000000015131Microsoft-Windows-Sysmon/Operationalsoc101win11T1122SetValue2025-10-29 14:27:23.347{8223a6b9-1335-6902-d700-000000002b00}10524C:\WINDOWS\system32\SecurityHealthService.exeHKCR\CLSID\{82345212-6ACA-4B38-8CD7-BF9DE8ED07BD}\InProcServer32\(Default)\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthAgent.dllNT AUTHORITY\SYSTEM +154100x800000000000000015132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:23.809{8223a6b9-244b-6902-bf04-000000002b00}7612C:\Windows\System32\UIEOrchestrator.exe-----C:\WINDOWS\System32\UIEOrchestrator.exe /StartServer -EmbeddingC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=67EC4745AE66DB0F157BFFDF4DBED3EF,SHA256=0AC38DD6AC47808487B401BC87FA984AADDF558AC9118E9290C6A2A81C560EA8,IMPHASH=74AB2C7F85AC6BE882524A9D7D8063E9{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000015133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:24.257{8223a6b9-244c-6902-c004-000000002b00}10288C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe1450.2506.28022.0Notifications host processMicrosoft® Windows® Operating SystemMicrosoft CorporationMoNotificationUx.exeC:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe /NotificationType Reboot_Engaged /FormFactor Passive /CV FDslsuw6lEuUlbVM.1.0.0C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D97428A8D4622A2B55C29AAF093A4587,SHA256=84913C18E04A4BFD84A0EC98FE5D636607C5A0EC9C320602FC53B45BB06E3C1B,IMPHASH=B582311B9D89BE4D0BBCB08118245AB0{8223a6b9-21d0-6902-2004-000000002b00}8524C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe"C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe" useprivatenamespacesNT AUTHORITY\SYSTEM +13241300x800000000000000015134Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:27:24.308{8223a6b9-1327-6902-af00-000000002b00}7368C:\WINDOWS\Explorer.EXEHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Control Panel\NotifyIconSettings\14756299155767351579\PublisherMicrosoft Windowssoc101win11\Administrator +154100x800000000000000015135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:25.163{8223a6b9-244d-6902-c104-000000002b00}6432C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k GPSvcGroupC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000015136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:25.434{8223a6b9-244d-6902-c204-000000002b00}10324C:\Windows\System32\smartscreen.exe10.0.26100.4652 (WinBuild.160101.0800)Windows Defender SmartScreenMicrosoft® Windows® Operating SystemMicrosoft Corporationsmartscreen.exeC:\Windows\System32\smartscreen.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=4B9FD8FEFBA636B66F81E0CDBD12B3DA,SHA256=86530447A3E2B502FE2AC164434B13137E5505A86743A96A091EC18A9377D9D9,IMPHASH=C84171DF6E7F087EA4E625CCCE2AB167{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +22542200x800000000000000015137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:31.651{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:44.221.167.78;::ffff:44.217.67.48;::ffff:52.72.86.90;::ffff:18.213.121.112;::ffff:44.193.137.250;::ffff:18.214.82.78;::ffff:18.208.48.184;::ffff:54.242.107.65;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015138Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:27:31.730{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16448-false44.221.167.78-443https +154100x800000000000000015139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:43.475{8223a6b9-245f-6902-c304-000000002b00}8356C:\Windows\System32\cmd.exe10.0.26100.4768 (WinBuild.160101.0800)Windows Command ProcessorMicrosoft® Windows® Operating SystemMicrosoft CorporationCmd.Exe"C:\WINDOWS\system32\cmd.exe" /d /c C:\WINDOWS\system32\hpatchmonTask.cmdC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=90242B3940D153095204CCA04B83DCF3,SHA256=55D95D29D54112FC203D8B2D6335031FD0EF26C56C9459F239760C24DADD3F24,IMPHASH=B0F049C014592B156EB1FA857E99CEB9{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:43.485{8223a6b9-245f-6902-c504-000000002b00}8876C:\Windows\System32\DeviceCensus.exe10.0.26100.4768 (WinBuild.160101.0800)Device CensusMicrosoft® Windows® Operating SystemMicrosoft CorporationDeviceCensus.exe"C:\WINDOWS\system32\devicecensus.exe" UserCxtC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0373A144FE33787D388AD09696BF68C1,SHA256=7D39743380748C8CFB61F5C5227DBEF1BD14145AE49A51A7DB225BC4BB4FD4C6,IMPHASH=5505B520B281F5304AC8726CB6621184{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:43.571{8223a6b9-245f-6902-c604-000000002b00}5752C:\Windows\System32\tasklist.exe10.0.26100.1 (WinBuild.160101.0800)Lists the current running tasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtasklist.exetasklist /FI "IMAGENAME eq Secure System" /v /FO list C:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=8ADD46C82B40A6F635F1406CF28DABA1,SHA256=62800679C55682F2F5F38B3DF9080D12480BEA78B5B8476EACE9DF014F353B14,IMPHASH=1EC449474B2F8125DB72AC9B593E4CA6{8223a6b9-245f-6902-c304-000000002b00}8356C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" /d /c C:\WINDOWS\system32\hpatchmonTask.cmdNT AUTHORITY\SYSTEM +154100x800000000000000015142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:43.579{8223a6b9-245f-6902-c704-000000002b00}6700C:\Windows\System32\findstr.exe10.0.26100.1150 (WinBuild.160101.0800)Find String (QGREP) UtilityMicrosoft® Windows® Operating SystemMicrosoft CorporationFINDSTR.EXEfindstr /i "Image Name: Secure System" C:\Windows\System32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=E43DE137E75349CACF2760ABFC338340,SHA256=46BDB9125C43BD3F63C233A7B0D021B04E867C4D19B72DDBCF6E5F2A392014D3,IMPHASH=FAF6C2ABBD03B51B5852A294EAAFC7CE{8223a6b9-245f-6902-c304-000000002b00}8356C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" /d /c C:\WINDOWS\system32\hpatchmonTask.cmdNT AUTHORITY\SYSTEM +154100x800000000000000015143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:53.603{8223a6b9-2469-6902-c804-000000002b00}13120C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe10.0.29429.1000 (WinBuild.160101.0800)Windows Security Health HostMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A1C7F240C04965EA3627ADA46E890DB,SHA256=4DAAC737340C506314BF4B5FA7979FBA68E0F9E22093F9EC50CAF647542A113F,IMPHASH=E8960CAF12CF621B3CA78988264C27F1{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +154100x800000000000000015144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:53.649{8223a6b9-2469-6902-c904-000000002b00}13284C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe10.0.29429.1000 (WinBuild.160101.0800)Windows Security Health HostMicrosoft® Windows® Operating SystemMicrosoft CorporationSecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A1C7F240C04965EA3627ADA46E890DB,SHA256=4DAAC737340C506314BF4B5FA7979FBA68E0F9E22093F9EC50CAF647542A113F,IMPHASH=E8960CAF12CF621B3CA78988264C27F1{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +13241300x800000000000000015145Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PathSetValue2025-10-29 14:27:54.227{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|de19a933e3e304b2\LowerCaseLongPathc:\windows\system32\securityhealth\10.0.29429.1000-0\securityhealthhost.exeNT AUTHORITY\SYSTEM +13241300x800000000000000015146Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-PubSetValue2025-10-29 14:27:54.227{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|de19a933e3e304b2\Publishermicrosoft corporationNT AUTHORITY\SYSTEM +13241300x800000000000000015147Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-CompileTimeClaimSetValue2025-10-29 14:27:54.227{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|de19a933e3e304b2\LinkDate01/09/2065 02:02:25NT AUTHORITY\SYSTEM +13241300x800000000000000015148Microsoft-Windows-Sysmon/Operationalsoc101win11InvDB-VerSetValue2025-10-29 14:27:54.227{8223a6b9-1318-6902-4e00-000000002b00}3832C:\WINDOWS\System32\svchost.exe\REGISTRY\A\{596e4c15-49ea-77ee-590a-ffd439bb98db}\Root\InventoryApplicationFile\securityhealthho|de19a933e3e304b2\BinProductVersion10.0.29429.1000NT AUTHORITY\SYSTEM +11241100x800000000000000015149Microsoft-Windows-Sysmon/Operationalsoc101win11EXE2025-10-29 14:27:54.988{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.29429.1000.0_x64__8wekyb3d8bbwe\SecHealthUI.exe2025-10-29 14:27:54.988NT AUTHORITY\SYSTEM +11241100x800000000000000015150Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:27:54.988{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.29429.1000.0_x64__8wekyb3d8bbwe\SecHealthUIDataModel.dll2025-10-29 14:27:54.988NT AUTHORITY\SYSTEM +11241100x800000000000000015151Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:27:54.988{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.29429.1000.0_x64__8wekyb3d8bbwe\SecHealthUITelemetry.dll2025-10-29 14:27:54.988NT AUTHORITY\SYSTEM +11241100x800000000000000015152Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:27:54.990{8223a6b9-2181-6902-1904-000000002b00}12164C:\WINDOWS\system32\svchost.exeC:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.29429.1000.0_x64__8wekyb3d8bbwe\SecHealthUIViewModels.dll2025-10-29 14:27:54.990NT AUTHORITY\SYSTEM +154100x800000000000000015153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:27:55.694{8223a6b9-246b-6902-ca04-000000002b00}8268C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXEC:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\AppXDeploymentExtensions.OneCore.dll,ShellRefreshC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-2181-6902-1904-000000002b00}12164C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvcNT AUTHORITY\SYSTEM +354300x800000000000000015154Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:28:31.585{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16452-false44.217.67.48ec2-44-217-67-48.compute-1.amazonaws.com443https +22542200x800000000000000015155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:31.492{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:44.217.67.48;::ffff:18.213.121.112;::ffff:44.193.137.250;::ffff:18.214.82.78;::ffff:54.242.107.65;::ffff:18.208.48.184;::ffff:44.221.167.78;::ffff:52.72.86.90;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +154100x800000000000000015156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:42.855{8223a6b9-249a-6902-cc04-000000002b00}4416C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:42.876{8223a6b9-249a-6902-cd04-000000002b00}5380C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exeC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:42.894{8223a6b9-249a-6902-ce04-000000002b00}13104C:\Windows\System32\lpremove.exe10.0.26100.4768 (WinBuild.160101.0800)MUI Language pack cleanupMicrosoft® Windows® Operating SystemMicrosoft Corporationlpremove.exe"C:\WINDOWS\system32\lpremove.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=4D1F5836482F477987D0D4DD988AA98D,SHA256=9DC0BE4FBAADAF330CC44766153592968E473ACE8FB16A725ADD2C52BCCCE3C8,IMPHASH=BE28D1F520B47B1DDDFB015260E83091{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:42.910{8223a6b9-249a-6902-cf04-000000002b00}9464C:\Windows\System32\taskhostw.exe10.0.26100.4768 (WinBuild.160101.0800)Host Process for Windows TasksMicrosoft® Windows® Operating SystemMicrosoft Corporationtaskhostw.exetaskhostw.exe SYSTEMC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=6A7B0E960579EFB677AEC4233BC8B1A1,SHA256=7F1803B2B12F8DBA1BA945C1CA8482AACAC377984A9ECDA4D5095F1F0AF7E7D9,IMPHASH=2196268E7A2880E3ADC74481297D0C4B{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:42.923{8223a6b9-249a-6902-d004-000000002b00}8468C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXE"C:\WINDOWS\system32\rundll32.exe" Windows.Storage.ApplicationData.dll,CleanupTemporaryStateC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:42.943{8223a6b9-249a-6902-d104-000000002b00}6700C:\Windows\System32\UsoClient.exe10.0.26100.3037 (WinBuild.160101.0800)UsoClientMicrosoft® Windows® Operating SystemMicrosoft CorporationUsoClient"C:\WINDOWS\system32\usoclient.exe" ReportPoliciesC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0AFB6EB9D41AF833D65448734C47A4C2,SHA256=0A4C60CD2FBE6859B6C09F56C7051580F9582F106D1851750264733194B94DB3,IMPHASH=1BC6441172601AD7E84C0082681FF7D2{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:42.964{8223a6b9-249a-6902-d304-000000002b00}7084C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s DsmSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000015163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:42.963{8223a6b9-249a-6902-d204-000000002b00}3980C:\Windows\System32\tzsync.exe10.0.26100.4768 (WinBuild.160101.0800)TimeZone Sync TaskMicrosoft® Windows® Operating SystemMicrosoft Corporationtzsync.exe"C:\WINDOWS\system32\tzsync.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5E3D008E001F605A6AAB356BAF2D504B,SHA256=086555CE0F5CFF23A8B1E068BA765AFB242493B85CE4D553D2B5048FDA8D1AE3,IMPHASH=00000000000000000000000000000000{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000015164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.046{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\CL_Utility.ps12025-10-29 14:28:43.046soc101win11\Administrator +154100x800000000000000015165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.057{8223a6b9-249b-6902-d404-000000002b00}13168C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SensorServiceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +11241100x800000000000000015166Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:28:43.065{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\DiagPackage.dll2025-10-29 14:28:43.065soc101win11\Administrator +154100x800000000000000015167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.064{8223a6b9-249b-6902-d504-000000002b00}2452C:\Windows\System32\la57setup.exe10.0.26100.1150 (WinBuild.160101.0800)LA57 SetupMicrosoft® Windows® Operating SystemMicrosoft Corporationla57setup.dll"C:\WINDOWS\system32\la57setup.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=8D5E7F5E952DABD704F6F8D2C27B9C40,SHA256=0DF42E045BCA512D9312E0CA7AC248B81E67824773476C6121E8F34E5AB5EE26,IMPHASH=F4691B4F528785BB036C81D887AEA94E{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000015168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.085{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\RS_AdminDiagnosticHistory.ps12025-10-29 14:28:43.083soc101win11\Administrator +154100x800000000000000015169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.091{8223a6b9-249b-6902-d604-000000002b00}11796C:\Windows\System32\Defrag.exe10.0.26100.1150 (WinBuild.160101.0800)Disk Defragmenter ModuleWindows Drive OptimizerMicrosoft Corp.Defrag.EXE"C:\WINDOWS\system32\defrag.exe" -c -h -o -$C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=15C3C6BE189C71F6634DFB95E758AD5B,SHA256=92444CF8EA0D6C5B610606560194EB5CCE67CF3662D8A774F3DF2F082683595A,IMPHASH=A1CC5447BEB5CDF0C46F628BD6F46BA2{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000015170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.097{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\RS_MachineWERQueue.ps12025-10-29 14:28:43.095soc101win11\Administrator +11241100x800000000000000015171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.105{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\RS_SyncSystemTime.ps12025-10-29 14:28:43.103soc101win11\Administrator +154100x800000000000000015172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.109{8223a6b9-249b-6902-d704-000000002b00}8132C:\Windows\System32\dmclient.exe10.0.26100.3624 (WinBuild.160101.0800)Microsoft Feedback SIUF Deployment Manager ClientMicrosoft® Windows® Operating SystemMicrosoft Corporationdmclient.exe"C:\WINDOWS\system32\dmclient.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=ADE2D804514A7ADC1793FDE0DB3E2D7B,SHA256=B7E299313494360EA4A147FEAD786939E443850B0910421DA7F1A2F186A37445,IMPHASH=BE4CDFB4F5176337C6B65F6C57146EC5{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +11241100x800000000000000015173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.117{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\RS_UserDiagnosticHistory.ps12025-10-29 14:28:43.113soc101win11\Administrator +11241100x800000000000000015174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.123{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\RS_UserWERQueue.ps12025-10-29 14:28:43.121soc101win11\Administrator +11241100x800000000000000015175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.125{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\TS_DiagnosticHistory.ps12025-10-29 14:28:43.125soc101win11\Administrator +11241100x800000000000000015176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.133{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\TS_InaccurateSystemTime.ps12025-10-29 14:28:43.133soc101win11\Administrator +11241100x800000000000000015177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.141{8223a6b9-1da6-6902-c403-000000002b00}1828C:\WINDOWS\system32\taskhostw.exeC:\Windows\Temp\SDIAG_6f4ed0a4-8f80-4a52-885d-9cce3a9bc8ba\TS_WERQueue.ps12025-10-29 14:28:43.139soc101win11\Administrator +154100x800000000000000015178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.187{8223a6b9-249b-6902-d804-000000002b00}3176C:\Windows\System32\dstokenclean.exe10.0.26100.1882 (WinBuild.160101.0800)Data Sharing Service Maintenance DriverMicrosoft® Windows® Operating SystemMicrosoft Corporationdstokenclean.exe"C:\WINDOWS\system32\dstokenclean.exe"C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=45593B0677A76640FDE8DADAFD399DE8,SHA256=38E4DBBE77423773545DEF4FEDCAD64357EA1DB16B2F6617A4AAEDAE5DA3C947,IMPHASH=F1D06B8C52F369E9C51A17B21E2BD700{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.214{8223a6b9-249b-6902-d904-000000002b00}4632C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXE"C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\Windows.StateRepositoryClient.dll,StateRepositoryDoMaintenanceTasksC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.241{8223a6b9-249b-6902-da04-000000002b00}7336C:\Windows\System32\sc.exe10.0.26100.4484 (WinBuild.160101.0800)Service Control Manager Configuration ToolMicrosoft® Windows® Operating SystemMicrosoft Corporationsc.exe"C:\WINDOWS\system32\sc.exe" start w32time task_startedC:\WINDOWS\system32\NT AUTHORITY\LOCAL SERVICE{8223a6b9-1316-6902-e503-000000000000}0x3e50SystemMD5=C8F632A326219F85927B3F33A13F7C7D,SHA256=A452BFCB6000D03942DDFADDCDA5A7EB121447ED99B1BA090446B4A989F1F7AE,IMPHASH=42DADBD60BBC453DD1773FDC089E19B7{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.313{8223a6b9-249b-6902-db04-000000002b00}13224C:\Windows\System32\DiskSnapshot.exe10.0.26100.1150 (WinBuild.160101.0800)DiskSnapshot.exeMicrosoft® Windows® Operating SystemMicrosoft CorporationDiskSnapshot.exe"C:\WINDOWS\system32\disksnapshot.exe" -zC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=AB82D082274CB2C9F85FB96439229A15,SHA256=E3EFC11F128F6E10EAE8E15C9AA100201AA89631377B8C9E4DB1314DD46659F0,IMPHASH=9BE1E8D7C5D5B113AF20C778EF464358{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.341{8223a6b9-249b-6902-dc04-000000002b00}12700C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXE"C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\CapabilityAccessManager.dll,CapabilityAccessManagerDoStoreMaintenanceC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.359{8223a6b9-249b-6902-dd04-000000002b00}9744C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXE"C:\WINDOWS\system32\rundll32.exe" Startupscan.dll,SusRunTaskC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:43.378{8223a6b9-249b-6902-de04-000000002b00}8080C:\Windows\System32\rundll32.exe10.0.26100.4202 (WinBuild.160101.0800)Windows host process (Rundll32)Microsoft® Windows® Operating SystemMicrosoft CorporationRUNDLL32.EXE"C:\WINDOWS\system32\rundll32.exe" dfdts.dll,DfdGetDefaultPolicyAndSMARTC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=0257F12B35D1FECB1614585D821346B7,SHA256=7FF8A874903C06C2981F16EF26D1FA2A77B337849A601F6FE4B687FBB0FC15E8,IMPHASH=3DB48F7E208E17408E177BD8B816560A{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ScheduleNT AUTHORITY\SYSTEM +154100x800000000000000015185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:44.210{8223a6b9-249c-6902-e804-000000002b00}11036C:\Windows\System32\sdiagnhost.exe10.0.26100.1150 (WinBuild.160101.0800)Scripted Diagnostics Native HostMicrosoft® Windows® Operating SystemMicrosoft Corporationsdiagnhost.exeC:\WINDOWS\System32\sdiagnhost.exe -EmbeddingC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=D7D8A85328688381DD52EB8394F798F3,SHA256=1C7903D2EA02352A5E1D47A8531B198FBC7EF87066E3537325C73B7488B7D399,IMPHASH=277D5A28D8ED10F59C6E29DA56D4DFEE{8223a6b9-1315-6902-0d00-000000002b00}976C:\Windows\System32\svchost.exeC:\WINDOWS\system32\svchost.exe -k DcomLaunch -pNT AUTHORITY\SYSTEM +11241100x800000000000000015186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:44.750{8223a6b9-249c-6902-e804-000000002b00}11036C:\WINDOWS\System32\sdiagnhost.exeC:\Users\Administrator\AppData\Local\Temp\__PSScriptPolicyTest_eh4ktckt.y3b.ps12025-10-29 14:28:44.748soc101win11\Administrator +154100x800000000000000015187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:45.261{8223a6b9-249d-6902-ea04-000000002b00}10208C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvcC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +154100x800000000000000015188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:45.373{8223a6b9-249d-6902-ec04-000000002b00}7736C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exe4.8.9032.0 built by: NET481REL1Microsoft .NET Framework optimization serviceMicrosoft® .NET FrameworkMicrosoft CorporationNGenTask.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:1456C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=22EA2B65E14D50E28BDD50010B06AACF,SHA256=EFE1C3D4543EAA67A436B933EFFA65FE3FBA358ADE1EF01B3F92F4971E92A1AD,IMPHASH=F34D5F2D4577ED6D9CEEC516C1F5A744{8223a6b9-249a-6902-cf04-000000002b00}9464C:\Windows\System32\taskhostw.exetaskhostw.exe SYSTEMNT AUTHORITY\SYSTEM +154100x800000000000000015189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:45.732{8223a6b9-249d-6902-ed04-000000002b00}6732C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe4.8.9032.0 built by: NET481REL1Microsoft .NET Framework optimization serviceMicrosoft® .NET FrameworkMicrosoft CorporationNGenTask.exe"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:1204C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=1CA52739F7F494012F1AACC925328C7F,SHA256=9FD133B11ABCBBED33CCEA71BD4743E8F35E42CD637FB763F5AB2A8FBB9B6261,IMPHASH=00000000000000000000000000000000{8223a6b9-249a-6902-cf04-000000002b00}9464C:\Windows\System32\taskhostw.exetaskhostw.exe SYSTEMNT AUTHORITY\SYSTEM +154100x800000000000000015190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:28:52.643{8223a6b9-24a4-6902-f404-000000002b00}1940C:\Windows\System32\Dism\DismHost.exe10.0.26100.1150 (WinBuild.160101.0800)Dism Host Servicing ProcessMicrosoft® Windows® Operating SystemMicrosoft CorporationDismHost.exeC:\Windows\System32\Dism\dismhost.exe {EF6F6C0B-2302-427E-9588-B831B0EBAAF3}C:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=A5CA984A40E37049FDF649BDCBFA5C88,SHA256=D8EADC9DB05FE0A9C06774DB36C7765E7113F17D8464AD0F3EBAFA5B803B3230,IMPHASH=9DDBEC2516241A81664067A928EDBA2E{8223a6b9-249b-6902-d504-000000002b00}2452C:\Windows\System32\la57setup.exe"C:\WINDOWS\system32\la57setup.exe"NT AUTHORITY\SYSTEM +11241100x800000000000000015191Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:28:57.008{8223a6b9-24a7-6902-f804-000000002b00}13172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPCB05.tmp\Microsoft.Ink.dll2025-10-29 14:28:57.008NT AUTHORITY\SYSTEM +11241100x800000000000000015192Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:28:57.651{8223a6b9-24a9-6902-fa04-000000002b00}1736C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPD239.tmp\Microsoft.PowerShell.Commands.Diagnostics.dll2025-10-29 14:28:57.651NT AUTHORITY\SYSTEM +11241100x800000000000000015193Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:28:58.659{8223a6b9-24a9-6902-fc04-000000002b00}2408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPD47B.tmp\Microsoft.PowerShell.Commands.Management.dll2025-10-29 14:28:58.657NT AUTHORITY\SYSTEM +11241100x800000000000000015194Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:00.687{8223a6b9-24aa-6902-fe04-000000002b00}12248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPD91F.tmp\Microsoft.PowerShell.Commands.Utility.dll2025-10-29 14:29:00.687NT AUTHORITY\SYSTEM +11241100x800000000000000015195Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:01.699{8223a6b9-24ac-6902-0005-000000002b00}6332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE0C0.tmp\Microsoft.PowerShell.ConsoleHost.dll2025-10-29 14:29:01.699NT AUTHORITY\SYSTEM +11241100x800000000000000015196Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:02.153{8223a6b9-24ad-6902-0205-000000002b00}8500C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE489.tmp\Microsoft.PowerShell.Security.dll2025-10-29 14:29:02.153NT AUTHORITY\SYSTEM +11241100x800000000000000015197Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:03.956{8223a6b9-24ae-6902-0405-000000002b00}7440C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE63E.tmp\Microsoft.VisualBasic.dll2025-10-29 14:29:03.956NT AUTHORITY\SYSTEM +11241100x800000000000000015198Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:04.611{8223a6b9-24b0-6902-0605-000000002b00}12892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPED43.tmp\Microsoft.WSMan.Management.dll2025-10-29 14:29:04.610NT AUTHORITY\SYSTEM +11241100x800000000000000015199Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:04.974{8223a6b9-24b0-6902-0805-000000002b00}5996C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF012.tmp\Microsoft.WSMan.Runtime.dll2025-10-29 14:29:04.974NT AUTHORITY\SYSTEM +11241100x800000000000000015200Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:06.231{8223a6b9-24b1-6902-0b05-000000002b00}6856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF198.tmp\System.Configuration.dll2025-10-29 14:29:06.231NT AUTHORITY\SYSTEM +11241100x800000000000000015201Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:06.615{8223a6b9-24b2-6902-0d05-000000002b00}1940C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF61D.tmp\System.Configuration.Install.dll2025-10-29 14:29:06.615NT AUTHORITY\SYSTEM +11241100x800000000000000015202Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:08.372{8223a6b9-24b3-6902-1005-000000002b00}5560C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF88E.tmp\System.DirectoryServices.dll2025-10-29 14:29:08.372NT AUTHORITY\SYSTEM +11241100x800000000000000015203Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:10.154{8223a6b9-24b4-6902-1205-000000002b00}3704C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPFED7.tmp\System.Management.dll2025-10-29 14:29:10.152NT AUTHORITY\SYSTEM +11241100x800000000000000015204Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:18.864{8223a6b9-24b6-6902-1405-000000002b00}2204C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP60B.tmp\System.Management.Automation.dll2025-10-29 14:29:18.864NT AUTHORITY\SYSTEM +11241100x800000000000000015205Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:20.201{8223a6b9-24bf-6902-1805-000000002b00}4052C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2877.tmp\System.Runtime.Remoting.dll2025-10-29 14:29:20.201NT AUTHORITY\SYSTEM +11241100x800000000000000015206Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:20.717{8223a6b9-24c0-6902-1a05-000000002b00}5668C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2CDC.tmp\System.ServiceProcess.dll2025-10-29 14:29:20.717NT AUTHORITY\SYSTEM +11241100x800000000000000015207Microsoft-Windows-Sysmon/Operationalsoc101win11DLL2025-10-29 14:29:21.739{8223a6b9-24c0-6902-1c05-000000002b00}9444C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeC:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2EFF.tmp\System.Transactions.dll2025-10-29 14:29:21.739NT AUTHORITY\SYSTEM +154100x800000000000000015208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:29:25.796{8223a6b9-24c5-6902-1f05-000000002b00}11496C:\Windows\System32\svchost.exe10.0.26100.4343 (WinBuild.160101.0800)Host Process for Windows ServicesMicrosoft® Windows® Operating SystemMicrosoft Corporationsvchost.exeC:\WINDOWS\System32\svchost.exe -k CameraMonitorC:\WINDOWS\system32\NT AUTHORITY\SYSTEM{8223a6b9-1315-6902-e703-000000000000}0x3e70SystemMD5=5A33432E6DB9DC2BE4C52E7768F0319C,SHA256=D4DF279E1201638455A81F9AE79939945589A4A01D56F610E32490686D066319,IMPHASH=DE43BD45CC98C143357416C7519ECCFD{8223a6b9-1314-6902-0b00-000000002b00}832C:\Windows\System32\services.exeC:\WINDOWS\system32\services.exeNT AUTHORITY\SYSTEM +22542200x800000000000000015209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:29:31.622{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:18.207.52.99;::ffff:23.21.39.48;::ffff:3.217.166.90;::ffff:52.5.150.111;::ffff:3.209.78.59;::ffff:3.222.132.107;::ffff:52.54.234.114;::ffff:3.224.122.199;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015210Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:29:31.804{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16456-false18.207.52.99-443https +254200x800000000000000015211Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:29:57.873{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0UIA1526J131H7FFATVY.temp2025-10-29 14:19:59.9592025-10-29 14:29:57.854soc101win11\Administrator +154100x800000000000000015212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:29:57.984{8223a6b9-24e5-6902-2105-000000002b00}13064C:\Program Files\Git\cmd\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exe"C:\Program Files\Git\cmd\git.exe" rev-parse --show-toplevelC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=6D25D4AA081645B85BF4DF71CD3DD6A7,SHA256=D02294842725FA71362B626B4DFC22B8076327833A86D164900144355E123D2C,IMPHASH=EE3C6A8F0AB6258AC0199A08F878F6B3{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe"C:\Users\research\AppData\Local\Programs\cursor\Cursor.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --dns-result-order=ipv4first --inspect-port=0 --user-data-dir="C:\Users\Administrator\AppData\Roaming\Cursor" --standard-schemes=vscode-webview,vscode-file --enable-sandbox --secure-schemes=vscode-webview,vscode-file --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --code-cache-schemes=vscode-webview,vscode-file --field-trial-handle=4560,i,1432700616497146364,15370632705378572274,262144 --enable-features=kWebSQLAccess --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8soc101win11\Administrator +154100x800000000000000015213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:29:58.087{8223a6b9-24e6-6902-2305-000000002b00}1212C:\Program Files\Git\mingw64\bin\git.exe2.47.0.vfs.0.3Git for WindowsGitThe Git Development Communitygit.exegit.exe rev-parse --show-toplevelC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=419943660DE1F4639E152A873C6FE3C0,SHA256=8A8A07D028D8AC54783ED292CD3C513739E7DF1AED3C2AD83A2515629AD4E1F3,IMPHASH=EB9545C6B03DEE5ACFDE883F783112D0{8223a6b9-24e5-6902-2105-000000002b00}13064C:\Program Files\Git\cmd\git.exe"C:\Program Files\Git\cmd\git.exe" rev-parse --show-toplevelsoc101win11\Administrator +22542200x800000000000000015214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:29:56.787{8223a6b9-2289-6902-4904-000000002b00}3616api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:52.5.150.111;::ffff:23.21.39.48;::ffff:52.54.234.114;::ffff:3.217.166.90;::ffff:18.207.52.99;::ffff:3.224.122.199;::ffff:3.222.132.107;::ffff:3.209.78.59;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015215Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:29:56.887{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16458-false52.5.150.111-443https +354300x800000000000000015216Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:29:57.041{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain54019-false172.16.143.2-53domain +354300x800000000000000015217Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:29:57.041{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain55694-false172.16.143.2-53domain +354300x800000000000000015218Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:29:57.329{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16459-false104.18.12.243-443https +22542200x800000000000000015219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:30:31.077{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:3.224.122.199;::ffff:3.217.166.90;::ffff:3.209.78.59;::ffff:18.207.52.99;::ffff:52.54.234.114;::ffff:52.5.150.111;::ffff:23.21.39.48;::ffff:3.222.132.107;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015220Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:30:31.266{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16462-false3.224.122.199ec2-3-224-122-199.compute-1.amazonaws.com443https +354300x800000000000000015221Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:30:32.123{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16463-false3.224.122.199ec2-3-224-122-199.compute-1.amazonaws.com443https +154100x800000000000000015222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:30:34.545{8223a6b9-250a-6902-2705-000000002b00}6108C:\Users\research\Desktop\systernals\Sysmon64.exe15.15System activity monitorSysinternals SysmonSysinternals - www.sysinternals.com-Sysmon64.exe -i sysmon-llm-observe.xmlC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7663C565BF28115506CB7EBD1DA389E0,SHA256=D9C8FDFDCE510FD9922DA3A1084B6AC4476C1407D1D8BBB67FC0A61988552771,IMPHASH=A039666F8D08DD16E0909469DA998438{8223a6b9-1e6c-6902-cd03-000000002b00}9996C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" soc101win11\Administrator +13241300x800000000000000015223Microsoft-Windows-Sysmon/Operationalsoc101win11Alert,Sysinternals Tool UsedSetValue2025-10-29 14:30:34.597{8223a6b9-250a-6902-2705-000000002b00}6108C:\Users\research\Desktop\systernals\Sysmon64.exeHKU\S-1-5-21-4051859043-1187413090-3677023548-500\Software\Sysinternals\System Monitor\EulaAcceptedDWORD (0x00000001)soc101win11\Administrator +534500x800000000000000015224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:30:34.607{8223a6b9-250a-6902-2705-000000002b00}6108C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +354300x800000000000000015225Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:30:34.049{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain62119-false172.16.143.2-53domain +354300x800000000000000015226Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:30:34.050{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain61251-false172.16.143.2-53domain +354300x800000000000000015227Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:30:34.298{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain50188-false172.16.143.2-53domain +354300x800000000000000015228Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:30:34.299{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratorudptruefalse172.16.143.133soc101win11.localdomain51722-false172.16.143.2-53domain +22542200x800000000000000015229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:30:41.298{8223a6b9-22ae-6902-8904-000000002b00}9948api2.cursor.sh0type: 5 api2geo.cursor.sh;type: 5 api2direct.cursor.sh;::ffff:3.234.19.117;::ffff:54.166.162.156;::ffff:54.159.6.117;::ffff:52.72.193.28;::ffff:35.172.40.140;::ffff:52.5.253.80;::ffff:52.72.181.182;::ffff:3.230.205.111;C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +354300x800000000000000015230Microsoft-Windows-Sysmon/Operationalsoc101win11Usermode2025-10-29 14:30:41.373{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administratortcptruefalse172.16.143.133soc101win11.localdomain16464-false3.234.19.117-443https +254200x800000000000000015231Microsoft-Windows-Sysmon/Operationalsoc101win11T10992025-10-29 14:30:44.088{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exeC:\Users\Administrator\AppData\Roaming\Cursor\Network\0dd522a4-9eaf-4041-816b-99f983e4d6f5.tmp2025-10-29 14:19:59.7112025-10-29 14:30:44.064soc101win11\Administrator +154100x800000000000000015232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:39.695{8223a6b9-254b-6902-2805-000000002b00}724C:\Users\research\Desktop\systernals\Sysmon64.exe15.15System activity monitorSysinternals SysmonSysinternals - www.sysinternals.com-sysmon64.exe -c sysmon-llm-observe.xmlC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighMD5=7663C565BF28115506CB7EBD1DA389E0,SHA256=D9C8FDFDCE510FD9922DA3A1084B6AC4476C1407D1D8BBB67FC0A61988552771,IMPHASH=A039666F8D08DD16E0909469DA998438{8223a6b9-1e6c-6902-cd03-000000002b00}9996C:\Windows\System32\cmd.exe"C:\WINDOWS\system32\cmd.exe" soc101win11\Administrator +16341600x800000000000000015233Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 14:31:39.738C:\Users\research\Desktop\systernals\sysmon-llm-observe.xmlSHA256=CDBB6F3EBCC51BEBF3C1CD4815D304BC6D8DA3DD51D085F2844E5C65578937F4 +534500x800000000000000015234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:39.741{8223a6b9-254b-6902-2805-000000002b00}724C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +534500x800000000000000015235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.835{8223a6b9-1f9f-6902-e903-000000002b00}1384C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.849{8223a6b9-1f9f-6902-e703-000000002b00}4724C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.849{8223a6b9-1fa0-6902-ec03-000000002b00}2160C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.877{8223a6b9-1fb1-6902-0804-000000002b00}776C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.924{8223a6b9-1f9f-6902-ea03-000000002b00}11692C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.926{8223a6b9-1fa2-6902-ef03-000000002b00}6556C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.932{8223a6b9-1fa5-6902-f303-000000002b00}1912C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.938{8223a6b9-1f9f-6902-e803-000000002b00}10772C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.962{8223a6b9-1fa3-6902-f003-000000002b00}4392C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000015244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:51.876{8223a6b9-2557-6902-2a05-000000002b00}9464C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:11C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000015245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:53.492{8223a6b9-2559-6902-2f05-000000002b00}5736C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1720,i,14790487178573951435,2017400613340625178,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1748 /prefetch:2C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000015246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:53.502{8223a6b9-2558-6902-2d05-000000002b00}6752C:\Windows\System32\WerFault.exesoc101win11\Administrator +11241100x800000000000000015247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:53.566{8223a6b9-2557-6902-2a05-000000002b00}9464C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\debug.log2025-10-29 14:31:53.566soc101win11\Administrator +534500x800000000000000015248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:53.582{8223a6b9-1f9e-6902-e603-000000002b00}8680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:53.592{8223a6b9-2557-6902-2a05-000000002b00}9464C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:53.639{8223a6b9-2559-6902-2f05-000000002b00}5736C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +734700x800000000000000015251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:53.597{8223a6b9-2559-6902-2f05-000000002b00}5736C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vulkan-1.dllVulkan Loader1.4.315.0Vulkan Runtime--SHA256=B4FC93097844C72FB999663BB9E2CEBC53C9D18465DDB01E02641F2FE289B7F6trueElement Labs Inc.Validsoc101win11\Administrator +534500x800000000000000015252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:31:54.733{8223a6b9-2559-6902-2e05-000000002b00}2424C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +154100x800000000000000015253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:03.046{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000015254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:03.642{8223a6b9-2563-6902-3205-000000002b00}5668C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Administrator\AppData\Roaming\LM Studio" /prefetch:4 --no-rate-limit --no-upload-gzip --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad" "--annotation=_productName=LM Studio" --annotation=_version=0.3.30+2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=37.2.0 --initial-client-data=0x4b8,0x4bc,0x4c0,0x4b4,0x4c4,0x7ff6780dbb44,0x7ff6780dbb50,0x7ff6780dbb60C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000015255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.127{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\lockfile2025-10-29 13:25:53.367soc101win11\Administrator +154100x800000000000000015256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.174{8223a6b9-2564-6902-3305-000000002b00}8860C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:2C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1LowSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000015257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.183{8223a6b9-2564-6902-3405-000000002b00}5132C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1856 /prefetch:11C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000015258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.200{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 14:32:04.200soc101win11\Administrator +11241100x800000000000000015259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.202{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +154100x800000000000000015260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.221{8223a6b9-2564-6902-3505-000000002b00}12580C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +734700x800000000000000015261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.266{8223a6b9-2564-6902-3305-000000002b00}8860C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vulkan-1.dllVulkan Loader1.4.315.0Vulkan Runtime--SHA256=B4FC93097844C72FB999663BB9E2CEBC53C9D18465DDB01E02641F2FE289B7F6trueElement Labs Inc.Validsoc101win11\Administrator +154100x800000000000000015262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.553{8223a6b9-2564-6902-3605-000000002b00}5112C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000015263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.781{8223a6b9-2563-6902-3205-000000002b00}5668C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\a44f53c5-ecd2-48e3-a94e-04f4fd3408e6.dmp2025-10-29 14:32:04.781soc101win11\Administrator +534500x800000000000000015264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.843{8223a6b9-2564-6902-3605-000000002b00}5112C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000015265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.857{8223a6b9-2564-6902-3705-000000002b00}12864C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +734700x800000000000000015266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:04.701{8223a6b9-2564-6902-3605-000000002b00}5112C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Windows\System32\vulkan-1.dll1.3.300.0Vulkan LoaderVulkan Runtime--SHA256=544DE63A0E4D7D88833708DF2644774CB41872B370E63EC93D30BEA4620AA640false-Unavailablesoc101win11\Administrator +534500x800000000000000015267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.522{8223a6b9-2564-6902-3805-000000002b00}2036C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000015268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.524{8223a6b9-2565-6902-3905-000000002b00}11476C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000015269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.538{8223a6b9-2566-6902-3a05-000000002b00}3888C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000015270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.665{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 14:32:04.200soc101win11\Administrator +11241100x800000000000000015271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.667{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +11241100x800000000000000015272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.843{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\blob_storage\0cf588cd-3488-4b76-ba7e-af99836de8812025-10-29 14:32:06.843soc101win11\Administrator +11241100x800000000000000015273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.853{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG.old~RF47b685.TMP2025-10-29 14:32:06.853soc101win11\Administrator +11241100x800000000000000015274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.853{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG2025-10-29 13:26:00.054soc101win11\Administrator +154100x800000000000000015275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:06.892{8223a6b9-2566-6902-3b05-000000002b00}6148C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --app-user-model-id="electron.app.LM Studio" --app-path="C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app" --no-sandbox --no-zygote --node-integration-in-worker --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1761743627040775 --launch-time-ticks=4699843300 --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3336 /prefetch:1C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000015276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.218{8223a6b9-2567-6902-3c05-000000002b00}5672C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000015277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.220{8223a6b9-2567-6902-3d05-000000002b00}7600C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000015278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.328{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG.old~RF47c039.TMP2025-10-29 14:32:09.327soc101win11\Administrator +11241100x800000000000000015279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.329{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG2025-10-29 13:26:11.066soc101win11\Administrator +154100x800000000000000015280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.336{8223a6b9-2569-6902-3e05-000000002b00}6264C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000015281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.418{8223a6b9-2569-6902-3f05-000000002b00}6764C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000015282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.434{8223a6b9-2569-6902-4005-000000002b00}4016C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000015283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.679{8223a6b9-2569-6902-4405-000000002b00}8864C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2569-6902-4005-000000002b00}4016C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +154100x800000000000000015284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:09.678{8223a6b9-2569-6902-4305-000000002b00}9468C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2569-6902-3f05-000000002b00}6764C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +534500x800000000000000015285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.098{8223a6b9-2569-6902-4305-000000002b00}9468C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000015286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.103{8223a6b9-2569-6902-4405-000000002b00}8864C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000015287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.117{8223a6b9-2569-6902-4005-000000002b00}4016C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000015288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.118{8223a6b9-2569-6902-3f05-000000002b00}6764C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000015289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.127{8223a6b9-2569-6902-4205-000000002b00}7580C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000015290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.124{8223a6b9-256a-6902-4505-000000002b00}1156C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000015291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.141{8223a6b9-256a-6902-4605-000000002b00}11920C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000015292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.154{8223a6b9-2569-6902-4105-000000002b00}5568C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.233{8223a6b9-256a-6902-4505-000000002b00}1156C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000015294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.240{8223a6b9-256a-6902-4705-000000002b00}6108C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.247{8223a6b9-256a-6902-4605-000000002b00}11920C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000015296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.251{8223a6b9-256a-6902-4805-000000002b00}4208C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000015297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:10.889{8223a6b9-256a-6902-4905-000000002b00}10540C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\js-code-sandbox\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000015298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.138{8223a6b9-256b-6902-4b05-000000002b00}10368C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\rag-v1\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000015299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.533{8223a6b9-256b-6902-4a05-000000002b00}3592C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.535{8223a6b9-256a-6902-4905-000000002b00}10540C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000015301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.549{8223a6b9-256b-6902-4f05-000000002b00}3208C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000015302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.553{8223a6b9-256b-6902-4d05-000000002b00}3132C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.557{8223a6b9-256b-6902-4e05-000000002b00}11012C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.563{8223a6b9-256b-6902-4b05-000000002b00}10368C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000015305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.565{8223a6b9-256b-6902-5205-000000002b00}10164C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000015306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.569{8223a6b9-256b-6902-5005-000000002b00}3736C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.573{8223a6b9-256b-6902-5105-000000002b00}8724C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.573{8223a6b9-256b-6902-4c05-000000002b00}7336C:\Windows\System32\conhost.exesoc101win11\Administrator +354300x800000000000000015309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.354{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcpfalsefalse127.0.0.1kubernetes.docker.internal16482-false127.0.0.1kubernetes.docker.internal41343- +354300x800000000000000015310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:11.411{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcpfalsefalse127.0.0.1kubernetes.docker.internal16483-false127.0.0.1kubernetes.docker.internal41343- +11241100x800000000000000015311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:16.917{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\353f40a2-b51d-4ab4-8817-da03f7ed4d73.tmp2025-10-29 14:32:16.917soc101win11\Administrator +11241100x800000000000000015312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:16.917{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Preferences~RF47ddd3.TMP2025-10-29 14:32:16.917soc101win11\Administrator +154100x800000000000000015313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:32:57.096{8223a6b9-2599-6902-5305-000000002b00}1844C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:14C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000015314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:33:43.825{8223a6b9-23e9-6902-ab04-000000002b00}13124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:33:53.111{8223a6b9-2558-6902-2c05-000000002b00}3232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +154100x800000000000000015316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:34:04.187{8223a6b9-25dc-6902-5405-000000002b00}11692C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5549 --gpu-device-id=1029 --gpu-sub-system-id=67442093 --gpu-revision=0 --gpu-driver-version=9.17.7.4 --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1724,i,4272073854340726470,1630675053194144159,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:10C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-1326-6902-9d5a-0b0000000000}0xb5a9d1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000015317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:34:04.342{8223a6b9-25dc-6902-5405-000000002b00}11692C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:34:33.355{8223a6b9-1fca-6902-0a04-000000002b00}8400C:\Windows\System32\mmc.exesoc101win11\Administrator +534500x800000000000000015319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:34:47.238{8223a6b9-25fe-6902-5505-000000002b00}6660C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:35:18.509{8223a6b9-24bf-6902-1605-000000002b00}4192C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +534500x800000000000000015321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:37:18.588{8223a6b9-2434-6902-b404-000000002b00}6320C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:37:23.819{8223a6b9-26a3-6902-5705-000000002b00}11924C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:37:23.936{8223a6b9-26a3-6902-5905-000000002b00}1304C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:37:23.988{8223a6b9-26a3-6902-5805-000000002b00}2408C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000015325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:37:24.034{8223a6b9-26a3-6902-5a05-000000002b00}7956C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000015326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:37:26.056{8223a6b9-21d2-6902-3304-000000002b00}10272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:38:20.674{8223a6b9-24e6-6902-2605-000000002b00}7752C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:38:28.636{8223a6b9-24e6-6902-2505-000000002b00}8568C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:38:30.954{8223a6b9-2181-6902-1904-000000002b00}12164C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:38:37.254{8223a6b9-255f-6902-3005-000000002b00}4116C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:22.646{8223a6b9-271a-6902-5b05-000000002b00}4072C:\Windows\System32\reg.exesoc101win11\Administrator +534500x800000000000000015332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:22.677{8223a6b9-271a-6902-5c05-000000002b00}8812C:\Windows\System32\auditpol.exesoc101win11\Administrator +534500x800000000000000015333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:25.650{8223a6b9-271d-6902-5e05-000000002b00}444C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:29.926{8223a6b9-2721-6902-6205-000000002b00}11948C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.313{8223a6b9-2599-6902-5305-000000002b00}1844C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.317{8223a6b9-2569-6902-3e05-000000002b00}6264C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.319{8223a6b9-244d-6902-c204-000000002b00}10324C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000015338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.323{8223a6b9-1333-6902-cd00-000000002b00}9720C:\Windows\System32\oobe\UserOOBEBroker.exesoc101win11\Administrator +534500x800000000000000015339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.323{8223a6b9-1ab4-6902-4e03-000000002b00}9952C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exesoc101win11\Administrator +534500x800000000000000015340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.333{8223a6b9-15db-6902-6402-000000002b00}10052C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.333{8223a6b9-1f56-6902-e103-000000002b00}8592C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000015342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.356{8223a6b9-1354-6902-f200-000000002b00}5732C:\Windows\System32\SecurityHealthSystray.exesoc101win11\Administrator +534500x800000000000000015343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.362{8223a6b9-1328-6902-b200-000000002b00}7620C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exesoc101win11\Administrator +534500x800000000000000015344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.380{8223a6b9-148a-6902-bc01-000000002b00}7784C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exesoc101win11\Administrator +534500x800000000000000015345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.382{8223a6b9-244c-6902-c004-000000002b00}10288C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000015346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.400{8223a6b9-1385-6902-2801-000000002b00}4888C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDrive.Sync.Service.exesoc101win11\Administrator +534500x800000000000000015347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.449{8223a6b9-1318-6902-6000-000000002b00}4588C:\Windows\System32\vm3dservice.exeNT AUTHORITY\SYSTEM +534500x800000000000000015348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.461{8223a6b9-1ee0-6902-dc03-000000002b00}7988C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000015349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.483{8223a6b9-1ee0-6902-db03-000000002b00}584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.485{8223a6b9-1e6c-6902-cf03-000000002b00}8208C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000015351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.510{8223a6b9-1e6c-6902-ce03-000000002b00}6848C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.526{8223a6b9-1e6c-6902-cd03-000000002b00}9996C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.530{8223a6b9-1ee0-6902-da03-000000002b00}3328C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.585{8223a6b9-1e6c-6902-d003-000000002b00}10196C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\WindowsTerminal.exesoc101win11\Administrator +534500x800000000000000015355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.603{8223a6b9-1356-6902-f300-000000002b00}5720C:\Program Files\VMware\VMware Tools\vmtoolsd.exesoc101win11\Administrator +534500x800000000000000015356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.726{8223a6b9-135a-6902-fa00-000000002b00}9528C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2509.42011.0_x64__8wekyb3d8bbwe\WebViewHost.exesoc101win11\Administrator +534500x800000000000000015357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.765{8223a6b9-2604-6902-5605-000000002b00}13008C:\Windows\System32\mmc.exesoc101win11\Administrator +534500x800000000000000015358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.795{8223a6b9-2564-6902-3705-000000002b00}12864C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.803{8223a6b9-22ad-6902-8804-000000002b00}12588C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.811{8223a6b9-2566-6902-3a05-000000002b00}3888C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.819{8223a6b9-2292-6902-5d04-000000002b00}13096C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.825{8223a6b9-228b-6902-5404-000000002b00}11992C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.838{8223a6b9-2564-6902-3505-000000002b00}12580C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.842{8223a6b9-2564-6902-3405-000000002b00}5132C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.840{8223a6b9-22ae-6902-8904-000000002b00}9948C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.850{8223a6b9-2564-6902-3305-000000002b00}8860C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.866{8223a6b9-1433-6902-8c01-000000002b00}6584C:\Program Files\Google\Chrome\Application\chrome.exesoc101win11\Administrator +534500x800000000000000015368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.884{8223a6b9-2563-6902-3105-000000002b00}11852C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.886{8223a6b9-135b-6902-fe00-000000002b00}5460C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.894{8223a6b9-2289-6902-4904-000000002b00}3616C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.894{8223a6b9-228b-6902-5004-000000002b00}272C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.900{8223a6b9-1433-6902-8f01-000000002b00}6872C:\Program Files\Google\Chrome\Application\chrome.exesoc101win11\Administrator +534500x800000000000000015373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.900{8223a6b9-1433-6902-8e01-000000002b00}4120C:\Program Files\Google\Chrome\Application\chrome.exesoc101win11\Administrator +534500x800000000000000015374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.909{8223a6b9-1e8a-6902-d503-000000002b00}10204C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exesoc101win11\Administrator +534500x800000000000000015375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.909{8223a6b9-135e-6902-0501-000000002b00}11608C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exesoc101win11\Administrator +534500x800000000000000015376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.920{8223a6b9-1433-6902-9001-000000002b00}12136C:\Program Files\Google\Chrome\Application\chrome.exesoc101win11\Administrator +534500x800000000000000015377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.933{8223a6b9-2566-6902-3b05-000000002b00}6148C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.935{8223a6b9-143c-6902-a001-000000002b00}6892C:\Program Files\Google\Chrome\Application\chrome.exesoc101win11\Administrator +534500x800000000000000015379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.941{8223a6b9-135c-6902-0101-000000002b00}3492C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.943{8223a6b9-135c-6902-0001-000000002b00}3376C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.949{8223a6b9-135c-6902-0201-000000002b00}10584C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:30.993{8223a6b9-143b-6902-9f01-000000002b00}12004C:\Program Files\Google\Chrome\Application\chrome.exesoc101win11\Administrator +534500x800000000000000015383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.014{8223a6b9-1433-6902-8d01-000000002b00}5064C:\Program Files\Google\Chrome\Application\chrome.exesoc101win11\Administrator +534500x800000000000000015384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.014{8223a6b9-135b-6902-ff00-000000002b00}3876C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.014{8223a6b9-2563-6902-3205-000000002b00}5668C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.094{8223a6b9-228d-6902-5804-000000002b00}12712C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.111{8223a6b9-135c-6902-0301-000000002b00}11304C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.171{8223a6b9-1381-6902-2501-000000002b00}9736C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administrator +534500x800000000000000015389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.210{8223a6b9-1da6-6902-c403-000000002b00}1828C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000015390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.262{8223a6b9-1336-6902-da00-000000002b00}10804C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exesoc101win11\Administrator +534500x800000000000000015391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.275{8223a6b9-156d-6902-0002-000000002b00}1888C:\Windows\ImmersiveControlPanel\SystemSettings.exesoc101win11\Administrator +534500x800000000000000015392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.317{8223a6b9-132c-6902-c200-000000002b00}8884C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.317{8223a6b9-1329-6902-b700-000000002b00}8088C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exesoc101win11\Administrator +534500x800000000000000015394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.325{8223a6b9-1329-6902-b500-000000002b00}8016C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exesoc101win11\Administrator +534500x800000000000000015395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.388{8223a6b9-132c-6902-c300-000000002b00}9112C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.400{8223a6b9-132c-6902-c400-000000002b00}9148C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.404{8223a6b9-132c-6902-c500-000000002b00}8360C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.406{8223a6b9-132b-6902-c000-000000002b00}8752C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:31.430{8223a6b9-132c-6902-c600-000000002b00}9268C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.66\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.289{8223a6b9-133e-6902-e000-000000002b00}10084C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.307{8223a6b9-1327-6902-af00-000000002b00}7368C:\Windows\explorer.exesoc101win11\Administrator +534500x800000000000000015402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.364{8223a6b9-271d-6902-5f05-000000002b00}1124C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.364{8223a6b9-1339-6902-dd00-000000002b00}2364C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.364{8223a6b9-135b-6902-fb00-000000002b00}9676C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.368{8223a6b9-156d-6902-0102-000000002b00}3700C:\Windows\System32\ApplicationFrameHost.exesoc101win11\Administrator +534500x800000000000000015406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.370{8223a6b9-1336-6902-dc00-000000002b00}8236C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.376{8223a6b9-1333-6902-cf00-000000002b00}9124C:\Windows\System32\ctfmon.exesoc101win11\Administrator +534500x800000000000000015408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.376{8223a6b9-1327-6902-a100-000000002b00}6708C:\Windows\System32\sihost.exesoc101win11\Administrator +534500x800000000000000015409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.378{8223a6b9-132a-6902-bb00-000000002b00}8220C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.383{8223a6b9-1329-6902-b800-000000002b00}4048C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.391{8223a6b9-1327-6902-b000-000000002b00}7400C:\Windows\System32\ShellHost.exesoc101win11\Administrator +534500x800000000000000015412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.413{8223a6b9-1327-6902-a800-000000002b00}7004C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000015413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.439{8223a6b9-2551-6902-2905-000000002b00}9780C:\Windows\System32\Taskmgr.exesoc101win11\Administrator +534500x800000000000000015414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.491{8223a6b9-1328-6902-b300-000000002b00}7696C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000015415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.503{8223a6b9-1329-6902-b900-000000002b00}7492C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000015416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.515{8223a6b9-1327-6902-a400-000000002b00}6528C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000015417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.515{8223a6b9-1327-6902-a300-000000002b00}6760C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000015418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.519{8223a6b9-1395-6902-4201-000000002b00}10372C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000015419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.521{8223a6b9-1327-6902-a500-000000002b00}6460C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000015420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.714{8223a6b9-2728-6902-6705-000000002b00}4892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.842{8223a6b9-2721-6902-6005-000000002b00}2084C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:36.854{8223a6b9-1393-6902-3901-000000002b00}10328C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.669{8223a6b9-14b5-6902-c601-000000002b00}9756C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.685{8223a6b9-244d-6902-c104-000000002b00}6432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.797{8223a6b9-2729-6902-6905-000000002b00}11456C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.806{8223a6b9-2728-6902-6805-000000002b00}3872C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000015427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.843{8223a6b9-1335-6902-d700-000000002b00}10524C:\Windows\System32\SecurityHealthService.exeNT AUTHORITY\SYSTEM +534500x800000000000000015428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.849{8223a6b9-249b-6902-d404-000000002b00}13168C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.853{8223a6b9-1318-6902-5600-000000002b00}3076C:\Program Files\VMware\VMware Tools\vmtoolsd.exeNT AUTHORITY\SYSTEM +534500x800000000000000015430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.855{8223a6b9-1316-6902-3600-000000002b00}2708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:37.994{8223a6b9-131b-6902-7700-000000002b00}5852C:\Windows\System32\AggregatorHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.028{8223a6b9-1318-6902-4e00-000000002b00}3832C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.108{8223a6b9-2721-6902-6105-000000002b00}10516C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.112{8223a6b9-2722-6902-6405-000000002b00}13216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.120{8223a6b9-1318-6902-5200-000000002b00}4036C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.130{8223a6b9-1317-6902-4900-000000002b00}3740C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.136{8223a6b9-1316-6902-2f00-000000002b00}2348C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.136{8223a6b9-155e-6902-fb01-000000002b00}1696C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.136{8223a6b9-1394-6902-3c01-000000002b00}11708C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.138{8223a6b9-1318-6902-5400-000000002b00}4056C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.142{8223a6b9-1319-6902-6700-000000002b00}5168C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.146{8223a6b9-132f-6902-c900-000000002b00}9844C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.157{8223a6b9-2445-6902-b504-000000002b00}7572C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\SYSTEM +534500x800000000000000015444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.159{8223a6b9-158a-6902-3602-000000002b00}6480C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exeNT AUTHORITY\SYSTEM +534500x800000000000000015445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.159{8223a6b9-1316-6902-3400-000000002b00}2624C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.159{8223a6b9-1317-6902-3b00-000000002b00}2960C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.159{8223a6b9-1371-6902-1601-000000002b00}11820C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.167{8223a6b9-1316-6902-1d00-000000002b00}1596C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.169{8223a6b9-2723-6902-6605-000000002b00}1536C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.169{8223a6b9-1317-6902-4800-000000002b00}3556C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.171{8223a6b9-1319-6902-6900-000000002b00}5420C:\Windows\System32\msdtc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.177{8223a6b9-2722-6902-6505-000000002b00}4928C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.185{8223a6b9-18a0-6902-f602-000000002b00}4964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.185{8223a6b9-1316-6902-2900-000000002b00}1396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.191{8223a6b9-1316-6902-3100-000000002b00}2428C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.201{8223a6b9-249d-6902-eb04-000000002b00}5276C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.213{8223a6b9-1316-6902-1e00-000000002b00}1640C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.219{8223a6b9-131b-6902-7200-000000002b00}5968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.235{8223a6b9-156e-6902-0202-000000002b00}8428C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.239{8223a6b9-1395-6902-4101-000000002b00}10320C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.248{8223a6b9-1317-6902-4a00-000000002b00}3748C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.272{8223a6b9-1317-6902-4200-000000002b00}3216C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.288{8223a6b9-1326-6902-9e00-000000002b00}6588C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.298{8223a6b9-1316-6902-1500-000000002b00}1260C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.322{8223a6b9-1316-6902-2600-000000002b00}2016C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.339{8223a6b9-156f-6902-0702-000000002b00}7360C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.347{8223a6b9-1316-6902-1600-000000002b00}1268C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.359{8223a6b9-1317-6902-4100-000000002b00}3184C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.429{8223a6b9-1316-6902-1c00-000000002b00}1588C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.556{8223a6b9-132b-6902-bf00-000000002b00}8716C:\Windows\System32\SearchIndexer.exeNT AUTHORITY\SYSTEM +534500x800000000000000015471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:38.777{8223a6b9-158a-6902-3a02-000000002b00}2888C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +534500x800000000000000015472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:39.021{8223a6b9-1318-6902-4d00-000000002b00}3816C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE + +2553225500x800000000000000015473Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 14:39:41.273GetConfigurationOptionsFailed to open service configuration with error 644219392 - Last error: The media is write protected. + +2553225500x800000000000000015474Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 14:39:41.273GetConfigurationOptionsFailed to open service configuration with error 644219392 - Last error: The media is write protected. +434400x800000000000000015475Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 14:39:58.156Started15.154.90 +534500x800000000000000015476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:52.567{8223a6b9-2738-6902-0400-000000002c00}476C:\Windows\System32\autochk.exeNT AUTHORITY\SYSTEM +534500x800000000000000015477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:53.092{8223a6b9-2738-6902-0500-000000002c00}568C:\Windows\System32\smss.exeNT AUTHORITY\SYSTEM +534500x800000000000000015478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:53.138{8223a6b9-2739-6902-0700-000000002c00}676C:\Windows\System32\smss.exeNT AUTHORITY\SYSTEM +534500x800000000000000015479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:54.933{8223a6b9-273a-6902-2400-000000002c00}1908C:\Windows\System32\upfc.exeNT AUTHORITY\SYSTEM +534500x800000000000000015480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:54.945{8223a6b9-273a-6902-1800-000000002c00}1372C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:56.885{8223a6b9-273c-6902-4d00-000000002c00}3804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:58.024{8223a6b9-273d-6902-5900-000000002c00}4428C:\Program Files\osquery\osqueryd\osqueryd.exeNT AUTHORITY\SYSTEM +534500x800000000000000015483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:58.884{8223a6b9-273c-6902-4e00-000000002c00}3928C:\Windows\System32\ClipRenew.exeNT AUTHORITY\SYSTEM +534500x800000000000000015484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:58.890{8223a6b9-273b-6902-4400-000000002c00}3284C:\Windows\System32\taskhostw.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:58.892{8223a6b9-273b-6902-3b00-000000002c00}2912C:\Windows\System32\dxgiadaptercache.exeNT AUTHORITY\SYSTEM +534500x800000000000000015486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:39:59.877{8223a6b9-273f-6902-6b00-000000002c00}5716C:\Windows\System32\taskhostw.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.317{8223a6b9-273f-6902-7400-000000002c00}5648C:\Windows\System32\reg.exeNT AUTHORITY\SYSTEM +534500x800000000000000015488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.355{8223a6b9-2740-6902-7b00-000000002c00}6216C:\Windows\System32\find.exeNT AUTHORITY\SYSTEM +534500x800000000000000015489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.357{8223a6b9-273f-6902-7000-000000002c00}6000C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000015490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.444{8223a6b9-2740-6902-7d00-000000002c00}6256C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000015491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.448{8223a6b9-2740-6902-7c00-000000002c00}6244C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000015492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.454{8223a6b9-273b-6902-3900-000000002c00}2836C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000015493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.460{8223a6b9-273e-6902-6a00-000000002c00}5592C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.607{8223a6b9-273f-6902-7100-000000002c00}6020C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000015495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:00.884{8223a6b9-273f-6902-7500-000000002c00}5604C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.354{8223a6b9-2741-6902-7e00-000000002c00}6472C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.359{8223a6b9-2741-6902-7f00-000000002c00}6480C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.421{8223a6b9-2741-6902-8000-000000002c00}6524C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.421{8223a6b9-2741-6902-8100-000000002c00}6532C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.577{8223a6b9-2741-6902-8200-000000002c00}6576C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.577{8223a6b9-2741-6902-8300-000000002c00}6584C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.922{8223a6b9-2741-6902-8400-000000002c00}6628C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.922{8223a6b9-2741-6902-8500-000000002c00}6636C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.992{8223a6b9-2741-6902-8600-000000002c00}6680C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:01.992{8223a6b9-2741-6902-8700-000000002c00}6688C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.048{8223a6b9-2741-6902-8800-000000002c00}6732C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.048{8223a6b9-2742-6902-8900-000000002c00}6740C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.100{8223a6b9-2742-6902-8a00-000000002c00}6788C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.100{8223a6b9-2742-6902-8b00-000000002c00}6796C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.175{8223a6b9-2742-6902-8c00-000000002c00}6844C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.177{8223a6b9-2742-6902-8d00-000000002c00}6852C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.248{8223a6b9-2742-6902-8e00-000000002c00}6940C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.248{8223a6b9-2742-6902-8f00-000000002c00}6948C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.343{8223a6b9-2742-6902-9000-000000002c00}6992C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.343{8223a6b9-2742-6902-9100-000000002c00}7000C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.462{8223a6b9-2742-6902-9200-000000002c00}7048C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.462{8223a6b9-2742-6902-9300-000000002c00}7056C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.534{8223a6b9-2742-6902-9400-000000002c00}7100C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000015519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:02.534{8223a6b9-2742-6902-9500-000000002c00}7108C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:07.463{8223a6b9-273b-6902-3800-000000002c00}2800C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:08.896{8223a6b9-2748-6902-9a00-000000002c00}6668C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:10.056{8223a6b9-2749-6902-a300-000000002c00}6964C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000015523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:10.688{8223a6b9-2749-6902-a400-000000002c00}7004C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000015524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:11.128{8223a6b9-2749-6902-a100-000000002c00}6956C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000015525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:12.191{8223a6b9-274a-6902-ae00-000000002c00}7596C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000015526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:12.345{8223a6b9-274a-6902-ad00-000000002c00}7552C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:12.568{8223a6b9-274a-6902-b000-000000002c00}7692C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exesoc101win11\Administrator +534500x800000000000000015528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:12.632{8223a6b9-274a-6902-b100-000000002c00}7736C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Installer\setup.exesoc101win11\Administrator +534500x800000000000000015529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:12.894{8223a6b9-274a-6902-ac00-000000002c00}7516C:\Windows\System32\runonce.exesoc101win11\Administrator +534500x800000000000000015530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:15.467{8223a6b9-2739-6902-1200-000000002c00}1068C:\Windows\System32\LogonUI.exeNT AUTHORITY\SYSTEM +534500x800000000000000015531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:17.615{8223a6b9-274b-6902-b900-000000002c00}7920C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:17.736{8223a6b9-274b-6902-b600-000000002c00}6044C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:18.171{8223a6b9-2749-6902-9b00-000000002c00}6308C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:18.434{8223a6b9-273b-6902-4000-000000002c00}3064C:\Windows\System32\ctfmon.exeNT AUTHORITY\SYSTEM +534500x800000000000000015535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:23.616{8223a6b9-2756-6902-d200-000000002c00}2828C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exesoc101win11\Administrator +534500x800000000000000015536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:23.616{8223a6b9-2756-6902-d300-000000002c00}1740C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exesoc101win11\Administrator +534500x800000000000000015537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:25.721{8223a6b9-273b-6902-3d00-000000002c00}2960C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:27.844{8223a6b9-2751-6902-cb00-000000002c00}9804C:\Windows\System32\mobsync.exesoc101win11\Administrator +534500x800000000000000015539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:27.964{8223a6b9-2756-6902-d000-000000002c00}4668C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:28.361{8223a6b9-275c-6902-dc00-000000002c00}10556C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:31.975{8223a6b9-275a-6902-db00-000000002c00}10360C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:33.136{8223a6b9-2749-6902-a600-000000002c00}6660C:\Windows\System32\userinit.exesoc101win11\Administrator +154100x800000000000000015543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:33.747{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-serviceC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2749-6902-a700-000000002c00}7152C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000015544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:34.804{8223a6b9-2762-6902-e400-000000002c00}10772C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Administrator\AppData\Roaming\LM Studio" /prefetch:4 --no-rate-limit --no-upload-gzip --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad" "--annotation=_productName=LM Studio" --annotation=_version=0.3.30+2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=37.2.0 --initial-client-data=0x4a0,0x4a4,0x4a8,0x49c,0x4ac,0x7ff79e1fbb44,0x7ff79e1fbb50,0x7ff79e1fbb60C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +11241100x800000000000000015545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:35.373{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\lockfile2025-10-29 14:40:35.373soc101win11\Administrator +154100x800000000000000015546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:35.477{8223a6b9-2763-6902-e500-000000002c00}6124C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1696 /prefetch:2C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81LowSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000015547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:35.487{8223a6b9-2763-6902-e600-000000002c00}5048C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1852 /prefetch:11C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +11241100x800000000000000015548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:35.517{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 14:40:35.517soc101win11\Administrator +11241100x800000000000000015549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:35.517{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +154100x800000000000000015550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:35.561{8223a6b9-2763-6902-e700-000000002c00}11056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000015551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:35.742{8223a6b9-274a-6902-b200-000000002c00}7780C:\Windows\System32\rundll32.exesoc101win11\Administrator +734700x800000000000000015552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:35.832{8223a6b9-2763-6902-e500-000000002c00}6124C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vulkan-1.dllVulkan Loader1.4.315.0Vulkan Runtime--SHA256=B4FC93097844C72FB999663BB9E2CEBC53C9D18465DDB01E02641F2FE289B7F6trueElement Labs Inc.Validsoc101win11\Administrator +154100x800000000000000015553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:36.320{8223a6b9-2764-6902-e900-000000002c00}11412C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +734700x800000000000000015554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:36.642{8223a6b9-2764-6902-e900-000000002c00}11412C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Windows\System32\vulkan-1.dll1.3.300.0Vulkan LoaderVulkan Runtime--SHA256=544DE63A0E4D7D88833708DF2644774CB41872B370E63EC93D30BEA4620AA640false-Unavailablesoc101win11\Administrator +11241100x800000000000000015555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:36.717{8223a6b9-2762-6902-e400-000000002c00}10772C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\6a3164d4-3801-40d8-ba64-5237f7b8036a.dmp2025-10-29 14:40:36.717soc101win11\Administrator +534500x800000000000000015556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:36.788{8223a6b9-2764-6902-e900-000000002c00}11412C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000015557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:36.801{8223a6b9-2764-6902-ea00-000000002c00}11532C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000015558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:39.065{8223a6b9-2760-6902-e200-000000002c00}11232C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exesoc101win11\Administrator +534500x800000000000000015559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:39.602{8223a6b9-2767-6902-ed00-000000002c00}11932C:\Windows\System32\wlrmdr.exesoc101win11\Administrator +534500x800000000000000015560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:39.998{8223a6b9-2764-6902-eb00-000000002c00}11616C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000015561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:40.004{8223a6b9-2765-6902-ec00-000000002c00}11668C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000015562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:40.026{8223a6b9-2768-6902-ef00-000000002c00}12008C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +11241100x800000000000000015563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:40.217{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 14:40:35.517soc101win11\Administrator +11241100x800000000000000015564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:40.218{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +11241100x800000000000000015565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:40.544{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\blob_storage\2b2f1e55-1cbd-4c3d-9bca-fe3b645bf4b92025-10-29 14:40:40.544soc101win11\Administrator +11241100x800000000000000015566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:40.554{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG.old~RFcfe2.TMP2025-10-29 14:40:40.552soc101win11\Administrator +11241100x800000000000000015567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:40.554{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG2025-10-29 13:26:00.054soc101win11\Administrator +534500x800000000000000015568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:41.693{8223a6b9-2764-6902-e800-000000002c00}11388C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:42.758{8223a6b9-2769-6902-f100-000000002c00}12252C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000015570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:42.760{8223a6b9-2769-6902-f200-000000002c00}12260C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000015571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:42.968{8223a6b9-276a-6902-f300-000000002c00}11516C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000015572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.065{8223a6b9-276b-6902-f400-000000002c00}11788C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000015573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.076{8223a6b9-276b-6902-f500-000000002c00}11776C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000015574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.177{8223a6b9-276b-6902-f800-000000002c00}11844C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-276b-6902-f500-000000002c00}11776C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +154100x800000000000000015575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.177{8223a6b9-276b-6902-f900-000000002c00}11836C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-276b-6902-f400-000000002c00}11788C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +534500x800000000000000015576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.302{8223a6b9-276b-6902-f900-000000002c00}11836C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000015577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.302{8223a6b9-276b-6902-f800-000000002c00}11844C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000015578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.304{8223a6b9-276b-6902-f400-000000002c00}11788C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000015579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.304{8223a6b9-276b-6902-f500-000000002c00}11776C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000015580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.306{8223a6b9-276b-6902-f700-000000002c00}11732C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.306{8223a6b9-276b-6902-f600-000000002c00}9824C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000015582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.323{8223a6b9-276b-6902-fa00-000000002c00}11932C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000015583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.329{8223a6b9-276b-6902-fb00-000000002c00}7176C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000015584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.368{8223a6b9-276b-6902-fa00-000000002c00}11932C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000015585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.370{8223a6b9-276b-6902-fc00-000000002c00}7204C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.374{8223a6b9-276b-6902-fb00-000000002c00}7176C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000015587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:43.374{8223a6b9-276b-6902-fd00-000000002c00}7432C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:44.601{8223a6b9-276b-6902-fe00-000000002c00}11996C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exesoc101win11\Administrator +534500x800000000000000015589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:44.726{8223a6b9-2767-6902-ee00-000000002c00}11952C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000015590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:44.950{8223a6b9-2760-6902-e100-000000002c00}11188C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:45.180{8223a6b9-273f-6902-7200-000000002c00}6096C:\Windows\System32\SppExtComObj.ExeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:45.184{8223a6b9-273f-6902-6e00-000000002c00}5872C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:45.220{8223a6b9-276d-6902-0101-000000002c00}11448C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:47.710{8223a6b9-276f-6902-0f01-000000002c00}12600C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000015595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:47.714{8223a6b9-276f-6902-1001-000000002c00}12620C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:48.056{8223a6b9-276f-6902-1101-000000002c00}12736C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000015597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:48.061{8223a6b9-276f-6902-1201-000000002c00}12744C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000015598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:48.494{8223a6b9-2770-6902-1401-000000002c00}12848C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Users\Administrator\AppData\Local\Programs\Ollama\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=A9F9F07C38F90275DE99D3C28B105D7EA18DAD02D024D32D8A919E372363E9EF{8223a6b9-276f-6902-0c01-000000002c00}12468C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" soc101win11\Administrator +11241100x800000000000000015599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:50.591{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\c8c21243-a37f-4fd1-8424-375da3d84a2e.tmp2025-10-29 14:40:50.591soc101win11\Administrator +11241100x800000000000000015600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:50.606{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Preferences~RFf721.TMP2025-10-29 14:40:50.604soc101win11\Administrator +534500x800000000000000015601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:51.142{8223a6b9-2769-6902-f000-000000002c00}12228C:\Windows\System32\rundll32.exesoc101win11\Administrator +534500x800000000000000015602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.634{8223a6b9-276e-6902-0a01-000000002c00}12388C:\Windows\SysWOW64\runonce.exesoc101win11\Administrator +534500x800000000000000015603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.661{8223a6b9-2774-6902-1701-000000002c00}13236C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.667{8223a6b9-2774-6902-1901-000000002c00}13260C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.673{8223a6b9-2774-6902-1e01-000000002c00}12676C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000015606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.673{8223a6b9-2774-6902-1c01-000000002c00}12540C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000015607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.684{8223a6b9-2774-6902-1a01-000000002c00}13280C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.684{8223a6b9-2774-6902-1801-000000002c00}13244C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.712{8223a6b9-2774-6902-1f01-000000002c00}12672C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000015610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.714{8223a6b9-2774-6902-2001-000000002c00}12708C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.863{8223a6b9-2774-6902-1b01-000000002c00}13308C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.868{8223a6b9-2774-6902-2101-000000002c00}12768C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000015613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:52.870{8223a6b9-2774-6902-1d01-000000002c00}9148C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:53.531{8223a6b9-276f-6902-0e01-000000002c00}12592C:\Windows\System32\BdeUISrv.exesoc101win11\Administrator +534500x800000000000000015615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:56.002{8223a6b9-2777-6902-2201-000000002c00}8424C:\Windows\System32\dxgiadaptercache.exeNT AUTHORITY\SYSTEM +534500x800000000000000015616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:56.996{8223a6b9-2773-6902-1601-000000002c00}13176C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:57.536{8223a6b9-2779-6902-2301-000000002c00}13284C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000015618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:57.538{8223a6b9-2779-6902-2401-000000002c00}12624C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:40:59.814{8223a6b9-277b-6902-2501-000000002c00}13264C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000015620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:00.539{8223a6b9-273c-6902-5000-000000002c00}4012C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +16341600x800000000000000015621Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 14:41:00.766C:\Users\research\Desktop\systernals\sysmon-llm-observe.xmlSHA256=CDBB6F3EBCC51BEBF3C1CD4815D304BC6D8DA3DD51D085F2844E5C65578937F4 +534500x800000000000000015622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:00.766{8223a6b9-277c-6902-2601-000000002c00}12680C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +534500x800000000000000015623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:02.611{8223a6b9-277e-6902-2701-000000002c00}13288C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000015624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:02.614{8223a6b9-277e-6902-2801-000000002c00}12544C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:05.637{8223a6b9-277e-6902-2901-000000002c00}12236C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +154100x800000000000000015626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:07.514{8223a6b9-2783-6902-2c01-000000002c00}632C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2749-6902-a700-000000002c00}7152C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +534500x800000000000000015627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:07.657{8223a6b9-2783-6902-2a01-000000002c00}12716C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000015628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:07.661{8223a6b9-2783-6902-2b01-000000002c00}12720C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000015629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:08.088{8223a6b9-2784-6902-2e01-000000002c00}420C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Administrator\AppData\Roaming\LM Studio" /prefetch:4 --no-rate-limit --no-upload-gzip --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad" "--annotation=_productName=LM Studio" --annotation=_version=0.3.30+2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=37.2.0 --initial-client-data=0x49c,0x4a0,0x4a4,0x498,0x4a8,0x7ff79e1fbb44,0x7ff79e1fbb50,0x7ff79e1fbb60C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2783-6902-2c01-000000002c00}632C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000015630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:08.656{8223a6b9-2784-6902-2f01-000000002c00}1820C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --app-user-model-id="electron.app.LM Studio" --app-path="C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app" --no-sandbox --no-zygote --node-integration-in-worker --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --time-ticks-at-unix-epoch=-1761748787312373 --launch-time-ticks=81331535 --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000015631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:08.682{8223a6b9-2783-6902-2c01-000000002c00}632C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:08.743{8223a6b9-2784-6902-2e01-000000002c00}420C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000015633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:09.611{8223a6b9-2785-6902-3001-000000002c00}2596C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\js-code-sandbox\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000015634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:09.745{8223a6b9-2785-6902-3101-000000002c00}2656C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\rag-v1\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000015635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:10.684{8223a6b9-2783-6902-2d01-000000002c00}11768C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000015636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:11.648{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG.old~RF14958.TMP2025-10-29 14:41:11.648soc101win11\Administrator +11241100x800000000000000015637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:11.652{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG2025-10-29 13:26:11.066soc101win11\Administrator +534500x800000000000000015638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.196{8223a6b9-2785-6902-3301-000000002c00}1380C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.198{8223a6b9-2785-6902-3201-000000002c00}2812C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.201{8223a6b9-2785-6902-3101-000000002c00}2656C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000015641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.204{8223a6b9-2785-6902-3001-000000002c00}2596C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000015642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.207{8223a6b9-2789-6902-3d01-000000002c00}5392C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000015643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.217{8223a6b9-2789-6902-3c01-000000002c00}5328C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000015644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.220{8223a6b9-2788-6902-3601-000000002c00}4808C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.223{8223a6b9-2788-6902-3701-000000002c00}4772C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.224{8223a6b9-2788-6902-3801-000000002c00}4868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.231{8223a6b9-2788-6902-3901-000000002c00}4928C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.255{8223a6b9-2788-6902-3a01-000000002c00}4984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000015649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:13.258{8223a6b9-2788-6902-3b01-000000002c00}10828C:\Windows\System32\conhost.exesoc101win11\Administrator +354300x800000000000000015650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:12.289{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcpfalsefalse127.0.0.1kubernetes.docker.internal32072-false127.0.0.1kubernetes.docker.internal41343- +354300x800000000000000015651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:12.290{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcpfalsefalse127.0.0.1kubernetes.docker.internal32073-false127.0.0.1kubernetes.docker.internal41343- +534500x800000000000000015652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:16.282{8223a6b9-2789-6902-3e01-000000002c00}2476C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:17.582{8223a6b9-278d-6902-3f01-000000002c00}12740C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000015654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:17.589{8223a6b9-278d-6902-4001-000000002c00}13272C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:19.844{8223a6b9-2770-6902-1401-000000002c00}12848C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000015656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:19.858{8223a6b9-2770-6902-1501-000000002c00}12856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:20.595{8223a6b9-278d-6902-4101-000000002c00}4184C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +154100x800000000000000015658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:20.865{8223a6b9-2790-6902-4201-000000002c00}6248C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Users\Administrator\AppData\Local\Programs\Ollama\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=A9F9F07C38F90275DE99D3C28B105D7EA18DAD02D024D32D8A919E372363E9EF{8223a6b9-276f-6902-0c01-000000002c00}12468C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" soc101win11\Administrator +534500x800000000000000015659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:22.148{8223a6b9-276f-6902-0c01-000000002c00}12468C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000015660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:25.256{8223a6b9-276d-6902-0301-000000002c00}6692C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:25.384{8223a6b9-2790-6902-4201-000000002c00}6248C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000015662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:25.392{8223a6b9-2790-6902-4301-000000002c00}5544C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:27.668{8223a6b9-2787-6902-3401-000000002c00}4156C:\Windows\System32\Taskmgr.exesoc101win11\Administrator +534500x800000000000000015664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:28.368{8223a6b9-2751-6902-ca00-000000002c00}9776C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:28.799{8223a6b9-2753-6902-cd00-000000002c00}10136C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +154100x800000000000000015666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:28.861{8223a6b9-2798-6902-4401-000000002c00}6528C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3872 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000015667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:43.783{8223a6b9-2749-6902-9d00-000000002c00}6752C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:47.124{8223a6b9-27aa-6902-4b01-000000002c00}5644C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:52.689{8223a6b9-27b0-6902-4d01-000000002c00}4796C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +534500x800000000000000015670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:54.745{8223a6b9-273a-6902-1b00-000000002c00}1508C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:54.916{8223a6b9-27b2-6902-4f01-000000002c00}9392C:\Windows\System32\appidpolicyconverter.exeNT AUTHORITY\SYSTEM +534500x800000000000000015672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:54.918{8223a6b9-27b2-6902-5001-000000002c00}11192C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:59.386{8223a6b9-27b7-6902-5101-000000002c00}4184C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000015674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:41:59.440{8223a6b9-27b7-6902-5201-000000002c00}12508C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000015675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:07.185{8223a6b9-2746-6902-9800-000000002c00}6492C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:09.731{8223a6b9-27b7-6902-5401-000000002c00}3160C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:14.484{8223a6b9-27c6-6902-5a01-000000002c00}3064C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:20.884{8223a6b9-27c7-6902-5b01-000000002c00}10396C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:24.766{8223a6b9-2758-6902-d400-000000002c00}3708C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +534500x800000000000000015680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:25.401{8223a6b9-27d1-6902-5d01-000000002c00}12796C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +534500x800000000000000015681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:28.814{8223a6b9-273a-6902-2700-000000002c00}2004C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:30.242{8223a6b9-27b7-6902-5501-000000002c00}1248C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:34.770{8223a6b9-27aa-6902-4c01-000000002c00}8852C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +154100x800000000000000015684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:35.476{8223a6b9-27db-6902-5f01-000000002c00}12268C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5549 --gpu-device-id=1029 --gpu-sub-system-id=67442093 --gpu-revision=0 --gpu-driver-version=9.17.7.4 --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1716,i,5196693566135089517,15961776214057199070,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:10C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000015685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:35.574{8223a6b9-27db-6902-5f01-000000002c00}12268C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:39.936{8223a6b9-2749-6902-a900-000000002c00}7344C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:45.536{8223a6b9-27e5-6902-6001-000000002c00}12904C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:48.960{8223a6b9-273b-6902-4500-000000002c00}3360C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:53.504{8223a6b9-27a9-6902-4901-000000002c00}1380C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:55.960{8223a6b9-27ef-6902-6101-000000002c00}3624C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000015691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:42:58.089{8223a6b9-27f1-6902-6201-000000002c00}12812C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:43:00.085{8223a6b9-273d-6902-6700-000000002c00}5096C:\Windows\System32\dllhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:43:00.111{8223a6b9-273f-6902-7600-000000002c00}3288C:\Windows\System32\VSSVC.exeNT AUTHORITY\SYSTEM +534500x800000000000000015694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:43:51.364{8223a6b9-2744-6902-9600-000000002c00}6260C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:43:51.374{8223a6b9-273a-6902-1700-000000002c00}1304C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000015696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:43:56.626{8223a6b9-282c-6902-6301-000000002c00}10684C:\Windows\System32\wbem\WMIADAP.exeNT AUTHORITY\SYSTEM +534500x800000000000000015697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:44:00.690{8223a6b9-2830-6902-6401-000000002c00}4980C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000015698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:44:48.576{8223a6b9-285f-6902-6601-000000002c00}536C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:44:56.055{8223a6b9-2867-6902-6701-000000002c00}8676C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:45:09.685{8223a6b9-2875-6902-6801-000000002c00}11752C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000015701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:45:09.737{8223a6b9-2875-6902-6901-000000002c00}11420C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000015702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:45:09.741{8223a6b9-2875-6902-6a01-000000002c00}11152C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:45:14.792{8223a6b9-2875-6902-6b01-000000002c00}3144C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:45:46.026{8223a6b9-274c-6902-be00-000000002c00}8416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:45:47.513{8223a6b9-289b-6902-6e01-000000002c00}6820C:\Program Files (x86)\Java\jre1.8.0_431\bin\javaws.exesoc101win11\Administrator +534500x800000000000000015706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:45:51.433{8223a6b9-273f-6902-7700-000000002c00}3112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:45:57.402{8223a6b9-289b-6902-6f01-000000002c00}4856C:\Program Files (x86)\Java\jre1.8.0_431\bin\jp2launcher.exesoc101win11\Administrator +534500x800000000000000015708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:16.864{8223a6b9-287c-6902-6c01-000000002c00}13180C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:32.390{8223a6b9-28c8-6902-7001-000000002c00}5744C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000015710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:32.392{8223a6b9-28c8-6902-7201-000000002c00}6308C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000015711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:32.398{8223a6b9-28c8-6902-7301-000000002c00}420C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:32.708{8223a6b9-28c8-6902-7501-000000002c00}8216C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:34.517{8223a6b9-28c8-6902-7101-000000002c00}6196C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:37.670{8223a6b9-28c8-6902-7401-000000002c00}6608C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:52.568{8223a6b9-276f-6902-0d01-000000002c00}12476C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:46:59.589{8223a6b9-27b7-6902-5301-000000002c00}12576C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:47:03.523{8223a6b9-28c9-6902-7701-000000002c00}6400C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000015718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:47:12.719{8223a6b9-28c8-6902-7601-000000002c00}12200C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:48:25.087{8223a6b9-27d1-6902-5e01-000000002c00}9840C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +534500x800000000000000015720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:49:54.980{8223a6b9-273a-6902-2500-000000002c00}1920C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:19.966{8223a6b9-29a1-6902-7e01-000000002c00}9720C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveLauncher.exesoc101win11\Administrator +534500x800000000000000015722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:24.799{8223a6b9-2753-6902-ce00-000000002c00}7592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:29.905{8223a6b9-29b5-6902-8001-000000002c00}11216C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000015724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:29.949{8223a6b9-29b5-6902-8101-000000002c00}8304C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000015725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:30.026{8223a6b9-29b5-6902-7f01-000000002c00}5904C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:43.585{8223a6b9-29c2-6902-8801-000000002c00}12548C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:48.254{8223a6b9-29bc-6902-8701-000000002c00}1340C:\Windows\System32\MpSigStub.exeNT AUTHORITY\SYSTEM +534500x800000000000000015728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:48.260{8223a6b9-29bc-6902-8601-000000002c00}12492C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.439.539.0.exeNT AUTHORITY\SYSTEM +534500x800000000000000015729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:48.311{8223a6b9-29bc-6902-8501-000000002c00}12196C:\Windows\UUS\Packages\Preview\amd64\wuaucltcore.exeNT AUTHORITY\SYSTEM +534500x800000000000000015730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:48.343{8223a6b9-299d-6902-7a01-000000002c00}12756C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000015731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:48.355{8223a6b9-299d-6902-7b01-000000002c00}8336C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:48.365{8223a6b9-299d-6902-7801-000000002c00}9028C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000015733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:48.373{8223a6b9-299d-6902-7901-000000002c00}10380C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:59.369{8223a6b9-273f-6902-6d00-000000002c00}5760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:50:59.688{8223a6b9-273b-6902-4200-000000002c00}3124C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:51:52.455{8223a6b9-2a08-6902-8d01-000000002c00}5672C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\elevation_service.exeNT AUTHORITY\SYSTEM +534500x800000000000000015737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:51:52.687{8223a6b9-2a08-6902-9201-000000002c00}12764C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:03.820{8223a6b9-2a13-6902-9901-000000002c00}2560C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000015739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:04.178{8223a6b9-2a14-6902-9b01-000000002c00}8716C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:05.604{8223a6b9-2a0f-6902-9401-000000002c00}7136C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:08.430{8223a6b9-299e-6902-7d01-000000002c00}12112C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:08.436{8223a6b9-299e-6902-7c01-000000002c00}1096C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000015743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:12.411{8223a6b9-2a1b-6902-9c01-000000002c00}7392C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:14.489{8223a6b9-2a13-6902-9a01-000000002c00}12924C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000015745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:22.043{8223a6b9-2a25-6902-9f01-000000002c00}6236C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:22.045{8223a6b9-2a26-6902-a101-000000002c00}12452C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:22.045{8223a6b9-2a25-6902-a001-000000002c00}2964C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:23.054{8223a6b9-2a26-6902-a201-000000002c00}7012C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:23.263{8223a6b9-2a27-6902-a301-000000002c00}1268C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:32.699{8223a6b9-2a08-6902-9301-000000002c00}11020C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:34.040{8223a6b9-2a13-6902-9601-000000002c00}9372C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:38.909{8223a6b9-29bb-6902-8401-000000002c00}4680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:40.292{8223a6b9-2a08-6902-9101-000000002c00}6424C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:58.326{8223a6b9-2a4a-6902-ab01-000000002c00}4636C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:52:58.420{8223a6b9-2a49-6902-a801-000000002c00}2140C:\Windows\System32\UsoClient.exeNT AUTHORITY\SYSTEM +534500x800000000000000015756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:04.922{8223a6b9-2a50-6902-ad01-000000002c00}12404C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:05.916{8223a6b9-29bb-6902-8301-000000002c00}1124C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:08.127{8223a6b9-2a13-6902-9801-000000002c00}12444C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:08.127{8223a6b9-2a1c-6902-9d01-000000002c00}6804C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:21.463{8223a6b9-2a61-6902-b001-000000002c00}2900C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:35.893{8223a6b9-2a6f-6902-b601-000000002c00}10124C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:35.896{8223a6b9-2a6f-6902-b701-000000002c00}12920C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:38.360{8223a6b9-2a4a-6902-ac01-000000002c00}9536C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:42.125{8223a6b9-2a76-6902-b801-000000002c00}12668C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:44.203{8223a6b9-2a13-6902-9701-000000002c00}12680C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:49.598{8223a6b9-2a66-6902-b401-000000002c00}7020C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:52.060{8223a6b9-2a80-6902-b901-000000002c00}12552C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:52.764{8223a6b9-2a62-6902-b201-000000002c00}7044C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:53:58.586{8223a6b9-2a49-6902-aa01-000000002c00}1212C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:54:00.105{8223a6b9-2a49-6902-a901-000000002c00}1540C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:54:06.874{8223a6b9-2a8e-6902-ba01-000000002c00}9852C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:54:35.947{8223a6b9-2aab-6902-bb01-000000002c00}68C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:03.701{8223a6b9-2a12-6902-9501-000000002c00}4892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:08.811{8223a6b9-2acc-6902-c101-000000002c00}9576C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:09.736{8223a6b9-2acd-6902-c301-000000002c00}9624C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000015776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:10.965{8223a6b9-2ace-6902-c801-000000002c00}2140C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:11.064{8223a6b9-2acd-6902-c201-000000002c00}5772C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000015778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:12.246{8223a6b9-2ad0-6902-ca01-000000002c00}9720C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:12.248{8223a6b9-2ad0-6902-cb01-000000002c00}10256C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:13.161{8223a6b9-2787-6902-3501-000000002c00}12564C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000015781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:22.574{8223a6b9-2abc-6902-bd01-000000002c00}11684C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:26.271{8223a6b9-2a57-6902-af01-000000002c00}1916C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:32.618{8223a6b9-2ae4-6902-cf01-000000002c00}2172C:\Windows\SysWOW64\msiexec.exesoc101win11\Administrator +534500x800000000000000015784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:32.620{8223a6b9-2ae3-6902-cd01-000000002c00}2896C:\Windows\System32\msiexec.exeNT AUTHORITY\SYSTEM +534500x800000000000000015785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:32.622{8223a6b9-2ad8-6902-cc01-000000002c00}7236C:\Windows\System32\msiexec.exesoc101win11\Administrator +534500x800000000000000015786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:34.570{8223a6b9-2ae6-6902-d001-000000002c00}772C:\Windows\SysWOW64\msiexec.exesoc101win11\Administrator +534500x800000000000000015787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:34.574{8223a6b9-2ac6-6902-c001-000000002c00}2680C:\Windows\System32\msiexec.exesoc101win11\Administrator +534500x800000000000000015788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:34.600{8223a6b9-2ac5-6902-be01-000000002c00}10580C:\Windows\System32\msiexec.exesoc101win11\Administrator +534500x800000000000000015789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:37.290{8223a6b9-2ae3-6902-ce01-000000002c00}2168C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:38.444{8223a6b9-2ae8-6902-d401-000000002c00}4068C:\Windows\System32\CompatTelRunner.exeNT AUTHORITY\SYSTEM +534500x800000000000000015791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:38.448{8223a6b9-2ae8-6902-d501-000000002c00}12192C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:41.025{8223a6b9-2aea-6902-d601-000000002c00}7620C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000015793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:41.054{8223a6b9-2ae6-6902-d101-000000002c00}8716C:\Windows\SysWOW64\cmd.exesoc101win11\Administrator +534500x800000000000000015794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:41.060{8223a6b9-2ae6-6902-d301-000000002c00}7556C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000015795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:41.066{8223a6b9-2ae6-6902-d201-000000002c00}1632C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:45.840{8223a6b9-2af1-6902-dc01-000000002c00}1212C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:55:50.983{8223a6b9-2ace-6902-c901-000000002c00}12912C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000015798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:03.156{8223a6b9-2b03-6902-dd01-000000002c00}3724C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:03.156{8223a6b9-2b03-6902-de01-000000002c00}10872C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:04.288{8223a6b9-2b04-6902-df01-000000002c00}1188C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:04.288{8223a6b9-2b04-6902-e001-000000002c00}11112C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:06.181{8223a6b9-2b06-6902-e101-000000002c00}4544C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:06.181{8223a6b9-2b06-6902-e201-000000002c00}6756C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:07.026{8223a6b9-2b07-6902-e301-000000002c00}8476C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:07.026{8223a6b9-2b07-6902-e401-000000002c00}140C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:07.996{8223a6b9-2b07-6902-e501-000000002c00}12944C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:07.998{8223a6b9-2b07-6902-e601-000000002c00}12184C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:11.234{8223a6b9-2b0b-6902-e701-000000002c00}7408C:\Windows\System32\dmclient.exeNT AUTHORITY\SYSTEM +534500x800000000000000015809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:11.236{8223a6b9-2b0b-6902-e801-000000002c00}4820C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:11.239{8223a6b9-2ace-6902-c701-000000002c00}4636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:12.723{8223a6b9-2ace-6902-c601-000000002c00}9816C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:17.414{8223a6b9-2b11-6902-e901-000000002c00}3820C:\ProgramData\chocolatey\tools\checksum.exesoc101win11\Administrator +534500x800000000000000015813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:23.565{8223a6b9-2a44-6902-a601-000000002c00}4484C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000015814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:23.969{8223a6b9-2b12-6902-ed01-000000002c00}6820C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:26.354{8223a6b9-2b1a-6902-f001-000000002c00}1460C:\ProgramData\Package Cache\{e7802eac-3305-4da0-9378-e55d1ed05518}\VC_redist.x86.exesoc101win11\Administrator +534500x800000000000000015816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:26.382{8223a6b9-2b19-6902-ef01-000000002c00}3344C:\ProgramData\Package Cache\{e7802eac-3305-4da0-9378-e55d1ed05518}\VC_redist.x86.exesoc101win11\Administrator +534500x800000000000000015817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:26.388{8223a6b9-2b19-6902-ee01-000000002c00}7328C:\ProgramData\Package Cache\{e7802eac-3305-4da0-9378-e55d1ed05518}\VC_redist.x86.exesoc101win11\Administrator +534500x800000000000000015818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:26.431{8223a6b9-2b12-6902-ec01-000000002c00}5712C:\Windows\Temp\{9713B0F4-9F08-4B99-8988-E66BF4C87992}\.be\VC_redist.x86.exesoc101win11\Administrator +534500x800000000000000015819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:26.449{8223a6b9-2b11-6902-eb01-000000002c00}6456C:\Windows\Temp\{D29BD980-52B5-4EBE-B9C0-68AC23F8BF38}\.cr\VC_redist.x86.exesoc101win11\Administrator +534500x800000000000000015820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:26.457{8223a6b9-2b11-6902-ea01-000000002c00}5864C:\Users\Administrator\AppData\Local\Temp\chocolatey\vcredist140\14.44.35211\VC_redist.x86.exesoc101win11\Administrator +534500x800000000000000015821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:26.943{8223a6b9-2b1a-6902-f101-000000002c00}11852C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:41.648{8223a6b9-2b29-6902-f201-000000002c00}5608C:\ProgramData\chocolatey\tools\checksum.exesoc101win11\Administrator +534500x800000000000000015823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:47.522{8223a6b9-2b2a-6902-f601-000000002c00}9040C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:50.063{8223a6b9-2b31-6902-f901-000000002c00}4916C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exesoc101win11\Administrator +534500x800000000000000015825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:50.076{8223a6b9-2b31-6902-f801-000000002c00}4788C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exesoc101win11\Administrator +534500x800000000000000015826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:50.082{8223a6b9-2b31-6902-f701-000000002c00}7288C:\ProgramData\Package Cache\{804e7d66-ccc2-4c12-84ba-476da31d103d}\VC_redist.x64.exesoc101win11\Administrator +534500x800000000000000015827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:50.120{8223a6b9-2b2a-6902-f501-000000002c00}964C:\Windows\Temp\{5E7A67EE-B9DF-4075-99C7-61FE0D98435F}\.be\VC_redist.x64.exesoc101win11\Administrator +534500x800000000000000015828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:50.136{8223a6b9-2b29-6902-f401-000000002c00}3212C:\Windows\Temp\{E44F4A03-7962-4018-B2F8-437648619773}\.cr\VC_redist.x64.exesoc101win11\Administrator +534500x800000000000000015829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:50.136{8223a6b9-2b29-6902-f301-000000002c00}6888C:\Users\Administrator\AppData\Local\Temp\chocolatey\vcredist140\14.44.35211\VC_redist.x64.exesoc101win11\Administrator +534500x800000000000000015830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:50.186{8223a6b9-2b32-6902-fa01-000000002c00}9372C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:56:50.186{8223a6b9-2b32-6902-fb01-000000002c00}6480C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:02.812{8223a6b9-2b39-6902-ff01-000000002c00}1816C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:04.251{8223a6b9-2a08-6902-8f01-000000002c00}10236C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:04.861{8223a6b9-2b3b-6902-0002-000000002c00}5820C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:11.091{8223a6b9-2ace-6902-c501-000000002c00}7220C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000015836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:11.101{8223a6b9-2acd-6902-c401-000000002c00}3484C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000015837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:12.156{8223a6b9-2b48-6902-0202-000000002c00}7224C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:21.839{8223a6b9-2b4c-6902-0402-000000002c00}10544C:\Windows\System32\dllhost.exesoc101win11\Administrator +154100x800000000000000015839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:25.867{8223a6b9-2b55-6902-0702-000000002c00}436C:\Python314\python.exe3.14.0PythonPythonPython Software Foundationpython.exe"C:\Python314\python.exe" -I -m ensurepip -U --default-pipC:\WINDOWS\SysWOW64\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=467014615A5255ACA450AE88100DD2CAF887DA87657F00E3C2171EC44A685AEC{8223a6b9-2b55-6902-0602-000000002c00}1800C:\Windows\SysWOW64\msiexec.exeC:\Windows\syswow64\MsiExec.exe -Embedding F6ECD69BE935CCB8DC5F928EA9CA152Bsoc101win11\Administrator +534500x800000000000000015840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:27.748{8223a6b9-2b52-6902-0502-000000002c00}5496C:\Windows\System32\dllhost.exesoc101win11\Administrator +"C:\WINDOWS\SysWOW64\soc101win11\Administrator{8223a6b9-2748-6902-c833-080000000000}0x833c81HighSHA256=467014615A5255ACA450AE88100DD2CAF887DA87657F00E3C2171EC44A685AEC{8223a6b9-2b55-6902-0702-000000002c00}436C:\Python314\python.exe"C:\Python314\python.exe" -I -m ensurepip -U --default-pipsoc101win11\Administrator +runpy.run_module(\"pip\", run_name=\"__main__\", alter_sys=True) +sys.argv[1:] = ['install', '--no-cache-dir', '--no-index', '--find-links', 'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\tmp8siui06w', '--upgrade', 'pip'] +sys.path = ['C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\tmp8siui06w\\pip-25.2-py3-none-any.whl'] + sys.path +import sys +import runpy +154100x800000000000000015841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:28.061{8223a6b9-2b58-6902-0902-000000002c00}1140C:\Python314\python.exe3.14.0PythonPythonPython Software Foundationpython.exeC:\Python314\python.exe -I -W ignore::DeprecationWarning -c " +534500x800000000000000015842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:40.746{8223a6b9-2b58-6902-0902-000000002c00}1140C:\Python314\python.exesoc101win11\Administrator +534500x800000000000000015843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:40.753{8223a6b9-2b55-6902-0702-000000002c00}436C:\Python314\python.exesoc101win11\Administrator +534500x800000000000000015844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:40.753{8223a6b9-2b55-6902-0802-000000002c00}12600C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:40.831{8223a6b9-2b55-6902-0602-000000002c00}1800C:\Windows\SysWOW64\msiexec.exesoc101win11\Administrator +534500x800000000000000015846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:41.424{8223a6b9-2b39-6902-fe01-000000002c00}5500C:\Windows\Temp\{09EB62FE-30DB-476F-ACFE-F2567C543CB2}\.be\python-3.14.0-amd64.exesoc101win11\Administrator +534500x800000000000000015847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:41.434{8223a6b9-2b38-6902-fd01-000000002c00}960C:\Windows\Temp\{F9CA70D6-332F-454F-AF42-C09E15B2646C}\.cr\python-3.14.0-amd64.exesoc101win11\Administrator +534500x800000000000000015848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:41.441{8223a6b9-2b38-6902-fc01-000000002c00}5396C:\ProgramData\chocolatey\lib\python314\tools\python-3.14.0-amd64.exesoc101win11\Administrator +534500x800000000000000015849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:42.406{8223a6b9-2b66-6902-0d02-000000002c00}6160C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exesoc101win11\Administrator +534500x800000000000000015850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:42.412{8223a6b9-2b66-6902-0b02-000000002c00}9684C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exesoc101win11\Administrator +534500x800000000000000015851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:42.414{8223a6b9-2b66-6902-0c02-000000002c00}12268C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:42.420{8223a6b9-2b65-6902-0a02-000000002c00}4912C:\ProgramData\chocolatey\tools\shimgen.exesoc101win11\Administrator +534500x800000000000000015853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:43.460{8223a6b9-2b67-6902-0e02-000000002c00}2000C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:43.460{8223a6b9-2b67-6902-0f02-000000002c00}6536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:54.898{8223a6b9-2b72-6902-1002-000000002c00}12416C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:54.898{8223a6b9-2b72-6902-1102-000000002c00}12992C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:55.958{8223a6b9-2b73-6902-1202-000000002c00}13272C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:57:55.960{8223a6b9-2b73-6902-1302-000000002c00}1560C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:58:02.047{8223a6b9-2b79-6902-1402-000000002c00}12800C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:58:33.000{8223a6b9-2b98-6902-1502-000000002c00}5836C:\ProgramData\chocolatey\tools\checksum.exesoc101win11\Administrator +534500x800000000000000015861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:58:36.440{8223a6b9-2b9b-6902-1802-000000002c00}2672C:\Windows\SysWOW64\getmac.exesoc101win11\Administrator +534500x800000000000000015862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:58:36.440{8223a6b9-2b9b-6902-1902-000000002c00}4680C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:58:59.959{8223a6b9-2b9a-6902-1702-000000002c00}13136C:\Users\Administrator\AppData\Local\Temp\chocolatey\33bf1caabaec04f3c443bf7b\vs_bootstrapper_d15\vs_setup_bootstrapper.exesoc101win11\Administrator +534500x800000000000000015864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:58:59.999{8223a6b9-2b99-6902-1602-000000002c00}2588C:\Users\Administrator\AppData\Local\Temp\chocolatey\Visual Studio Installer\16.11.52\vs_Setup.exesoc101win11\Administrator +534500x800000000000000015865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:00.935{8223a6b9-2bb4-6902-1c02-000000002c00}7352C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.windows.exesoc101win11\Administrator +534500x800000000000000015866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:00.941{8223a6b9-2bb4-6902-1d02-000000002c00}6240C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:01.789{8223a6b9-2bb2-6902-1b02-000000002c00}12248C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exesoc101win11\Administrator +534500x800000000000000015868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:08.714{8223a6b9-2bbc-6902-1e02-000000002c00}12644C:\ProgramData\chocolatey\tools\checksum.exesoc101win11\Administrator +534500x800000000000000015869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:18.916{8223a6b9-2bc6-6902-2202-000000002c00}11808C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.windows.exesoc101win11\Administrator +534500x800000000000000015870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:18.918{8223a6b9-2bc6-6902-2302-000000002c00}5500C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:28.337{8223a6b9-2bd0-6902-2502-000000002c00}3876C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000015872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:28.362{8223a6b9-2bd0-6902-2602-000000002c00}12560C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:28.497{8223a6b9-2bd0-6902-2702-000000002c00}10108C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000015874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:28.497{8223a6b9-2bd0-6902-2802-000000002c00}9520C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:28.725{8223a6b9-273b-6902-3f00-000000002c00}2988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:30.703{8223a6b9-2bd1-6902-2902-000000002c00}1108C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.Build.UnGAC,version=16.11.6.2522506,chip=neutral,language=neutral\Microsoft.Build.UnGAC.exesoc101win11\Administrator +534500x800000000000000015877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:30.720{8223a6b9-2bd1-6902-2a02-000000002c00}12900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:37.424{8223a6b9-2bd9-6902-2b02-000000002c00}7684C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000015879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:37.426{8223a6b9-2bd9-6902-2c02-000000002c00}13092C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:37.566{8223a6b9-2bd9-6902-2d02-000000002c00}12524C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000015881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:37.566{8223a6b9-2bd9-6902-2e02-000000002c00}3496C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:38.199{8223a6b9-2bd9-6902-2f02-000000002c00}13100C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000015883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:38.199{8223a6b9-2bd9-6902-3002-000000002c00}848C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:38.690{8223a6b9-2bda-6902-3102-000000002c00}11652C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000015885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:38.690{8223a6b9-2bda-6902-3202-000000002c00}8668C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:41.824{8223a6b9-2bc9-6902-2402-000000002c00}4628C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exesoc101win11\Administrator +534500x800000000000000015887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:42.006{8223a6b9-2bbf-6902-2102-000000002c00}5216C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exesoc101win11\Administrator +534500x800000000000000015888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:43.214{8223a6b9-2bbd-6902-2002-000000002c00}10552C:\Users\Administrator\AppData\Local\Temp\chocolatey\82fa8b73c938f87e9e9285\vs_bootstrapper_d15\vs_setup_bootstrapper.exesoc101win11\Administrator +534500x800000000000000015889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:43.245{8223a6b9-2bbc-6902-1f02-000000002c00}6432C:\Users\Administrator\AppData\Local\Temp\chocolatey\visualstudio2019buildtools\16.11.52\vs_BuildTools.exesoc101win11\Administrator +534500x800000000000000015890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:43.572{8223a6b9-2bdf-6902-3702-000000002c00}3760C:\Windows\System32\shutdown.exesoc101win11\Administrator +534500x800000000000000015891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:43.574{8223a6b9-2bdf-6902-3802-000000002c00}2864C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:46.391{8223a6b9-2bdb-6902-3402-000000002c00}3372C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:49.100{8223a6b9-2be3-6902-4002-000000002c00}8436C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:49.241{8223a6b9-2be4-6902-4102-000000002c00}11540C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:51.934{8223a6b9-2be7-6902-4402-000000002c00}3108C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000015896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:51.936{8223a6b9-2be7-6902-4202-000000002c00}2348C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000015897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:51.938{8223a6b9-2be7-6902-4302-000000002c00}13148C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:52.047{8223a6b9-2be8-6902-4702-000000002c00}3100C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000015899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:52.051{8223a6b9-2be7-6902-4502-000000002c00}3796C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000015900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:52.051{8223a6b9-2be7-6902-4602-000000002c00}10872C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:54.280{8223a6b9-2bea-6902-4f02-000000002c00}9464C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000015902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:54.280{8223a6b9-2bea-6902-5002-000000002c00}10396C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000015903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:54.295{8223a6b9-2bea-6902-4c02-000000002c00}4184C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000015904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:54.299{8223a6b9-2bea-6902-4e02-000000002c00}5692C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000015905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:54.301{8223a6b9-2bea-6902-4d02-000000002c00}7356C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:54.309{8223a6b9-2bea-6902-4a02-000000002c00}2900C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 14:59:54.314{8223a6b9-2bea-6902-4b02-000000002c00}6656C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:01.464{8223a6b9-2a44-6902-a701-000000002c00}7872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:05.800{8223a6b9-2b9b-6902-1a02-000000002c00}11812C:\Windows\SysWOW64\wbem\WmiPrvSE.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000015910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:07.832{8223a6b9-2bf7-6902-5202-000000002c00}11020C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000015911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:07.834{8223a6b9-2bf7-6902-5302-000000002c00}10512C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:07.915{8223a6b9-2bf7-6902-5402-000000002c00}12964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000015913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:07.915{8223a6b9-2bf7-6902-5502-000000002c00}3760C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:08.383{8223a6b9-2bda-6902-3302-000000002c00}10636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:17.719{8223a6b9-2c01-6902-5802-000000002c00}3792C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000015916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:17.723{8223a6b9-2c01-6902-5602-000000002c00}9684C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000015917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:17.725{8223a6b9-2c01-6902-5702-000000002c00}7284C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:21.933{8223a6b9-2be3-6902-3f02-000000002c00}3504C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:21.935{8223a6b9-2be3-6902-3d02-000000002c00}6344C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:21.975{8223a6b9-2be1-6902-3c02-000000002c00}7720C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:23.516{8223a6b9-2c02-6902-5a02-000000002c00}7552C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:23.887{8223a6b9-2c07-6902-5c02-000000002c00}2964C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:25.161{8223a6b9-2c05-6902-5b02-000000002c00}10136C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:25.161{8223a6b9-2be3-6902-3e02-000000002c00}8324C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:25.161{8223a6b9-2be0-6902-3b02-000000002c00}5460C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:25.230{8223a6b9-2be0-6902-3a02-000000002c00}1632C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:25.257{8223a6b9-2bdf-6902-3602-000000002c00}9588C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:25.275{8223a6b9-2be0-6902-3902-000000002c00}12644C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000015929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:26.652{8223a6b9-2c0a-6902-6102-000000002c00}4292C:\Windows\SysWOW64\tasklist.exesoc101win11\Administrator +534500x800000000000000015930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:26.654{8223a6b9-2c0a-6902-6202-000000002c00}6116C:\Windows\SysWOW64\find.exesoc101win11\Administrator +534500x800000000000000015931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:26.656{8223a6b9-2c0a-6902-5f02-000000002c00}3440C:\Windows\SysWOW64\cmd.exesoc101win11\Administrator +534500x800000000000000015932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:26.660{8223a6b9-2c0a-6902-6002-000000002c00}8352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.082{8223a6b9-2c0c-6902-6502-000000002c00}8536C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.417{8223a6b9-2764-6902-ea00-000000002c00}11532C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.419{8223a6b9-2be9-6902-4802-000000002c00}12184C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.exesoc101win11\Administrator +534500x800000000000000015936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.419{8223a6b9-275a-6902-d700-000000002c00}1316C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000015937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.423{8223a6b9-2763-6902-e500-000000002c00}6124C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.425{8223a6b9-2763-6902-e700-000000002c00}11056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.433{8223a6b9-274a-6902-af00-000000002c00}7604C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000015940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.435{8223a6b9-2af0-6902-da01-000000002c00}9448C:\ProgramData\chocolatey\bin\choco.exesoc101win11\Administrator +534500x800000000000000015941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.443{8223a6b9-274d-6902-c000-000000002c00}8760C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exesoc101win11\Administrator +534500x800000000000000015942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.443{8223a6b9-275a-6902-d500-000000002c00}3152C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000015943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.455{8223a6b9-275d-6902-dd00-000000002c00}10820C:\Windows\System32\SecurityHealthSystray.exesoc101win11\Administrator +534500x800000000000000015944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.474{8223a6b9-2aec-6902-d701-000000002c00}5220C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000015945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.474{8223a6b9-274a-6902-ab00-000000002c00}7488C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exesoc101win11\Administrator +534500x800000000000000015946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.482{8223a6b9-27b0-6902-4e01-000000002c00}9820C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000015947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.486{8223a6b9-289b-6902-6d01-000000002c00}6484C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exesoc101win11\Administrator +534500x800000000000000015948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.492{8223a6b9-2af1-6902-db01-000000002c00}8360C:\ProgramData\chocolatey\choco.exesoc101win11\Administrator +534500x800000000000000015949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.494{8223a6b9-2bf0-6902-5102-000000002c00}9120C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exesoc101win11\Administrator +534500x800000000000000015950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.494{8223a6b9-274c-6902-bd00-000000002c00}8244C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exesoc101win11\Administrator +534500x800000000000000015951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.502{8223a6b9-275a-6902-d900-000000002c00}1120C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000015952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.548{8223a6b9-273d-6902-6500-000000002c00}4704C:\Windows\System32\vm3dservice.exeNT AUTHORITY\SYSTEM +534500x800000000000000015953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.565{8223a6b9-275a-6902-d800-000000002c00}2220C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.589{8223a6b9-2be9-6902-4902-000000002c00}12900C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exesoc101win11\Administrator +534500x800000000000000015955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.616{8223a6b9-275a-6902-d600-000000002c00}1032C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exesoc101win11\Administrator +534500x800000000000000015956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.648{8223a6b9-2aed-6902-d901-000000002c00}1248C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000015957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.693{8223a6b9-2aec-6902-d801-000000002c00}7660C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000015958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.820{8223a6b9-275d-6902-df00-000000002c00}10892C:\Program Files\VMware\VMware Tools\vmtoolsd.exesoc101win11\Administrator +534500x800000000000000015959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.902{8223a6b9-275a-6902-da00-000000002c00}10276C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\WindowsTerminal.exesoc101win11\Administrator +534500x800000000000000015960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.919{8223a6b9-276c-6902-ff00-000000002c00}11896C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\WebViewHost.exesoc101win11\Administrator +534500x800000000000000015961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:29.969{8223a6b9-29b5-6902-8201-000000002c00}9672C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000015962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.015{8223a6b9-27c9-6902-5c01-000000002c00}12296C:\Windows\System32\mmc.exesoc101win11\Administrator +534500x800000000000000015963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.092{8223a6b9-2768-6902-ef00-000000002c00}12008C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.096{8223a6b9-276a-6902-f300-000000002c00}11516C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.097{8223a6b9-2798-6902-4401-000000002c00}6528C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.099{8223a6b9-2763-6902-e600-000000002c00}5048C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.112{8223a6b9-276d-6902-0401-000000002c00}10292C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.112{8223a6b9-2a07-6902-8901-000000002c00}13240C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.113{8223a6b9-2761-6902-e300-000000002c00}5256C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.150{8223a6b9-2a07-6902-8b01-000000002c00}3512C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.203{8223a6b9-276d-6902-0701-000000002c00}11204C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.204{8223a6b9-276d-6902-0801-000000002c00}11248C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.205{8223a6b9-2a08-6902-8e01-000000002c00}1304C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.213{8223a6b9-2a07-6902-8c01-000000002c00}4168C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.230{8223a6b9-2abc-6902-bc01-000000002c00}4656C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.253{8223a6b9-276d-6902-0601-000000002c00}7800C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.270{8223a6b9-2a44-6902-a401-000000002c00}9748C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.309{8223a6b9-2b3c-6902-0102-000000002c00}10320C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.345{8223a6b9-2a62-6902-b301-000000002c00}9384C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.347{8223a6b9-2a1c-6902-9e01-000000002c00}4684C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.347{8223a6b9-2a08-6902-9001-000000002c00}11524C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.347{8223a6b9-2a55-6902-ae01-000000002c00}12532C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.394{8223a6b9-276d-6902-0901-000000002c00}12252C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.400{8223a6b9-2a07-6902-8a01-000000002c00}2884C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000015985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.402{8223a6b9-2784-6902-2f01-000000002c00}1820C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:30.426{8223a6b9-276d-6902-0501-000000002c00}11712C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:31.288{8223a6b9-2762-6902-e400-000000002c00}10772C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000015988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:31.956{8223a6b9-2c08-6902-5e02-000000002c00}4536C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exesoc101win11\Administrator +534500x800000000000000015989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:31.972{8223a6b9-276e-6902-0b01-000000002c00}12436C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exesoc101win11\Administrator +534500x800000000000000015990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.130{8223a6b9-275f-6902-e000-000000002c00}11028C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administrator +534500x800000000000000015991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.194{8223a6b9-274e-6902-c200-000000002c00}9108C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exesoc101win11\Administrator +534500x800000000000000015992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.214{8223a6b9-274b-6902-b800-000000002c00}4648C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exesoc101win11\Administrator +534500x800000000000000015993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.220{8223a6b9-274d-6902-c100-000000002c00}8820C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.232{8223a6b9-274b-6902-b700-000000002c00}5156C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exesoc101win11\Administrator +534500x800000000000000015995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.259{8223a6b9-2750-6902-c800-000000002c00}9616C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000015996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.265{8223a6b9-27a7-6902-4501-000000002c00}1572C:\Windows\ImmersiveControlPanel\SystemSettings.exesoc101win11\Administrator +534500x800000000000000015997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.301{8223a6b9-274e-6902-c500-000000002c00}9016C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.303{8223a6b9-274e-6902-c400-000000002c00}8860C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000015999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.303{8223a6b9-274e-6902-c300-000000002c00}8884C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000016000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.313{8223a6b9-274d-6902-bf00-000000002c00}8748C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000016001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.327{8223a6b9-274e-6902-c600-000000002c00}7532C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000016002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.462{8223a6b9-2749-6902-a700-000000002c00}7152C:\Windows\explorer.exesoc101win11\Administrator +534500x800000000000000016003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.496{8223a6b9-2c07-6902-5d02-000000002c00}6588C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.498{8223a6b9-276c-6902-0001-000000002c00}11444C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.498{8223a6b9-2a44-6902-a501-000000002c00}10496C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.502{8223a6b9-2830-6902-6501-000000002c00}5812C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.502{8223a6b9-2756-6902-d100-000000002c00}8180C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.508{8223a6b9-2749-6902-9c00-000000002c00}6728C:\Windows\System32\sihost.exesoc101win11\Administrator +534500x800000000000000016009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.508{8223a6b9-27a7-6902-4601-000000002c00}6768C:\Windows\System32\ApplicationFrameHost.exesoc101win11\Administrator +534500x800000000000000016010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.510{8223a6b9-274f-6902-c700-000000002c00}9412C:\Windows\System32\ctfmon.exesoc101win11\Administrator +534500x800000000000000016011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.510{8223a6b9-274c-6902-bc00-000000002c00}8220C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.517{8223a6b9-2749-6902-a800-000000002c00}7196C:\Windows\System32\ShellHost.exesoc101win11\Administrator +534500x800000000000000016013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.524{8223a6b9-274c-6902-ba00-000000002c00}7276C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.571{8223a6b9-2749-6902-a200-000000002c00}6980C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000016015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.632{8223a6b9-274b-6902-b500-000000002c00}8004C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000016016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.632{8223a6b9-274c-6902-bb00-000000002c00}7256C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000016017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.634{8223a6b9-2749-6902-9f00-000000002c00}6836C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000016018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.640{8223a6b9-2749-6902-9e00-000000002c00}6780C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000016019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.644{8223a6b9-27b8-6902-5901-000000002c00}4572C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000016020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.662{8223a6b9-2749-6902-a000-000000002c00}6896C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000016021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.737{8223a6b9-2c0f-6902-6802-000000002c00}1064C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.853{8223a6b9-2c10-6902-6a02-000000002c00}2012C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.949{8223a6b9-2c0c-6902-6302-000000002c00}1916C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:32.957{8223a6b9-27a9-6902-4701-000000002c00}7776C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.038{8223a6b9-273b-6902-3c00-000000002c00}2944C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.052{8223a6b9-2c10-6902-6902-000000002c00}3168C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.163{8223a6b9-2c11-6902-6c02-000000002c00}3208C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.171{8223a6b9-2c10-6902-6b02-000000002c00}6424C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000016029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.201{8223a6b9-273b-6902-3500-000000002c00}2636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.203{8223a6b9-275d-6902-de00-000000002c00}10840C:\Windows\System32\SecurityHealthService.exeNT AUTHORITY\SYSTEM +534500x800000000000000016031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.205{8223a6b9-273d-6902-5d00-000000002c00}4476C:\Program Files\VMware\VMware Tools\vmtoolsd.exeNT AUTHORITY\SYSTEM +534500x800000000000000016032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.351{8223a6b9-273d-6902-5600-000000002c00}4328C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.404{8223a6b9-273f-6902-6f00-000000002c00}5948C:\Windows\System32\AggregatorHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.422{8223a6b9-27b8-6902-5601-000000002c00}11788C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.440{8223a6b9-274a-6902-b300-000000002c00}7844C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.440{8223a6b9-273c-6902-4700-000000002c00}3552C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.440{8223a6b9-273b-6902-2b00-000000002c00}2100C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.442{8223a6b9-273a-6902-2100-000000002c00}1768C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.444{8223a6b9-2c0c-6902-6402-000000002c00}1452C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.455{8223a6b9-273a-6902-1400-000000002c00}1200C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.460{8223a6b9-2ac6-6902-bf01-000000002c00}7708C:\Windows\System32\msiexec.exeNT AUTHORITY\SYSTEM +534500x800000000000000016042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.465{8223a6b9-273c-6902-4600-000000002c00}3424C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.467{8223a6b9-273b-6902-3700-000000002c00}2776C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.469{8223a6b9-273f-6902-6c00-000000002c00}5752C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.471{8223a6b9-2753-6902-cf00-000000002c00}3348C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.473{8223a6b9-2b4b-6902-0302-000000002c00}5780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.475{8223a6b9-273e-6902-6900-000000002c00}5412C:\Windows\System32\msdtc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.475{8223a6b9-273b-6902-3200-000000002c00}2536C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.475{8223a6b9-273b-6902-2c00-000000002c00}2132C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.477{8223a6b9-273a-6902-1900-000000002c00}1492C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.483{8223a6b9-273c-6902-4a00-000000002c00}3580C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.485{8223a6b9-273d-6902-5b00-000000002c00}4460C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.489{8223a6b9-2740-6902-7900-000000002c00}5732C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\SYSTEM +534500x800000000000000016054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.489{8223a6b9-273d-6902-5300-000000002c00}4100C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.491{8223a6b9-274a-6902-b400-000000002c00}7896C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.491{8223a6b9-273c-6902-4b00-000000002c00}3588C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.497{8223a6b9-273d-6902-5800-000000002c00}4384C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exeNT AUTHORITY\SYSTEM +534500x800000000000000016058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.499{8223a6b9-2a62-6902-b101-000000002c00}5340C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.517{8223a6b9-27a9-6902-4801-000000002c00}8196C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.523{8223a6b9-27b8-6902-5801-000000002c00}9400C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.568{8223a6b9-273d-6902-5200-000000002c00}3936C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.570{8223a6b9-273a-6902-1a00-000000002c00}1500C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.578{8223a6b9-2748-6902-9900-000000002c00}6560C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.592{8223a6b9-273a-6902-2800-000000002c00}1616C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.598{8223a6b9-273a-6902-1c00-000000002c00}1520C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.622{8223a6b9-273b-6902-4100-000000002c00}3116C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.635{8223a6b9-27a9-6902-4a01-000000002c00}2812C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.689{8223a6b9-273a-6902-2900-000000002c00}1404C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.745{8223a6b9-2c01-6902-5902-000000002c00}1428C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.747{8223a6b9-2a66-6902-b501-000000002c00}9788C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.782{8223a6b9-2750-6902-c900-000000002c00}9676C:\Windows\System32\SearchIndexer.exeNT AUTHORITY\SYSTEM +534500x800000000000000016072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.960{8223a6b9-273d-6902-5700-000000002c00}4340C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:33.980{8223a6b9-273d-6902-6100-000000002c00}4528C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM + +2553225500x800000000000000016074Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:00:35.156GetConfigurationOptionsFailed to open service configuration with error -2030566912 - Last error: The media is write protected. + +2553225500x800000000000000016075Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:00:35.156GetConfigurationOptionsFailed to open service configuration with error -2030566912 - Last error: The media is write protected. +434400x800000000000000016076Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:00:50.653Started15.154.90 +534500x800000000000000016077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:45.735{8223a6b9-2c1d-6902-0400-000000002d00}484C:\Windows\System32\autochk.exeNT AUTHORITY\SYSTEM +534500x800000000000000016078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:46.271{8223a6b9-2c1d-6902-0500-000000002d00}572C:\Windows\System32\smss.exeNT AUTHORITY\SYSTEM +534500x800000000000000016079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:46.303{8223a6b9-2c1e-6902-0700-000000002d00}688C:\Windows\System32\smss.exeNT AUTHORITY\SYSTEM +534500x800000000000000016080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:47.788{8223a6b9-2c1f-6902-1f00-000000002d00}1688C:\Windows\System32\upfc.exeNT AUTHORITY\SYSTEM +534500x800000000000000016081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:50.028{8223a6b9-2c21-6902-5100-000000002d00}4040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:50.351{8223a6b9-2c21-6902-5200-000000002d00}4084C:\Program Files\osquery\osqueryd\osqueryd.exeNT AUTHORITY\SYSTEM +534500x800000000000000016083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:51.041{8223a6b9-2c20-6902-3100-000000002d00}2348C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:51.141{8223a6b9-2c20-6902-4500-000000002d00}3360C:\Windows\System32\taskhostw.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:51.251{8223a6b9-2c20-6902-4100-000000002d00}2580C:\Windows\System32\dxgiadaptercache.exeNT AUTHORITY\SYSTEM +534500x800000000000000016086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:51.486{8223a6b9-2c22-6902-6200-000000002d00}4904C:\Windows\System32\ClipRenew.exeNT AUTHORITY\SYSTEM +534500x800000000000000016087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.353{8223a6b9-2c24-6902-7000-000000002d00}5952C:\Windows\System32\reg.exeNT AUTHORITY\SYSTEM +534500x800000000000000016088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.415{8223a6b9-2c24-6902-7100-000000002d00}5972C:\Windows\System32\find.exeNT AUTHORITY\SYSTEM +534500x800000000000000016089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.417{8223a6b9-2c24-6902-6e00-000000002d00}5904C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000016090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.459{8223a6b9-2c24-6902-7400-000000002d00}6048C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000016091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.463{8223a6b9-2c24-6902-7300-000000002d00}6020C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000016092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.471{8223a6b9-2c20-6902-3900-000000002d00}2976C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000016093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.473{8223a6b9-2c23-6902-6500-000000002d00}5296C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.570{8223a6b9-2c23-6902-6a00-000000002d00}5604C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000016095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.640{8223a6b9-2c24-6902-6f00-000000002d00}5932C:\Windows\System32\taskhostw.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:52.751{8223a6b9-2c20-6902-3800-000000002d00}2880C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:53.593{8223a6b9-2c24-6902-7600-000000002d00}6132C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:53.625{8223a6b9-2c25-6902-7900-000000002d00}2988C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:53.625{8223a6b9-2c25-6902-7a00-000000002d00}5276C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:53.688{8223a6b9-2c25-6902-7b00-000000002d00}5976C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:53.688{8223a6b9-2c25-6902-7c00-000000002d00}5972C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:53.852{8223a6b9-2c25-6902-7d00-000000002d00}2976C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:53.852{8223a6b9-2c25-6902-7e00-000000002d00}5348C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:54.997{8223a6b9-2c25-6902-7f00-000000002d00}6044C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:54.997{8223a6b9-2c25-6902-8000-000000002d00}5604C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.061{8223a6b9-2c27-6902-8100-000000002d00}5244C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.061{8223a6b9-2c27-6902-8200-000000002d00}5228C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.141{8223a6b9-2c27-6902-8300-000000002d00}2456C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.141{8223a6b9-2c27-6902-8400-000000002d00}2452C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.189{8223a6b9-2c27-6902-8500-000000002d00}5328C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.189{8223a6b9-2c27-6902-8600-000000002d00}5276C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.268{8223a6b9-2c27-6902-8700-000000002d00}5976C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.268{8223a6b9-2c27-6902-8800-000000002d00}6020C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.348{8223a6b9-2c27-6902-8900-000000002d00}5628C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.348{8223a6b9-2c27-6902-8a00-000000002d00}5280C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.411{8223a6b9-2c27-6902-8b00-000000002d00}5264C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.411{8223a6b9-2c27-6902-8c00-000000002d00}5852C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.554{8223a6b9-2c27-6902-8d00-000000002d00}5272C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.554{8223a6b9-2c27-6902-8e00-000000002d00}5256C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.618{8223a6b9-2c27-6902-8f00-000000002d00}2352C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000016121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:55.618{8223a6b9-2c27-6902-9000-000000002d00}2388C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:56.417{8223a6b9-2c28-6902-9200-000000002d00}5964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:56.937{8223a6b9-2c28-6902-9c00-000000002d00}6212C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000016124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:57.744{8223a6b9-2c28-6902-9900-000000002d00}6160C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000016125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:58.534{8223a6b9-2c28-6902-9b00-000000002d00}6204C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000016126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:58.692{8223a6b9-2c29-6902-a800-000000002d00}7140C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exesoc101win11\Administrator +534500x800000000000000016127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:59.063{8223a6b9-2c29-6902-a600-000000002d00}6976C:\Windows\System32\runonce.exesoc101win11\Administrator +534500x800000000000000016128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:59.741{8223a6b9-2c28-6902-9f00-000000002d00}6544C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000016129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:00:59.810{8223a6b9-2c28-6902-9e00-000000002d00}6492C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:02.976{8223a6b9-2c1f-6902-1200-000000002d00}1084C:\Windows\System32\LogonUI.exeNT AUTHORITY\SYSTEM +534500x800000000000000016131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:03.938{8223a6b9-2c28-6902-9300-000000002d00}5288C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:04.632{8223a6b9-2c2b-6902-ae00-000000002d00}7376C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:05.375{8223a6b9-2c2b-6902-af00-000000002d00}7408C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:05.945{8223a6b9-2c20-6902-3b00-000000002d00}3036C:\Windows\System32\ctfmon.exeNT AUTHORITY\SYSTEM +534500x800000000000000016135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:08.231{8223a6b9-2c2a-6902-a900-000000002d00}6468C:\Windows\System32\rundll32.exesoc101win11\Administrator +534500x800000000000000016136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:12.194{8223a6b9-2c31-6902-c500-000000002d00}7580C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:14.306{8223a6b9-2c34-6902-cb00-000000002d00}9580C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:14.808{8223a6b9-2c36-6902-d000-000000002d00}9824C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\WindowsTerminal.exesoc101win11\Administrator +534500x800000000000000016139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:14.812{8223a6b9-2c35-6902-cc00-000000002d00}9688C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000016140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:14.822{8223a6b9-2c35-6902-ce00-000000002d00}9756C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000016141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:14.824{8223a6b9-2c35-6902-cd00-000000002d00}9704C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:15.436{8223a6b9-2c31-6902-c100-000000002d00}3060C:\Windows\System32\mobsync.exesoc101win11\Administrator +534500x800000000000000016143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:18.777{8223a6b9-2c20-6902-3e00-000000002d00}2020C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:21.655{8223a6b9-2c28-6902-a000-000000002d00}6624C:\Windows\System32\userinit.exesoc101win11\Administrator +534500x800000000000000016145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:23.181{8223a6b9-2c20-6902-4000-000000002d00}2428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:23.345{8223a6b9-2c43-6902-db00-000000002d00}10928C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000016147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:23.347{8223a6b9-2c43-6902-dc00-000000002d00}10936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:23.467{8223a6b9-2c43-6902-dd00-000000002d00}10976C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000016149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:23.467{8223a6b9-2c43-6902-de00-000000002d00}10984C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:23.563{8223a6b9-2c3e-6902-d200-000000002d00}9404C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:25.047{8223a6b9-2c40-6902-d300-000000002d00}9912C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:27.041{8223a6b9-2c47-6902-e200-000000002d00}11224C:\Windows\System32\wlrmdr.exesoc101win11\Administrator +534500x800000000000000016153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:32.220{8223a6b9-2c47-6902-e300-000000002d00}11244C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000016154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:32.661{8223a6b9-2c24-6902-7500-000000002d00}6096C:\Windows\System32\SppExtComObj.ExeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:32.663{8223a6b9-2c24-6902-7200-000000002d00}5992C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:33.390{8223a6b9-2c4d-6902-eb00-000000002d00}6400C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +154100x800000000000000016157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:33.818{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-serviceC:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c29-6902-a100-000000002d00}6644C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000016158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:35.532{8223a6b9-2c4f-6902-ed00-000000002d00}11016C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Administrator\AppData\Roaming\LM Studio" /prefetch:4 --no-rate-limit --no-upload-gzip --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad" "--annotation=_productName=LM Studio" --annotation=_version=0.3.30+2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=37.2.0 --initial-client-data=0x4a4,0x4a8,0x4ac,0x4a0,0x4b0,0x7ff64307bb44,0x7ff64307bb50,0x7ff64307bb60C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000016159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:35.540{8223a6b9-2c49-6902-e700-000000002d00}10348C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exesoc101win11\Administrator +11241100x800000000000000016160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:36.118{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\lockfile2025-10-29 15:01:36.118soc101win11\Administrator +154100x800000000000000016161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:36.239{8223a6b9-2c50-6902-ee00-000000002d00}11316C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1708 /prefetch:2C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1LowSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000016162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:36.252{8223a6b9-2c50-6902-ef00-000000002d00}11328C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1832 /prefetch:11C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +11241100x800000000000000016163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:36.293{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 15:01:36.293soc101win11\Administrator +11241100x800000000000000016164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:36.297{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +154100x800000000000000016165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:36.348{8223a6b9-2c50-6902-f000-000000002d00}11400C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +734700x800000000000000016166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:36.579{8223a6b9-2c50-6902-ee00-000000002d00}11316C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vulkan-1.dllVulkan Loader1.4.315.0Vulkan Runtime--SHA256=B4FC93097844C72FB999663BB9E2CEBC53C9D18465DDB01E02641F2FE289B7F6trueElement Labs Inc.Validsoc101win11\Administrator +154100x800000000000000016167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:37.036{8223a6b9-2c51-6902-f100-000000002d00}11564C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +734700x800000000000000016168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:37.313{8223a6b9-2c51-6902-f100-000000002d00}11564C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Windows\System32\vulkan-1.dll1.3.300.0Vulkan LoaderVulkan Runtime--SHA256=544DE63A0E4D7D88833708DF2644774CB41872B370E63EC93D30BEA4620AA640false-Unavailablesoc101win11\Administrator +11241100x800000000000000016169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:37.379{8223a6b9-2c4f-6902-ed00-000000002d00}11016C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\958f5d02-4f32-4565-927f-7ccfc00137bf.dmp2025-10-29 15:01:37.379soc101win11\Administrator +534500x800000000000000016170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:37.443{8223a6b9-2c51-6902-f100-000000002d00}11564C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000016171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:37.456{8223a6b9-2c51-6902-f200-000000002d00}11660C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000016172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:39.950{8223a6b9-2c51-6902-f300-000000002d00}11748C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000016173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:39.952{8223a6b9-2c51-6902-f400-000000002d00}11756C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000016174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:39.968{8223a6b9-2c53-6902-f500-000000002d00}11884C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +11241100x800000000000000016175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:40.116{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 15:01:36.293soc101win11\Administrator +11241100x800000000000000016176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:40.116{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +11241100x800000000000000016177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:40.469{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\blob_storage\5b4fa7f4-9b95-4e4c-b00f-e692770b14072025-10-29 15:01:40.469soc101win11\Administrator +11241100x800000000000000016178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:40.477{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG.old~RFeaec.TMP2025-10-29 15:01:40.477soc101win11\Administrator +11241100x800000000000000016179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:40.479{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG2025-10-29 13:26:00.054soc101win11\Administrator +534500x800000000000000016180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:41.595{8223a6b9-2c55-6902-fb00-000000002d00}11644C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\elevation_service.exeNT AUTHORITY\SYSTEM +534500x800000000000000016181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:41.844{8223a6b9-2c55-6902-0001-000000002d00}12428C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:41.862{8223a6b9-2c55-6902-0201-000000002d00}12604C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000016183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:42.277{8223a6b9-2c56-6902-0401-000000002d00}12688C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:42.951{8223a6b9-2c55-6902-fe00-000000002d00}12352C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000016185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:42.953{8223a6b9-2c55-6902-ff00-000000002d00}12360C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000016186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.142{8223a6b9-2c57-6902-0501-000000002d00}12824C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000016187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.249{8223a6b9-2c57-6902-0601-000000002d00}12896C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000016188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.262{8223a6b9-2c57-6902-0701-000000002d00}12904C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000016189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.354{8223a6b9-2c57-6902-0a01-000000002d00}12996C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2c57-6902-0701-000000002d00}12904C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +154100x800000000000000016190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.355{8223a6b9-2c57-6902-0b01-000000002d00}13004C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exe"C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe" -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2c57-6902-0601-000000002d00}12896C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"soc101win11\Administrator +534500x800000000000000016191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.495{8223a6b9-2c57-6902-0a01-000000002d00}12996C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000016192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.495{8223a6b9-2c57-6902-0b01-000000002d00}13004C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000016193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.497{8223a6b9-2c57-6902-0701-000000002d00}12904C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000016194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.497{8223a6b9-2c57-6902-0601-000000002d00}12896C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000016195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.499{8223a6b9-2c57-6902-0901-000000002d00}12920C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.499{8223a6b9-2c57-6902-0801-000000002d00}12912C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000016197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.514{8223a6b9-2c57-6902-0c01-000000002d00}13044C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000016198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.519{8223a6b9-2c57-6902-0d01-000000002d00}13052C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000016199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.565{8223a6b9-2c57-6902-0c01-000000002d00}13044C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000016200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.567{8223a6b9-2c57-6902-0d01-000000002d00}13052C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000016201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.569{8223a6b9-2c57-6902-0f01-000000002d00}13068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:43.569{8223a6b9-2c57-6902-0e01-000000002d00}13060C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:46.079{8223a6b9-2c59-6902-1001-000000002d00}13216C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exesoc101win11\Administrator +534500x800000000000000016204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:46.514{8223a6b9-2c54-6902-f700-000000002d00}12048C:\Windows\System32\BdeUISrv.exesoc101win11\Administrator +534500x800000000000000016205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:46.676{8223a6b9-2c5a-6902-1401-000000002d00}12724C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:49.324{8223a6b9-2c5d-6902-1f01-000000002d00}13644C:\Windows\System32\dxgiadaptercache.exeNT AUTHORITY\SYSTEM +11241100x800000000000000016207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:50.512{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\370a94cc-61d8-4262-987a-d8dda6d23303.tmp2025-10-29 15:01:50.512soc101win11\Administrator +11241100x800000000000000016208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:50.532{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Preferences~RF1123b.TMP2025-10-29 15:01:50.532soc101win11\Administrator +16341600x800000000000000016209Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:01:50.555C:\Users\research\Desktop\systernals\sysmon-llm-observe-deepseek.xmlSHA256=B762E364A8D20144E24A03535CBB271351671D957EB34ECB1E14ED912028BD6F +534500x800000000000000016210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:50.555{8223a6b9-2c5e-6902-2101-000000002d00}13808C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +534500x800000000000000016211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:51.409{8223a6b9-2c23-6902-6b00-000000002d00}5636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:52.846{8223a6b9-2c55-6902-0301-000000002d00}12616C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000016213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:54.724{8223a6b9-2c49-6902-e800-000000002d00}10032C:\Windows\System32\rundll32.exesoc101win11\Administrator +534500x800000000000000016214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:54.847{8223a6b9-2c62-6902-2301-000000002d00}14124C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000016215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:57.848{8223a6b9-2c65-6902-2901-000000002d00}2960C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000016216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:57.852{8223a6b9-2c65-6902-2a01-000000002d00}3080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:57.981{8223a6b9-2c65-6902-2c01-000000002d00}3944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000016218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:57.984{8223a6b9-2c65-6902-2d01-000000002d00}8000C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000016219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:01:58.312{8223a6b9-2c66-6902-2e01-000000002d00}13768C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Users\Administrator\AppData\Local\Programs\Ollama\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=A9F9F07C38F90275DE99D3C28B105D7EA18DAD02D024D32D8A919E372363E9EF{8223a6b9-2c64-6902-2801-000000002d00}14328C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" soc101win11\Administrator +534500x800000000000000016220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:00.603{8223a6b9-2c63-6902-2401-000000002d00}14164C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:00.987{8223a6b9-2c65-6902-2b01-000000002d00}3652C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:01.164{8223a6b9-2c64-6902-2501-000000002d00}14208C:\Windows\SysWOW64\runonce.exesoc101win11\Administrator +534500x800000000000000016223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:02.291{8223a6b9-2c6a-6902-3101-000000002d00}14100C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000016224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:02.292{8223a6b9-2c6a-6902-3201-000000002d00}14076C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:05.112{8223a6b9-2c66-6902-2e01-000000002d00}13768C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000016226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:05.117{8223a6b9-2c66-6902-2f01-000000002d00}4764C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:05.315{8223a6b9-2c6a-6902-3301-000000002d00}14136C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +154100x800000000000000016228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:06.134{8223a6b9-2c6e-6902-3401-000000002d00}6132C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Users\Administrator\AppData\Local\Programs\Ollama\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=A9F9F07C38F90275DE99D3C28B105D7EA18DAD02D024D32D8A919E372363E9EF{8223a6b9-2c64-6902-2801-000000002d00}14328C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" soc101win11\Administrator +534500x800000000000000016229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:07.309{8223a6b9-2c6f-6902-3601-000000002d00}4480C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000016230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:07.314{8223a6b9-2c6f-6902-3701-000000002d00}4024C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:07.439{8223a6b9-2c64-6902-2801-000000002d00}14328C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000016232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:09.892{8223a6b9-2c6e-6902-3401-000000002d00}6132C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000016233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:09.895{8223a6b9-2c6e-6902-3501-000000002d00}6232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:10.329{8223a6b9-2c6f-6902-3801-000000002d00}8836C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:11.246{8223a6b9-2c73-6902-3a01-000000002d00}7836C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:11.246{8223a6b9-2c73-6902-3901-000000002d00}9768C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:11.252{8223a6b9-2c73-6902-3b01-000000002d00}6208C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:18.443{8223a6b9-2c5c-6902-1d01-000000002d00}13396C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:19.471{8223a6b9-2c64-6902-2701-000000002d00}14268C:\Windows\System32\Taskmgr.exesoc101win11\Administrator +534500x800000000000000016240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:19.519{8223a6b9-2c5c-6902-1c01-000000002d00}13388C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +154100x800000000000000016241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:23.021{8223a6b9-2c7f-6902-3c01-000000002d00}4764C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c29-6902-a100-000000002d00}6644C:\Windows\explorer.exeC:\WINDOWS\Explorer.EXEsoc101win11\Administrator +154100x800000000000000016242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:23.567{8223a6b9-2c7f-6902-3d01-000000002d00}11880C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Administrator\AppData\Roaming\LM Studio" /prefetch:4 --no-rate-limit --no-upload-gzip --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad" "--annotation=_productName=LM Studio" --annotation=_version=0.3.30+2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=37.2.0 --initial-client-data=0x4a4,0x4a8,0x4ac,0x4a0,0x4b0,0x7ff64307bb44,0x7ff64307bb50,0x7ff64307bb60C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c7f-6902-3c01-000000002d00}4764C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000016243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:24.300{8223a6b9-2c80-6902-3e01-000000002d00}3944C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=renderer --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --app-user-model-id="electron.app.LM Studio" --app-path="C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app" --no-sandbox --no-zygote --node-integration-in-worker --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --time-ticks-at-unix-epoch=-1761750040301244 --launch-time-ticks=103985956 --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000016244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:24.353{8223a6b9-2c7f-6902-3c01-000000002d00}4764C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:24.412{8223a6b9-2c7f-6902-3d01-000000002d00}11880C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +154100x800000000000000016246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:25.288{8223a6b9-2c81-6902-3f01-000000002d00}9920C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\js-code-sandbox\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +154100x800000000000000016247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:25.401{8223a6b9-2c81-6902-4001-000000002d00}1752C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\rag-v1\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000016248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:26.618{8223a6b9-2c28-6902-9500-000000002d00}5940C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:26.691{8223a6b9-2c55-6902-0101-000000002d00}12508C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +11241100x800000000000000016250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:27.302{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG.old~RF1a1d8.TMP2025-10-29 15:02:27.301soc101win11\Administrator +11241100x800000000000000016251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:27.302{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG2025-10-29 13:26:11.066soc101win11\Administrator +534500x800000000000000016252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.073{8223a6b9-2c81-6902-4201-000000002d00}11672C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.076{8223a6b9-2c81-6902-3f01-000000002d00}9920C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000016254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.092{8223a6b9-2c83-6902-4701-000000002d00}14172C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000016255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.106{8223a6b9-2c81-6902-4101-000000002d00}1860C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.106{8223a6b9-2c81-6902-4001-000000002d00}1752C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000016257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.115{8223a6b9-2c83-6902-4801-000000002d00}7980C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000016258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.116{8223a6b9-2c83-6902-4401-000000002d00}12164C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000016259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.123{8223a6b9-2c83-6902-4501-000000002d00}12204C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.125{8223a6b9-2c83-6902-4301-000000002d00}12000C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000016261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:28.128{8223a6b9-2c83-6902-4601-000000002d00}14164C:\Windows\System32\conhost.exesoc101win11\Administrator +354300x800000000000000016262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:27.707{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcpfalsefalse127.0.0.1kubernetes.docker.internal14443-false127.0.0.1kubernetes.docker.internal41343- +354300x800000000000000016263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:27.737{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administratortcpfalsefalse127.0.0.1kubernetes.docker.internal14444-false127.0.0.1kubernetes.docker.internal41343- +154100x800000000000000016264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:30.344{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3920 /prefetch:14C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000016265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:33.391{8223a6b9-2c4b-6902-e900-000000002d00}6620C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:43.488{8223a6b9-2c93-6902-4a01-000000002d00}12624C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:48.114{8223a6b9-2c1f-6902-1500-000000002d00}1268C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:48.434{8223a6b9-2c98-6902-4b01-000000002d00}10932C:\Windows\System32\appidpolicyconverter.exeNT AUTHORITY\SYSTEM +534500x800000000000000016269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:02:48.438{8223a6b9-2c98-6902-4c01-000000002d00}13416C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:01.559{8223a6b9-2ca5-6902-4e01-000000002d00}8296C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000016271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:06.037{8223a6b9-2ca9-6902-4f01-000000002d00}9648C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000016272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:06.092{8223a6b9-2c2c-6902-b700-000000002d00}8172C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:06.098{8223a6b9-2c1f-6902-2900-000000002d00}1760C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000016274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:06.106{8223a6b9-2caa-6902-5001-000000002d00}4628C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000016275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:07.693{8223a6b9-2cab-6902-5901-000000002d00}13652C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:11.380{8223a6b9-2c33-6902-c900-000000002d00}9332C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:12.296{8223a6b9-2cb0-6902-5d01-000000002d00}5236C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +534500x800000000000000016278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:16.372{8223a6b9-2caa-6902-5201-000000002d00}12000C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:27.310{8223a6b9-2c29-6902-a300-000000002d00}6792C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:32.565{8223a6b9-2c4c-6902-ea00-000000002d00}1112C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +534500x800000000000000016281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:32.906{8223a6b9-2cc4-6902-5f01-000000002d00}2596C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +154100x800000000000000016282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:36.240{8223a6b9-2cc8-6902-6101-000000002d00}7104C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0.3.30LM StudioLM StudioLM Studio-"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5549 --gpu-device-id=1029 --gpu-sub-system-id=67442093 --gpu-revision=0 --gpu-driver-version=9.17.7.4 --user-data-dir="C:\Users\Administrator\AppData\Roaming\LM Studio" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1712,i,7839167562557305564,12261403796791129413,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:10C:\WINDOWS\system32\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=EBD98C1B420975C8D40D8C5C6952160F672CC6351C4761B41C8215F64BE47080{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" --run-as-servicesoc101win11\Administrator +534500x800000000000000016283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:36.334{8223a6b9-2cc8-6902-6101-000000002d00}7104C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:36.890{8223a6b9-2caa-6902-5301-000000002d00}3032C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:41.345{8223a6b9-2ccd-6902-6201-000000002d00}9644C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:46.910{8223a6b9-2cd2-6902-6301-000000002d00}9564C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000016287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:47.714{8223a6b9-2cab-6902-5a01-000000002d00}13664C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:49.055{8223a6b9-2cd5-6902-6401-000000002d00}13400C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000016289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:03:51.442{8223a6b9-2cd6-6902-6501-000000002d00}9768C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:04:00.758{8223a6b9-2ce0-6902-6b01-000000002d00}13820C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:04:08.281{8223a6b9-2c32-6902-c600-000000002d00}1200C:\Windows\System32\dllhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:04:08.307{8223a6b9-2c34-6902-ca00-000000002d00}9520C:\Windows\System32\VSSVC.exeNT AUTHORITY\SYSTEM +534500x800000000000000016293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:04:09.379{8223a6b9-2c20-6902-4200-000000002d00}3260C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:04:13.283{8223a6b9-2caa-6902-5501-000000002d00}11224C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:04:39.151{8223a6b9-2d02-6902-6c01-000000002d00}6792C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:04:49.899{8223a6b9-2d11-6902-6f01-000000002d00}3824C:\Windows\System32\wbem\WMIADAP.exeNT AUTHORITY\SYSTEM +534500x800000000000000016297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:04:58.587{8223a6b9-2cde-6902-6801-000000002d00}13972C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:00.513{8223a6b9-2cde-6902-6601-000000002d00}1932C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:00.513{8223a6b9-2cde-6902-6701-000000002d00}14284C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:07.779{8223a6b9-2d23-6902-7001-000000002d00}3832C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000016301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:11.656{8223a6b9-2d09-6902-6e01-000000002d00}7996C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:11.855{8223a6b9-2cab-6902-5c01-000000002d00}1588C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:11.863{8223a6b9-2cab-6902-5b01-000000002d00}12596C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000016304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:22.351{8223a6b9-2d2d-6902-7801-000000002d00}14292C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:34.791{8223a6b9-2d3e-6902-7a01-000000002d00}11800C:\Windows\SysWOW64\appverif.exeNT AUTHORITY\SYSTEM +534500x800000000000000016306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:34.793{8223a6b9-2d3e-6902-7b01-000000002d00}12588C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:34.855{8223a6b9-2d3e-6902-7c01-000000002d00}6472C:\Windows\SysWOW64\appverif.exeNT AUTHORITY\SYSTEM +534500x800000000000000016308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:34.857{8223a6b9-2d3e-6902-7d01-000000002d00}11420C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:37.288{8223a6b9-2d3e-6902-7901-000000002d00}12292C:\Windows\SysWOW64\msiexec.exeNT AUTHORITY\SYSTEM +534500x800000000000000016310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:40.996{8223a6b9-2d3f-6902-7e01-000000002d00}4856C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:41.712{8223a6b9-2d44-6902-8001-000000002d00}12388C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:49.059{8223a6b9-2d4c-6902-8101-000000002d00}2372C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:49.267{8223a6b9-2d4d-6902-8201-000000002d00}14100C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:57.200{8223a6b9-2d55-6902-8401-000000002d00}8620C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000016315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:57.317{8223a6b9-2d55-6902-8301-000000002d00}8668C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000016316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:05:57.327{8223a6b9-2d55-6902-8501-000000002d00}8188C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:06:02.365{8223a6b9-2d55-6902-8601-000000002d00}3668C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:06:25.636{8223a6b9-2d71-6902-8801-000000002d00}9016C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000016319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:06:25.647{8223a6b9-2d71-6902-8901-000000002d00}12616C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:06:26.341{8223a6b9-2d72-6902-8b01-000000002d00}2832C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:06:30.390{8223a6b9-2d71-6902-8701-000000002d00}9812C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:06:31.016{8223a6b9-2d71-6902-8a01-000000002d00}13608C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:06:57.451{8223a6b9-2d91-6902-8f01-000000002d00}12512C:\Program Files (x86)\Java\jre1.8.0_431\bin\javaws.exesoc101win11\Administrator +534500x800000000000000016324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:06:58.159{8223a6b9-2d73-6902-8d01-000000002d00}9904C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000016325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:02.469{8223a6b9-2d2d-6902-7701-000000002d00}1300C:\Windows\Temp\{2EB3CAC6-EE4E-4CC3-B4B1-F7523FC312D8}\.be\winsdksetup.exesoc101win11\Administrator +534500x800000000000000016326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:02.491{8223a6b9-2d2c-6902-7601-000000002d00}3800C:\Windows\Temp\{C6F8CF72-AF68-49EC-9FBA-09FE7EAE6FCE}\.cr\winsdksetup.exesoc101win11\Administrator +534500x800000000000000016327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:02.506{8223a6b9-2d2c-6902-7501-000000002d00}1360C:\ProgramData\Microsoft\VisualStudio\Packages\Win10SDK_10.0.19041,version=10.0.19041.4\winsdksetup.exesoc101win11\Administrator +534500x800000000000000016328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:02.516{8223a6b9-2d2b-6902-7301-000000002d00}5724C:\ProgramData\Microsoft\VisualStudio\Packages\Win10SDK_10.0.19041,version=10.0.19041.4\WinSdkInstaller.exesoc101win11\Administrator +534500x800000000000000016329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:02.518{8223a6b9-2d2b-6902-7401-000000002d00}11876C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:06.350{8223a6b9-2d72-6902-8c01-000000002d00}6464C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:06.513{8223a6b9-2d44-6902-7f01-000000002d00}11216C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:07.840{8223a6b9-2d91-6902-9001-000000002d00}13984C:\Program Files (x86)\Java\jre1.8.0_431\bin\jp2launcher.exesoc101win11\Administrator +534500x800000000000000016333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:18.117{8223a6b9-2da6-6902-9101-000000002d00}14304C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Initializer,version=16.10.31303.231\VSInitializer.exesoc101win11\Administrator +534500x800000000000000016334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:23.012{8223a6b9-2daa-6902-9201-000000002d00}14300C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.ScriptedHost.Registry,version=16.11.31827.77\ScriptedSandboxSecurityZone.exesoc101win11\Administrator +534500x800000000000000016335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:23.018{8223a6b9-2daa-6902-9301-000000002d00}3472C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:46.332{8223a6b9-2c54-6902-f600-000000002d00}11976C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:53.278{8223a6b9-2dc5-6902-9401-000000002d00}8944C:\Windows\SysWOW64\msiexec.exeNT AUTHORITY\SYSTEM +534500x800000000000000016338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:07:56.959{8223a6b9-2dcc-6902-9501-000000002d00}4620C:\Windows\SysWOW64\msiexec.exeNT AUTHORITY\SYSTEM +534500x800000000000000016339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:04.681{8223a6b9-2dd4-6902-9701-000000002d00}10148C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000016340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:04.683{8223a6b9-2dd4-6902-9801-000000002d00}7232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:04.888{8223a6b9-2dd4-6902-9901-000000002d00}5656C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000016342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:04.892{8223a6b9-2dd4-6902-9a01-000000002d00}11120C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:06.222{8223a6b9-2caa-6902-5101-000000002d00}10320C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:06.804{8223a6b9-2dd5-6902-9b01-000000002d00}3112C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000016345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:06.806{8223a6b9-2dd5-6902-9c01-000000002d00}9036C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:07.458{8223a6b9-2dd6-6902-9d01-000000002d00}816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exesoc101win11\Administrator +534500x800000000000000016347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:07.460{8223a6b9-2dd6-6902-9e01-000000002d00}1012C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:10.303{8223a6b9-2c38-6902-d100-000000002d00}10052C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exesoc101win11\Administrator +534500x800000000000000016349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:12.352{8223a6b9-2c2a-6902-ac00-000000002d00}7176C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exesoc101win11\Administrator +534500x800000000000000016350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:13.746{8223a6b9-2dd8-6902-9f01-000000002d00}5344C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:08:32.427{8223a6b9-2c2c-6902-b600-000000002d00}8088C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:09:00.395{8223a6b9-2c23-6902-6d00-000000002d00}5728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:09:15.501{8223a6b9-2dd3-6902-9601-000000002d00}14140C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:09:32.883{8223a6b9-2cc5-6902-6001-000000002d00}3088C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +154100x800000000000000016355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:10:20.841{8223a6b9-2e5c-6902-a001-000000002d00}2756C:\Program Files\nodejs\node.exe24.11.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exenodeC:\Users\research\Desktop\systernals\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=B7D912484D42E7A0D0CB5B26A86410EC973A79ECE7D61AD535E2D1A97A9026E1{00000000-0000-0000-0000-000000000000}9756--- +534500x800000000000000016356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:10:28.597{8223a6b9-2e5c-6902-a001-000000002d00}2756C:\Program Files\nodejs\node.exesoc101win11\Administrator +534500x800000000000000016357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:10:48.064{8223a6b9-2c1f-6902-2600-000000002d00}1076C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:07.432{8223a6b9-2e81-6902-a201-000000002d00}9204C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveLauncher.exesoc101win11\Administrator +534500x800000000000000016359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:24.879{8223a6b9-2e9c-6902-a801-000000002d00}4364C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000016360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:24.920{8223a6b9-2e9c-6902-a901-000000002d00}4012C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000016361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:25.005{8223a6b9-2e9c-6902-a701-000000002d00}9288C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:26.504{8223a6b9-2e89-6902-a301-000000002d00}6692C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000016363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:26.506{8223a6b9-2e89-6902-a501-000000002d00}5708C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000016364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:26.510{8223a6b9-2e89-6902-a401-000000002d00}2796C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:26.510{8223a6b9-2e89-6902-a601-000000002d00}8008C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:32.608{8223a6b9-2c47-6902-e400-000000002d00}3092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:11:51.440{8223a6b9-2c23-6902-6700-000000002d00}5372C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:12:09.927{8223a6b9-2c20-6902-3c00-000000002d00}3052C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:12:13.245{8223a6b9-2eae-6902-ab01-000000002d00}13940C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000016370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:12:56.995{8223a6b9-2c40-6902-d400-000000002d00}8840C:\Windows\System32\msiexec.exeNT AUTHORITY\SYSTEM +534500x800000000000000016371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:13:06.681{8223a6b9-2e5d-6902-a101-000000002d00}3428C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:13:51.970{8223a6b9-2f2f-6902-af01-000000002d00}9376C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:13:52.010{8223a6b9-2f2f-6902-ac01-000000002d00}8612C:\Windows\System32\UsoClient.exeNT AUTHORITY\SYSTEM +534500x800000000000000016374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:14:31.981{8223a6b9-2f2f-6902-b001-000000002d00}3604C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:15:21.107{8223a6b9-2f2f-6902-ae01-000000002d00}2052C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:15:22.581{8223a6b9-2f2f-6902-ad01-000000002d00}3624C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:15:30.917{8223a6b9-2f92-6902-b601-000000002d00}10096C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:15:30.921{8223a6b9-2f92-6902-b701-000000002d00}5972C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:15:57.240{8223a6b9-2fad-6902-b901-000000002d00}9192C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:15:58.344{8223a6b9-2fae-6902-bd01-000000002d00}5800C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:15:58.432{8223a6b9-2fad-6902-b801-000000002d00}8008C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000016382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:15:59.404{8223a6b9-2c67-6902-3001-000000002d00}496C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000016383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:16:22.951{8223a6b9-2fc5-6902-bf01-000000002d00}1480C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000016384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:16:25.983{8223a6b9-2c29-6902-a700-000000002d00}7068C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000016385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:16:38.369{8223a6b9-2fae-6902-be01-000000002d00}9004C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:16:58.561{8223a6b9-2fad-6902-bc01-000000002d00}10100C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:17:00.070{8223a6b9-2fad-6902-bb01-000000002d00}3588C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:17:58.747{8223a6b9-2fad-6902-ba01-000000002d00}2424C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000016389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:03.847{8223a6b9-3025-6902-c001-000000002d00}7204C:\Windows\System32\CompatTelRunner.exeNT AUTHORITY\SYSTEM +534500x800000000000000016390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:03.857{8223a6b9-3025-6902-c101-000000002d00}6376C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:05.436{8223a6b9-302d-6902-c201-000000002d00}10176C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:05.436{8223a6b9-302d-6902-c301-000000002d00}8828C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000016393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:20.081{8223a6b9-303b-6902-c801-000000002d00}14236C:\Windows\System32\UCPDMgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000016394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:20.093{8223a6b9-303b-6902-ca01-000000002d00}1220C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:20.342{8223a6b9-303c-6902-cb01-000000002d00}7492C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:20.388{8223a6b9-303c-6902-cc01-000000002d00}4356C:\Windows\System32\tasklist.exeNT AUTHORITY\SYSTEM +534500x800000000000000016397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:20.388{8223a6b9-303c-6902-ce01-000000002d00}6392C:\Windows\System32\findstr.exeNT AUTHORITY\SYSTEM +534500x800000000000000016398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:20.403{8223a6b9-303b-6902-c501-000000002d00}11628C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000016399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:20.408{8223a6b9-303b-6902-c601-000000002d00}12540C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:23.034{8223a6b9-303b-6902-c701-000000002d00}10080C:\Windows\System32\provtool.exeNT AUTHORITY\SYSTEM +534500x800000000000000016401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:26.598{8223a6b9-303e-6902-d001-000000002d00}11276C:\Windows\System32\Defrag.exeNT AUTHORITY\SYSTEM +534500x800000000000000016402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:18:26.600{8223a6b9-303e-6902-d101-000000002d00}7708C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:00.383{8223a6b9-303c-6902-cd01-000000002d00}8672C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000016404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:18.292{8223a6b9-3070-6902-d401-000000002d00}4812C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:20.922{8223a6b9-3077-6902-de01-000000002d00}14068C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000016406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:21.621{8223a6b9-3078-6902-df01-000000002d00}3264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:23.055{8223a6b9-3079-6902-e101-000000002d00}11020C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:24.427{8223a6b9-307c-6902-e501-000000002d00}1192C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000016409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:24.436{8223a6b9-307c-6902-e301-000000002d00}1396C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000016410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:24.441{8223a6b9-307c-6902-e401-000000002d00}9848C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:25.209{8223a6b9-307d-6902-e901-000000002d00}3696C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000016412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:25.213{8223a6b9-307d-6902-e701-000000002d00}3368C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000016413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:25.215{8223a6b9-307d-6902-e801-000000002d00}14292C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:26.693{8223a6b9-307e-6902-ef01-000000002d00}4008C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000016415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:26.695{8223a6b9-307e-6902-eb01-000000002d00}14012C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000016416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:26.695{8223a6b9-307e-6902-ec01-000000002d00}10944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:26.699{8223a6b9-307e-6902-f001-000000002d00}14276C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000016418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:26.703{8223a6b9-307e-6902-ee01-000000002d00}13448C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000016419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:26.706{8223a6b9-307e-6902-ea01-000000002d00}4984C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000016420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:26.708{8223a6b9-307e-6902-ed01-000000002d00}9548C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:27.120{8223a6b9-303b-6902-c901-000000002d00}10280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000016422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:28.550{8223a6b9-303b-6902-c401-000000002d00}2296C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000016423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:58.521{8223a6b9-309e-6902-f401-000000002d00}8132C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000016424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:58.525{8223a6b9-309e-6902-f101-000000002d00}13956C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000016425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:19:58.525{8223a6b9-309e-6902-f201-000000002d00}8140C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:01.694{8223a6b9-30a1-6902-f801-000000002d00}992C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000016427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:01.696{8223a6b9-30a1-6902-f601-000000002d00}3504C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000016428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:01.698{8223a6b9-30a1-6902-f701-000000002d00}6956C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:02.779{8223a6b9-30a2-6902-fb01-000000002d00}2084C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000016430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:02.781{8223a6b9-30a2-6902-f901-000000002d00}3968C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000016431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:02.783{8223a6b9-30a2-6902-fa01-000000002d00}5828C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:03.610{8223a6b9-30a3-6902-fe01-000000002d00}8712C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000016433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:03.612{8223a6b9-30a3-6902-fc01-000000002d00}9844C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000016434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:03.614{8223a6b9-30a3-6902-fd01-000000002d00}14212C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:03.687{8223a6b9-309e-6902-f501-000000002d00}8604C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000016436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:05.436{8223a6b9-3076-6902-dd01-000000002d00}11876C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:05.439{8223a6b9-3076-6902-db01-000000002d00}8964C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:05.468{8223a6b9-3075-6902-da01-000000002d00}4608C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:06.629{8223a6b9-3074-6902-d901-000000002d00}12560C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:06.629{8223a6b9-3076-6902-dc01-000000002d00}1004C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:06.631{8223a6b9-30a5-6902-ff01-000000002d00}9720C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:06.701{8223a6b9-3074-6902-d801-000000002d00}14144C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:06.739{8223a6b9-3073-6902-d601-000000002d00}1472C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:06.761{8223a6b9-3074-6902-d701-000000002d00}5312C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000016445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:08.130{8223a6b9-30a8-6902-0302-000000002d00}13440C:\Windows\SysWOW64\tasklist.exesoc101win11\Administrator +534500x800000000000000016446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:08.130{8223a6b9-30a8-6902-0402-000000002d00}6496C:\Windows\SysWOW64\find.exesoc101win11\Administrator +534500x800000000000000016447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:08.130{8223a6b9-30a7-6902-0102-000000002d00}5176C:\Windows\SysWOW64\cmd.exesoc101win11\Administrator +534500x800000000000000016448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:08.146{8223a6b9-30a7-6902-0202-000000002d00}1520C:\Windows\System32\conhost.exesoc101win11\Administrator +16341600x800000000000000016449Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:20:14.690C:\Users\research\Desktop\systernals\sysmon-llm-observe-enhanced.xmlSHA256=2C4B1DB1D0BEB28111750DDF9C7DE237AA103703B5DDFD36C0FAC2FBA967D9D8 +534500x800000000000000016450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:14.694{8223a6b9-30ae-6902-0502-000000002d00}3052C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +11241100x800000000000000016451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:16.433{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\@vscode\ripgrep\jsconfig.json2025-10-29 15:20:16.433soc101win11\Administrator +10341000x800000000000000016452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:16.560{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7A1FDF)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:16.560{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:16.871{8223a6b9-30b0-6902-0602-000000002d00}13512C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +11241100x800000000000000016455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:17.650{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\@vscode\vscode-languagedetection\model\group1-shard1of1.bin2025-10-29 15:20:17.650soc101win11\Administrator +11241100x800000000000000016456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:17.654{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\@vscode\vscode-languagedetection\model\model.json2025-10-29 15:20:17.654soc101win11\Administrator +11241100x800000000000000016457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:17.814{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\@vscode\windows-process-tree\tsconfig.json2025-10-29 15:20:17.814soc101win11\Administrator +10341000x800000000000000016458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:18.577{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7C5D11)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:18.577{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:18.910{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\font-finder\tsconfig.json2025-10-29 15:20:18.910soc101win11\Administrator +11241100x800000000000000016461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:18.957{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\font-ligatures\tsconfig.json2025-10-29 15:20:18.957soc101win11\Administrator +11241100x800000000000000016462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:19.025{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\get-system-fonts\tsconfig.json2025-10-29 15:20:19.024soc101win11\Administrator +11241100x800000000000000016463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:19.068{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\hasown\tsconfig.json2025-10-29 15:20:19.067soc101win11\Administrator +11241100x800000000000000016464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:19.130{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\import-in-the-middle\release-please-config.json2025-10-29 15:20:19.130soc101win11\Administrator +11241100x800000000000000016465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:19.132{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\import-in-the-middle\tsconfig.json2025-10-29 15:20:19.132soc101win11\Administrator +11241100x800000000000000016466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:20.171{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\node-pty\src\tsconfig.json2025-10-29 15:20:20.171soc101win11\Administrator +10341000x800000000000000016467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:20.593{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7C5D11)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:20.593{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:20.648{8223a6b9-303c-6902-cf01-000000002d00}5988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000016470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:22.604{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7C5D11)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:22.604{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:23.878{8223a6b9-2c80-6902-3e01-000000002d00}3944C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +10341000x800000000000000016473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:24.625{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7C5D11)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:24.625{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:25.166{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\promise-stream-reader\tsconfig.json2025-10-29 15:20:25.166soc101win11\Administrator +534500x800000000000000016476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:25.342{8223a6b9-307c-6902-e601-000000002d00}13904C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000016477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:25.358{8223a6b9-3079-6902-e001-000000002d00}7980C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +11241100x800000000000000016478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:25.876{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\app\node_modules\v8-inspect-profiler\jsconfig.json2025-10-29 15:20:25.876soc101win11\Administrator +10341000x800000000000000016479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:26.700{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7C5D11)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:26.700{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:27.230{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\resources\todesktop-runtime-config.json2025-10-29 15:20:27.228soc101win11\Administrator +11241100x800000000000000016482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:27.324{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\snapshot_blob.bin2025-10-29 15:20:27.324soc101win11\Administrator +11241100x800000000000000016483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:27.334{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\ADMINI~1\AppData\Local\Temp\nsqCEE7.tmp\7z-out\v8_context_snapshot.bin2025-10-29 15:20:27.334soc101win11\Administrator +10341000x800000000000000016484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:28.728{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7C5D11)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:28.728{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:30.744{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7C5D11)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:30.744{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:32.448{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\snapshot_blob.bin2025-10-29 15:20:32.448soc101win11\Administrator +11241100x800000000000000016489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:32.452{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\v8_context_snapshot.bin2025-10-29 15:20:32.452soc101win11\Administrator +10341000x800000000000000016490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:32.758{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7A5579)|UNKNOWN(00007FF69B7A4862)|UNKNOWN(00007FF69B7A4C62)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7C52E9)|UNKNOWN(00007FF69B7C5D11)|UNKNOWN(00007FF69B7C3343)|UNKNOWN(00007FF69B7A40E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:32.758{8223a6b9-2c50-6902-f000-000000002d00}1140011404C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7A4964)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:32.768{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\todesktop-runtime-config.json2025-10-29 15:20:32.768soc101win11\Administrator +11241100x800000000000000016493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.488{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\extensions\cursor-always-local\tsconfig.json2025-10-29 15:20:33.488soc101win11\Administrator +11241100x800000000000000016494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.607{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\extensions\cursor-retrieval\tsconfig.json2025-10-29 15:20:33.607soc101win11\Administrator +11241100x800000000000000016495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.833{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\extensions\cursor-tokenize\tsconfig.json2025-10-29 15:20:33.833soc101win11\Administrator +534500x800000000000000016496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.903{8223a6b9-2c4f-6902-ed00-000000002d00}11016C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.908{8223a6b9-2c4d-6902-ec00-000000002d00}6088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.924{8223a6b9-2c50-6902-ef00-000000002d00}11328C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.971{8223a6b9-2c50-6902-ee00-000000002d00}11316C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.973{8223a6b9-2c50-6902-f000-000000002d00}11400C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.975{8223a6b9-2c57-6902-0501-000000002d00}12824C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.975{8223a6b9-2c51-6902-f200-000000002d00}11660C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.981{8223a6b9-2c53-6902-f500-000000002d00}11884C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:33.989{8223a6b9-2c86-6902-4901-000000002d00}7196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000016505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:39.681{8223a6b9-30ba-6902-0802-000000002d00}10060C:\Windows\System32\Taskmgr.exesoc101win11\Administrator +534500x800000000000000016506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:40.300{8223a6b9-30c8-6902-0902-000000002d00}10020C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000016507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:43.828{8223a6b9-30cb-6902-0a02-000000002d00}263614204C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cb-6902-0b02-000000002d00}9484C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+20a92ce|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+20a855e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e8f950|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e90228|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e90518|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24c2c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24dd52|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24da30|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24d535|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24d3e4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:43.864{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\test.txt2025-10-29 15:20:43.864soc101win11\Administrator +11241100x800000000000000016509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.160{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\@microsoft\1ds-core-js\tsconfig.json2025-10-29 15:20:44.160soc101win11\Administrator +11241100x800000000000000016510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.364{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\lockfile2025-10-29 15:01:36.118soc101win11\Administrator +10341000x800000000000000016511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.417{8223a6b9-30cb-6902-0a02-000000002d00}26367932C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0c02-000000002d00}14296C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c93|C:\WINDOWS\System32\ADVAPI32.dll+30a20|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a9c5cc|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+257b199|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+257b677|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223d8bf|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+26cbe2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d1bd2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d1cb6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+31024b8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.427{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0d02-000000002d00}3184C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.439{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 15:20:44.439soc101win11\Administrator +11241100x800000000000000016514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.441{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +10341000x800000000000000016515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.463{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0e02-000000002d00}13940C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.489{8223a6b9-30cb-6902-0b02-000000002d00}94848228C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0c02-000000002d00}14296C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.508{8223a6b9-30cb-6902-0b02-000000002d00}948414224C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0d02-000000002d00}3184C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +734700x800000000000000016518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.512{8223a6b9-30cc-6902-0c02-000000002d00}14296C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vulkan-1.dllVulkan Loader1.4.315.0Vulkan Runtime--SHA256=B4FC93097844C72FB999663BB9E2CEBC53C9D18465DDB01E02641F2FE289B7F6trueElement Labs Inc.Validsoc101win11\Administrator +10341000x800000000000000016519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.540{8223a6b9-30cb-6902-0a02-000000002d00}263614204C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0c02-000000002d00}14296C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x101451C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba7ca|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+15708d8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1570d05|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2622cba|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462a1ac|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462b8c7|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46300c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3a59ef5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+463715c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46eac03|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45ca04d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebcb4d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+252a2de|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ef0e8f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153ade2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153c961|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153818f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84e6cb|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84f88fsoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.825{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\lms-key-22025-10-29 13:25:54.480soc101win11\Administrator +10341000x800000000000000016521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.840{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0f02-000000002d00}2840C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.879{8223a6b9-30cb-6902-0b02-000000002d00}94848228C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0f02-000000002d00}2840C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +734700x800000000000000016523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:44.978{8223a6b9-30cc-6902-0f02-000000002d00}2840C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Windows\System32\vulkan-1.dll1.3.300.0Vulkan LoaderVulkan Runtime--SHA256=544DE63A0E4D7D88833708DF2644774CB41872B370E63EC93D30BEA4620AA640false-Unavailablesoc101win11\Administrator +11241100x800000000000000016524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:45.052{8223a6b9-30cb-6902-0b02-000000002d00}9484C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\38b1be9b-c47d-44ca-8093-9d06610e25af.dmp2025-10-29 15:20:45.052soc101win11\Administrator +10341000x800000000000000016525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:45.077{8223a6b9-30cb-6902-0b02-000000002d00}94849760C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cc-6902-0f02-000000002d00}2840C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1010C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba83a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+250f117|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3100a52|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7e46e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+7c59c60|C:\WINDOWS\SYSTEM32\ntdll.dll+7f238|C:\WINDOWS\SYSTEM32\ntdll.dll+7dc31|C:\WINDOWS\SYSTEM32\ntdll.dll+927b9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:45.117{8223a6b9-30cc-6902-0f02-000000002d00}2840C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +10341000x800000000000000016527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:45.135{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cd-6902-1002-000000002d00}10196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:45.173{8223a6b9-30cb-6902-0b02-000000002d00}948414224C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cd-6902-1002-000000002d00}10196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:45.910{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\@microsoft\1ds-post-js\tsconfig.json2025-10-29 15:20:45.910soc101win11\Administrator +534500x800000000000000016530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:47.861{8223a6b9-30cd-6902-1102-000000002d00}13948C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000016531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:47.865{8223a6b9-30cd-6902-1202-000000002d00}4812C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000016532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:47.881{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cf-6902-1402-000000002d00}13900C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:47.918{8223a6b9-30cb-6902-0b02-000000002d00}94848228C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30cf-6902-1402-000000002d00}13900C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.020{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 15:20:44.439soc101win11\Administrator +11241100x800000000000000016535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.022{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +11241100x800000000000000016536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.060{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\download-jobs-info.json2025-10-29 13:25:57.795soc101win11\Administrator +11241100x800000000000000016537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.060{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\single-downloads-info.json2025-10-29 13:26:12.356soc101win11\Administrator +11241100x800000000000000016538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.085{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\@microsoft\applicationinsights-core-js\tsconfig.json2025-10-29 15:20:48.085soc101win11\Administrator +11241100x800000000000000016539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.210{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\blob_storage\cae70784-78ff-4c28-84aa-8e41c1d242532025-10-29 15:20:48.210soc101win11\Administrator +11241100x800000000000000016540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.220{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG.old~RF126e52.TMP2025-10-29 15:20:48.218soc101win11\Administrator +11241100x800000000000000016541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.220{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG2025-10-29 13:26:00.054soc101win11\Administrator +11241100x800000000000000016542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.248{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\app-install-location.json2025-10-29 13:26:00.104soc101win11\Administrator +10341000x800000000000000016543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.283{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d0-6902-1502-000000002d00}13056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:48.341{8223a6b9-30cb-6902-0b02-000000002d00}948414224C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d0-6902-1502-000000002d00}13056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.769{8223a6b9-30d1-6902-1602-000000002d00}1144C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000016546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.772{8223a6b9-30d1-6902-1702-000000002d00}13944C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000016547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.785{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\artifact-permissions-list.json2025-10-29 13:26:10.968soc101win11\Administrator +11241100x800000000000000016548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.811{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\bin\lms.exe2025-10-29 13:25:54.446soc101win11\Administrator +11241100x800000000000000016549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.847{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG.old~RF127893.TMP2025-10-29 15:20:50.846soc101win11\Administrator +11241100x800000000000000016550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.850{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\persistent-extension-pack-state.json2025-10-29 13:26:28.592soc101win11\Administrator +11241100x800000000000000016551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.858{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG2025-10-29 13:26:11.066soc101win11\Administrator +11241100x800000000000000016552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.894{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-index-cache.json2025-10-29 13:26:10.986soc101win11\Administrator +10341000x800000000000000016553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.942{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d2-6902-1802-000000002d00}2252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +154100x800000000000000016554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.954{8223a6b9-30d2-6902-1902-000000002d00}6204C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +154100x800000000000000016555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:50.965{8223a6b9-30d2-6902-1a02-000000002d00}6952C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe3.11.9PythonPythonPython Software Foundationpy.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=D61A1F011820011BC0C508D5E8E93380CF54459ED761DE0A9E5D96A2313363F4{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000016556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.001{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\last-synced-mcp-state.json2025-10-29 13:26:11.002soc101win11\Administrator +10341000x800000000000000016557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.258{8223a6b9-30cb-6902-0b02-000000002d00}94848228C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d2-6902-1802-000000002d00}2252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.386{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\@microsoft\applicationinsights-shims\tsconfig.json2025-10-29 15:20:51.385soc101win11\Administrator +534500x800000000000000016559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.465{8223a6b9-30d3-6902-1e02-000000002d00}6768C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000016560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.471{8223a6b9-30d3-6902-1d02-000000002d00}10360C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +11241100x800000000000000016561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.481{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\backend-preferences-v1.json2025-10-29 13:26:30.140soc101win11\Administrator +11241100x800000000000000016562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.490{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\internal-engine-index.json2025-10-29 13:26:30.295soc101win11\Administrator +534500x800000000000000016563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.492{8223a6b9-30d2-6902-1902-000000002d00}6204C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000016564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.508{8223a6b9-30d2-6902-1a02-000000002d00}6952C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +154100x800000000000000016565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.505{8223a6b9-30d3-6902-1f02-000000002d00}12712C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +534500x800000000000000016566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.511{8223a6b9-30d3-6902-1c02-000000002d00}972C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.520{8223a6b9-30d3-6902-1b02-000000002d00}13908C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000016568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.526{8223a6b9-30d3-6902-2102-000000002d00}7040C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe3.11.9PythonPythonPython Software Foundationpython.exeC:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exe -I -c "import bisect"C:\Users\Administrator\AppData\Local\Programs\LM Studio\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=66BC08D38E5267BD6BEB03BC8A1F876C0571111492B64E160B0D7A84319D46F3{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000016569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.864{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\persistent-extension-pack-state.json2025-10-29 13:26:28.592soc101win11\Administrator +534500x800000000000000016570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.872{8223a6b9-30d3-6902-1f02-000000002d00}12712C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000016571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.890{8223a6b9-30d3-6902-2002-000000002d00}7304C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.900{8223a6b9-30d3-6902-2102-000000002d00}7040C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +11241100x800000000000000016573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.900{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-index-cache.json2025-10-29 13:26:10.986soc101win11\Administrator +534500x800000000000000016574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:51.905{8223a6b9-30d3-6902-2202-000000002d00}8016C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000016575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.163{8223a6b9-30d4-6902-2302-000000002d00}6792C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\js-code-sandbox\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000016576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.174{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +154100x800000000000000016577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.413{8223a6b9-30d4-6902-2502-000000002d00}6812C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe20.18.0Node.js JavaScript RuntimeNode.jsNode.jsnode.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exe" ./.lmstudio/production.jsC:\Users\Administrator\.lmstudio\extensions\plugins\lmstudio\rag-v1\soc101win11\Administrator{8223a6b9-2c28-6902-cda6-060000000000}0x6a6cd1HighSHA256=35B7C95A379BEB606F5798ED83081690DF13190077630B234163C6607AA4CC94{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe"C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe" soc101win11\Administrator +11241100x800000000000000016578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.418{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.440{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.470{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +534500x800000000000000016581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.654{8223a6b9-30d4-6902-2402-000000002d00}6272C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000016582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.654{8223a6b9-30d4-6902-2302-000000002d00}6792C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +11241100x800000000000000016583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.660{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +534500x800000000000000016584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.668{8223a6b9-30d4-6902-2902-000000002d00}9696C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000016585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.674{8223a6b9-30d4-6902-2702-000000002d00}9568C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000016586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.678{8223a6b9-30d4-6902-2802-000000002d00}5056C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000016587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.730{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.754{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.867{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\persistent-extension-pack-state.json2025-10-29 13:26:28.592soc101win11\Administrator +534500x800000000000000016590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.883{8223a6b9-30d4-6902-2502-000000002d00}6812C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000016591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.883{8223a6b9-30d4-6902-2602-000000002d00}8072C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000016592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.886{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +534500x800000000000000016593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.888{8223a6b9-30d4-6902-2c02-000000002d00}992C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000016594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.892{8223a6b9-30d4-6902-2a02-000000002d00}5400C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000016595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:52.895{8223a6b9-30d4-6902-2b02-000000002d00}6428C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000016596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:53.214{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\conversation-config.json2025-10-29 13:25:59.931soc101win11\Administrator +11241100x800000000000000016597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:53.405{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\collections.json2025-10-29 13:26:12.119soc101win11\Administrator +11241100x800000000000000016598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:53.497{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\ui-state\window-1.json2025-10-29 13:28:00.985soc101win11\Administrator +11241100x800000000000000016599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:54.420{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\collections.json2025-10-29 13:26:12.119soc101win11\Administrator +11241100x800000000000000016600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:54.522{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\ui-state\window-1.json2025-10-29 13:28:00.985soc101win11\Administrator +534500x800000000000000016601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:54.754{8223a6b9-30cd-6902-1302-000000002d00}5324C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000016602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:55.842{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:55.844{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B76D5C0)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e79c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e2ff|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c39ea9|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3be8013|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+f49d18soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:55.845{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47ee00|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3d1030|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+308e84|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4ccdfa6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:55.914{8223a6b9-30cb-6902-0b02-000000002d00}948414224C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.488{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.500{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.515{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +734700x800000000000000016609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.476{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\llama.cpp-win-x86_64-avx2-1.53.1\llama.dll-----SHA256=3B9F78A9ACC748001341C9DE15A69434023C6CDA9B9E561CAD9CB5588299D7EEfalse-Unavailablesoc101win11\Administrator +734700x800000000000000016610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.476{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\llama.cpp-win-x86_64-avx2-1.53.1\llama.dll-----SHA256=3B9F78A9ACC748001341C9DE15A69434023C6CDA9B9E561CAD9CB5588299D7EEfalse-Unavailablesoc101win11\Administrator +11241100x800000000000000016611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.608{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.660{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.682{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.731{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +10341000x800000000000000016615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.875{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.875{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.926{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.936{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:56.962{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:57.416{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:58.264{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\255ad5fa-0e0a-41b6-956c-48681b7f31db.tmp2025-10-29 15:20:58.264soc101win11\Administrator +11241100x800000000000000016622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:58.269{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Preferences~RF129591.TMP2025-10-29 15:20:58.269soc101win11\Administrator +10341000x800000000000000016623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:58.891{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:20:58.891{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:00.898{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:00.898{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:02.901{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:02.901{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:04.566{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:04.581{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:04.593{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:04.829{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:04.843{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:04.856{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +10341000x800000000000000016635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:04.920{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:04.920{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:06.079{8223a6b9-309e-6902-f301-000000002d00}9032C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000016638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:06.927{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:06.927{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:07.209{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:07.227{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-data.json.lmstudio-temp2025-10-29 15:21:07.227soc101win11\Administrator +11241100x800000000000000016642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:07.229{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-data.json2025-10-29 13:54:15.091soc101win11\Administrator +10341000x800000000000000016643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:08.933{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:08.933{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:10.584{8223a6b9-307a-6902-e201-000000002d00}5284C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000016646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:10.954{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:10.954{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:12.968{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777BE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:12.968{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:13.445{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:21:13.445soc101win11\Administrator +11241100x800000000000000016651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:13.447{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:14.457{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:21:13.445soc101win11\Administrator +11241100x800000000000000016653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:14.460{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:14.975{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777BE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:14.975{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:15.465{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:21:13.445soc101win11\Administrator +11241100x800000000000000016657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:15.467{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:16.473{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:21:13.445soc101win11\Administrator +11241100x800000000000000016659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:16.475{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:16.984{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:16.984{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:17.482{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:21:13.445soc101win11\Administrator +11241100x800000000000000016663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:17.483{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:17.860{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\working-directories\17617443599272025-10-29 15:21:17.860soc101win11\Administrator +11241100x800000000000000016665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:17.975{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\working-directories\17617443599272025-10-29 15:21:17.975soc101win11\Administrator +11241100x800000000000000016666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:18.020{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:18.033{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:18.052{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:18.491{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:21:13.445soc101win11\Administrator +11241100x800000000000000016670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:18.493{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:19.004{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:19.004{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:21.014{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:21.014{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:23.033{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:23.033{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:24.919{8223a6b9-2e9c-6902-aa01-000000002d00}11164C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000016678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:25.068{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:25.068{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:26.700{8223a6b9-303e-6902-d201-000000002d00}3556C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000016681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:27.094{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:27.094{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:29.119{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:29.119{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:31.136{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:31.136{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:33.146{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:33.146{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:35.173{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:35.173{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:37.183{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:37.183{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:39.202{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:39.202{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:41.217{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:41.217{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:43.240{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:43.240{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:45.255{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:45.255{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:47.281{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:47.281{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:49.311{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:49.311{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:50.169{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\@vscode\ripgrep\jsconfig.json2025-10-29 15:21:50.169soc101win11\Administrator +10341000x800000000000000016706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:51.329{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:51.329{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:53.350{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:53.350{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:53.567{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\@vscode\vscode-languagedetection\model\group1-shard1of1.bin2025-10-29 15:21:53.567soc101win11\Administrator +11241100x800000000000000016711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:53.574{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\@vscode\vscode-languagedetection\model\model.json2025-10-29 15:21:53.574soc101win11\Administrator +11241100x800000000000000016712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:54.143{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\@vscode\windows-process-tree\tsconfig.json2025-10-29 15:21:54.142soc101win11\Administrator +10341000x800000000000000016713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:55.378{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:55.378{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:57.398{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:57.398{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:59.415{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:21:59.415{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:01.419{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:01.419{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:03.426{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:03.426{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:05.428{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:05.428{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:06.004{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\font-finder\tsconfig.json2025-10-29 15:22:06.003soc101win11\Administrator +11241100x800000000000000016726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:06.393{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\font-ligatures\tsconfig.json2025-10-29 15:22:06.393soc101win11\Administrator +10341000x800000000000000016727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:07.433{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:07.433{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:07.873{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\get-system-fonts\tsconfig.json2025-10-29 15:22:07.872soc101win11\Administrator +11241100x800000000000000016730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:08.471{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\hasown\tsconfig.json2025-10-29 15:22:08.471soc101win11\Administrator +11241100x800000000000000016731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:09.060{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\import-in-the-middle\release-please-config.json2025-10-29 15:22:09.060soc101win11\Administrator +11241100x800000000000000016732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:09.066{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\import-in-the-middle\tsconfig.json2025-10-29 15:22:09.066soc101win11\Administrator +10341000x800000000000000016733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:09.451{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:09.451{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:11.474{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:11.474{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:13.476{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:13.476{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:15.490{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:15.490{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:17.494{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:17.495{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:18.625{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\node-pty\src\tsconfig.json2025-10-29 15:22:18.625soc101win11\Administrator +10341000x800000000000000016744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:19.513{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:19.513{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:21.544{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:21.544{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:23.572{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:23.572{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:25.588{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:25.588{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:27.614{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:27.614{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:29.628{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:29.628{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:31.644{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:31.645{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:33.651{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:33.651{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:35.657{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:35.657{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:37.675{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:37.675{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:39.685{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:39.685{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:41.622{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\promise-stream-reader\tsconfig.json2025-10-29 15:22:41.622soc101win11\Administrator +10341000x800000000000000016767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:41.703{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:41.703{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:43.727{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:43.727{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:44.436{8223a6b9-30cb-6902-0a02-000000002d00}26367056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3144-6902-2e02-000000002d00}8084C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:44.490{8223a6b9-30cb-6902-0b02-000000002d00}94848228C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3144-6902-2e02-000000002d00}8084C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:44.531{8223a6b9-30cb-6902-0a02-000000002d00}263614204C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3144-6902-2e02-000000002d00}8084C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x101451C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba7ca|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+15708d8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1570d05|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2622cba|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462a1ac|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462b8c7|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46300c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3a59ef5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+463715c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46eac03|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45ca04d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebcb4d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+252a2de|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ef0e8f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153ade2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153c961|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153818f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84e6cb|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84f88fsoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:44.541{8223a6b9-3144-6902-2e02-000000002d00}8084C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +10341000x800000000000000016775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:45.745{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:45.745{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:47.750{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:47.750{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:49.773{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:49.773{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:51.780{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exeC:\Users\Administrator\AppData\Local\Programs\cursor\resources\app\node_modules\v8-inspect-profiler\jsconfig.json2025-10-29 15:22:51.780soc101win11\Administrator +10341000x800000000000000016782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:51.792{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:51.792{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:53.804{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:53.804{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:55.816{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:55.816{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:57.077{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:57.078{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:22:57.078soc101win11\Administrator +11241100x800000000000000016790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:57.080{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:57.835{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:57.835{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:59.862{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:22:59.862{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:01.866{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:01.866{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:03.863{8223a6b9-30a6-6902-0002-000000002d00}5460C:\Users\Administrator\AppData\Local\cursor-updater\pending\Cursor Setup 0.45.14 - Build 250219jnihavxsz.exesoc101win11\Administrator +10341000x800000000000000016798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:03.882{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:03.882{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000016800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:04.455{8223a6b9-314f-6902-2f02-000000002d00}2768C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000016801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:05.896{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:05.896{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:07.905{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:07.905{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:09.909{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:09.909{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:11.923{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:11.923{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:13.949{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:13.949{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:15.965{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:15.965{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:17.972{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:17.972{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:19.978{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:19.978{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:21.454{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000016818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:21.459{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:21.460{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:21.994{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:21.994{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:22.466{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:22.468{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:24.004{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:24.004{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:24.582{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:24.583{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:25.599{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:25.601{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:26.013{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:26.013{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:26.606{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:26.607{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:27.623{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:27.624{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000016836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:27.945{8223a6b9-316e-6902-3102-000000002d00}11104C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000016837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:28.028{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:28.028{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:29.200{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:29.202{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:30.049{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:30.049{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:30.217{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:30.218{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:31.229{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:31.230{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:32.053{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:32.053{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:32.245{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:32.247{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:33.263{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:33.265{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:34.074{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:34.074{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:34.285{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:34.286{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:35.294{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:35.295{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:36.086{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:36.086{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:36.308{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:36.309{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:37.322{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:37.324{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:38.094{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:38.094{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:38.333{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:38.335{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:39.352{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:39.353{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:40.115{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:40.115{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:40.368{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:40.370{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:41.375{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:41.377{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:42.121{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:42.121{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:42.394{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:42.395{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:43.401{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:43.403{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:44.142{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:44.142{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:44.406{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:44.408{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:45.415{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:45.417{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:46.163{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:46.163{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:46.425{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:46.427{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:47.436{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:47.439{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:48.174{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:48.174{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:48.450{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:48.451{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:50.188{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:50.188{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:50.205{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:50.206{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:51.219{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:51.220{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:52.203{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:52.203{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:52.236{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:52.238{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:53.408{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:53.409{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:54.226{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:54.226{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:54.426{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:54.428{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:55.436{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:55.437{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:56.239{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:56.239{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:56.451{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:56.453{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:57.463{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:57.465{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:58.254{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:58.254{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:58.473{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:58.475{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:59.479{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:23:59.480{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:00.279{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:00.279{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:00.487{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:00.488{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:01.495{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:01.497{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:02.295{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:02.295{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:02.502{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:02.504{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:03.513{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:03.515{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:04.312{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:04.312{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:04.526{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:04.528{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:05.547{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:05.550{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:06.337{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:06.337{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:06.560{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:06.562{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:07.577{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:07.578{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:08.346{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:08.346{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:08.585{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:08.586{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:09.590{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:09.592{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:10.360{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:10.360{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:10.603{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:10.605{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:11.622{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:11.624{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:12.378{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:12.378{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:12.641{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:12.642{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:13.656{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:13.658{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:14.400{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:14.400{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:14.669{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:14.670{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:15.682{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:15.684{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:16.409{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:16.409{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:16.698{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:16.700{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:17.704{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:17.706{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:18.434{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:18.434{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:18.713{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:18.715{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:19.733{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:19.734{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:20.451{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:20.451{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:20.752{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:20.754{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:21.771{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:21.773{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000016995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:22.458{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000016996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:22.458{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000016997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:22.778{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000016998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:22.779{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000016999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:23.786{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:23.790{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:24.481{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:24.481{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:25.139{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:25.140{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:26.145{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:26.148{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:26.504{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:26.504{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:27.162{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:27.164{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:28.169{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:28.170{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:28.522{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:28.522{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:29.178{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:29.179{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:30.184{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:30.187{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:30.547{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:30.547{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:31.202{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:31.203{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:32.212{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:32.214{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:32.572{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:32.572{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:33.221{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:33.222{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:34.227{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:34.230{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:34.575{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:34.575{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:35.247{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:35.249{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:36.263{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:36.264{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:36.593{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:36.594{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:37.275{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:37.277{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:38.296{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:38.296{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:38.609{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:38.609{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:39.301{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:39.303{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000017047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:40.037{8223a6b9-306f-6902-d301-000000002d00}5432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000017048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:40.314{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:40.316{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:40.623{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:40.623{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:41.328{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:41.330{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:42.344{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:42.346{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:42.631{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:42.631{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:43.362{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:43.364{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:44.375{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:44.377{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:44.641{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:44.641{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:45.391{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:45.393{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:46.409{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:46.412{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:46.654{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:46.654{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:47.423{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:47.425{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:48.664{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:48.664{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:50.499{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:50.500{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:50.682{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:50.682{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:51.513{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:51.514{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:52.522{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:52.524{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:52.703{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:52.703{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:53.543{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:53.545{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:54.561{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:54.563{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:54.720{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:54.720{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:55.572{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:55.574{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:56.586{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:56.587{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:56.735{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:56.735{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:57.591{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:57.593{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:58.602{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:58.603{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:58.741{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:58.741{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:59.606{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:24:59.608{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:00.612{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:00.613{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:00.752{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:00.753{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:01.624{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:01.626{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:02.643{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:02.644{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:02.771{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:02.771{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:03.661{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:03.662{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:04.674{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:04.676{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:04.782{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:04.782{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:05.688{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:05.689{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:06.700{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:06.701{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:06.809{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:06.809{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:07.716{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:07.718{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:08.732{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:08.734{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:08.825{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:08.825{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:09.742{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:09.744{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:10.750{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:10.752{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:10.842{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:10.842{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:11.769{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:11.770{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:12.777{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:12.780{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:12.852{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:12.852{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:13.692{8223a6b9-3158-6902-3002-000000002d00}6408C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000017145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:13.783{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:13.784{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:14.801{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:14.802{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:14.878{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:14.878{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:15.812{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:15.814{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:16.831{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:16.833{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:16.893{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:16.893{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:17.848{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:17.850{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:18.856{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:18.858{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:18.902{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:18.902{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:19.877{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:19.879{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:20.919{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:20.919{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:20.984{8223a6b9-31a4-6902-3202-000000002d00}5676C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +11241100x800000000000000017168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:21.062{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:21.064{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:22.074{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:22.076{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:22.927{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:22.927{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:23.092{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:23.093{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:24.099{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:24.101{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:24.944{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:24.944{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:25.105{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:25.107{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:26.123{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:26.125{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:26.964{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:26.964{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:27.143{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:27.145{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:28.150{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:28.152{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:28.981{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:28.981{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:29.521{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:29.522{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:30.530{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:30.532{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:31.002{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:31.002{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:32.756{8223a6b9-2f4b-6902-b301-000000002d00}3096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000017199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:32.788{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:32.788{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:33.021{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:33.021{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:33.800{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:33.800{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:34.810{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:34.810{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:35.041{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:35.041{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:35.832{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:35.832{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:36.841{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:36.844{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:37.065{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:37.065{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:37.847{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:37.847{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:38.854{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:38.857{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:39.082{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:39.082{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:39.873{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:39.873{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:40.883{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:40.885{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:41.108{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:41.108{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:41.887{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:41.887{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:42.891{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:42.891{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:43.123{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:43.123{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:43.478{8223a6b9-31f7-6902-3602-000000002d00}14196C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +11241100x800000000000000017234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:43.909{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:43.909{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000017236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:44.212{8223a6b9-3073-6902-d501-000000002d00}1268C:\Windows\System32\smartscreen.exesoc101win11\Administrator +11241100x800000000000000017237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:44.927{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:44.927{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:45.149{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:45.149{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:45.930{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:45.930{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:46.944{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:46.946{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:47.166{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:47.166{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:47.956{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:47.958{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:48.968{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:48.968{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:49.176{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:49.176{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:49.973{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:49.973{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:50.984{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:50.984{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000017257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:51.000{8223a6b9-31a4-6902-3302-000000002d00}11964C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +10341000x800000000000000017258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:51.192{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:51.192{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:51.994{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:51.995{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:53.007{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:53.007{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:53.200{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:53.200{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:54.027{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:54.027{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:55.039{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:55.039{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:55.226{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:55.226{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:56.055{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:56.058{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:57.073{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:57.075{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:57.247{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:57.247{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:58.089{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:58.091{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000017280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:59.100{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:59.100{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:59.259{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:25:59.259{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:00.786{8223a6b9-2c60-6902-2201-000000002d00}13960C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000017285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:00.804{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000017286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:00.836{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:00.840{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\working-directories\17617443599272025-10-29 15:26:00.840soc101win11\Administrator +11241100x800000000000000017288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:00.840{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:01.279{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:01.279{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000017291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:01.849{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:23:21.458soc101win11\Administrator +11241100x800000000000000017292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:01.855{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000017293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:03.299{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:03.299{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:05.318{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:05.318{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:07.329{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:07.329{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:09.348{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:09.348{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:11.364{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:11.364{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:13.381{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:13.381{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:15.413{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:15.413{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:17.438{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:17.438{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:19.447{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:19.447{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:21.452{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:21.452{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:23.469{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:23.469{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:25.487{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:25.487{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:26.747{8223a6b9-31f7-6902-3702-000000002d00}2460C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +10341000x800000000000000017318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:27.507{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:27.509{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:29.522{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:29.522{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:31.526{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:31.526{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:33.535{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:33.537{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:35.551{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:35.551{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:37.565{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:37.565{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:39.570{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:39.570{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:41.578{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:41.578{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.082{8223a6b9-3233-6902-3b02-000000002d00}11784C:\Windows\System32\DeviceCensus.exesoc101win11\Administrator +534500x800000000000000017335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.257{8223a6b9-3233-6902-3902-000000002d00}5900C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000017336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.344{8223a6b9-3233-6902-3c02-000000002d00}10216C:\Windows\System32\tasklist.exeNT AUTHORITY\SYSTEM +534500x800000000000000017337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.354{8223a6b9-3233-6902-3d02-000000002d00}3756C:\Windows\System32\findstr.exeNT AUTHORITY\SYSTEM +534500x800000000000000017338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.406{8223a6b9-3233-6902-3802-000000002d00}3772C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000017339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.408{8223a6b9-3233-6902-3a02-000000002d00}12836C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.592{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.592{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:43.788{8223a6b9-31f7-6902-3502-000000002d00}12148C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000017343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:45.285{8223a6b9-31f6-6902-3402-000000002d00}9516C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:45.625{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:45.625{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:47.642{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:47.642{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:49.660{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:49.660{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:51.679{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:51.679{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:53.700{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:53.700{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:55.718{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:55.718{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:57.737{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:57.737{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:59.751{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:26:59.751{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:01.769{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:01.769{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:03.791{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:03.791{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:05.805{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:05.805{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:07.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:07.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:09.842{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:09.842{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:11.866{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:11.866{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:13.885{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:13.885{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:15.908{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:15.908{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:17.925{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:17.925{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:19.950{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:19.950{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:21.973{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:21.973{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:23.987{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:23.987{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:26.006{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:26.006{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:28.024{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:28.024{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:30.043{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:30.043{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:32.065{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:32.065{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:34.083{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:34.083{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:36.103{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:36.103{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:38.123{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:38.123{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:40.144{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:40.144{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:42.162{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:42.162{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:44.180{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:44.180{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:44.499{8223a6b9-3234-6902-3e02-000000002d00}13916C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000017405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:44.499{8223a6b9-3234-6902-3f02-000000002d00}6660C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000017406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:45.071{8223a6b9-3234-6902-4002-000000002d00}4708C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000017407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:45.198{8223a6b9-3234-6902-4102-000000002d00}11164C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000017408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:45.308{8223a6b9-3270-6902-4c02-000000002d00}14308C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000017409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:45.352{8223a6b9-3270-6902-4e02-000000002d00}2476C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000017410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:45.612{8223a6b9-3270-6902-4b02-000000002d00}7776C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000017411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:45.664{8223a6b9-3270-6902-4d02-000000002d00}6112C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000017412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:45.673{8223a6b9-3270-6902-4802-000000002d00}5428C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:46.194{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:46.194{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:46.596{8223a6b9-2c23-6902-6900-000000002d00}5552C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:48.210{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:48.210{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:50.228{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:50.228{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:52.244{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:52.244{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:54.259{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:54.259{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:56.277{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:56.277{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:58.291{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:27:58.291{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:00.308{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:00.308{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:02.326{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:02.326{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:04.345{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:04.345{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:06.363{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:06.363{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:08.380{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:08.380{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:10.400{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:10.400{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:12.418{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:12.418{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:14.437{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:14.437{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:16.458{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:16.458{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:18.481{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:18.481{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:20.502{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:20.502{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:22.523{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:22.523{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:24.541{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:24.541{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:26.557{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:26.557{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:28.576{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:28.576{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:30.596{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:30.596{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:32.614{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:32.614{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:34.634{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:34.634{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:36.652{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:36.652{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:38.670{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:38.670{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:40.689{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:40.689{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:42.708{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:42.708{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:44.723{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:44.723{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:46.740{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:46.740{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:48.756{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:48.756{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:50.773{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:50.773{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:52.791{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:52.791{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:54.807{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:54.807{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:56.824{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:56.824{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:58.839{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:28:58.839{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:00.860{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:00.860{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:02.877{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:02.877{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:04.894{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:04.894{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:06.915{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:06.915{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.341{8223a6b9-32c3-6902-4f02-000000002d00}5736C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000017497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.345{8223a6b9-32c3-6902-5002-000000002d00}308C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000017498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.417{8223a6b9-32c3-6902-5102-000000002d00}6920C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000017499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.418{8223a6b9-3270-6902-4702-000000002d00}5776C:\Windows\System32\Defrag.exeNT AUTHORITY\SYSTEM +534500x800000000000000017500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.422{8223a6b9-3270-6902-4902-000000002d00}10956C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000017501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.464{8223a6b9-3234-6902-4302-000000002d00}14120C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000017502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.467{8223a6b9-3234-6902-4202-000000002d00}2996C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000017503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.469{8223a6b9-3234-6902-4502-000000002d00}1720C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000017504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:07.473{8223a6b9-3234-6902-4402-000000002d00}10312C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:08.938{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:08.938{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:10.956{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:10.956{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:12.978{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:12.978{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:15.004{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:15.004{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:17.012{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:17.013{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:19.031{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:19.031{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:20.847{8223a6b9-32cb-6902-5302-000000002d00}5880C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000017518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:21.052{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:21.052{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:21.505{8223a6b9-32d0-6902-5402-000000002d00}11292C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:23.077{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:23.077{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:25.094{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:25.094{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:27.111{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:27.111{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:28.776{8223a6b9-2d03-6902-6d01-000000002d00}2564C:\Windows\System32\mmc.exesoc101win11\Administrator +10341000x800000000000000017528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:29.128{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:29.128{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:31.143{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:31.143{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:33.168{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:33.168{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:35.184{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:35.184{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:36.586{8223a6b9-32db-6902-5602-000000002d00}7384C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000017537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:37.205{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:37.205{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:39.220{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:39.220{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:41.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:41.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:43.247{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:43.247{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:45.265{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:45.265{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:47.283{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:47.283{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:49.301{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:49.301{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:51.326{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:51.326{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:53.349{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:53.349{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:55.369{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:55.369{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:57.396{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:57.396{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:59.415{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:29:59.415{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:01.434{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:01.434{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:03.456{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:03.456{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:05.473{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:05.473{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:07.492{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:07.492{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:09.518{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:09.518{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:11.544{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:11.544{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:13.564{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:13.564{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:15.582{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:15.582{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:17.604{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:17.604{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:19.627{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:19.627{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:21.008{8223a6b9-30b0-6902-0702-000000002d00}8596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:21.645{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:21.645{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:23.667{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:23.667{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:25.688{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:25.688{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:27.708{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:27.708{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:29.727{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:29.727{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:31.748{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:31.748{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:33.765{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:33.765{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:35.791{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:35.791{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:37.808{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:37.808{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:39.828{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:39.830{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:41.845{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:41.845{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:43.867{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:43.867{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:45.871{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:45.871{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:47.904{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:47.904{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:49.935{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:49.935{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:51.953{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:51.953{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:53.967{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:53.967{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:55.982{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:55.982{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:58.003{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:30:58.003{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:00.031{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:00.031{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:02.053{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:02.053{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:04.071{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:04.071{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:06.098{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:06.098{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:08.117{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:08.117{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:10.122{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:10.122{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:12.144{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:12.146{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:14.156{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:14.156{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:16.188{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:16.188{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:18.204{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:18.204{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:20.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:20.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:22.245{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:22.245{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:24.260{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:24.260{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:26.284{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:26.284{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:28.306{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:28.306{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:30.325{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:30.325{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:32.341{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:32.343{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:34.365{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:34.365{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:36.389{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:36.389{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:38.413{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:38.413{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:40.440{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:40.440{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:42.464{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:42.464{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:44.485{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:44.485{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:46.506{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:46.506{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:48.512{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:48.512{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:50.533{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:50.533{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:52.564{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:52.564{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:54.582{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:54.582{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:56.607{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:56.607{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:58.624{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:31:58.624{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:00.638{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:00.638{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:02.654{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:02.654{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:04.676{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:04.676{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:06.697{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:06.697{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:07.492{8223a6b9-333b-6902-5a02-000000002d00}12928C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000017689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:07.539{8223a6b9-333b-6902-5902-000000002d00}9652C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000017690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:07.617{8223a6b9-333b-6902-5b02-000000002d00}6692C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000017691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:08.715{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:08.715{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:10.738{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:10.738{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:12.759{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:12.759{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:14.780{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:14.780{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:16.795{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:16.795{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:18.814{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:18.814{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:20.832{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:20.832{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:22.852{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:22.852{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:24.864{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:24.864{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:26.884{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:26.884{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:28.905{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:28.905{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:29.268{8223a6b9-338c-6902-5c02-000000002d00}1676C:\Windows\System32\NETSTAT.EXEsoc101win11\Administrator +10341000x800000000000000017714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:30.922{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:30.922{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:32.941{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:32.941{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:34.959{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:34.959{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:36.983{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:36.983{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:39.003{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:39.003{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:41.023{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:41.023{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:43.049{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:43.049{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:45.065{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:45.065{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:47.086{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:47.086{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:47.480{8223a6b9-339f-6902-5e02-000000002d00}3540C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000017733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:49.101{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:49.101{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:50.260{8223a6b9-33a2-6902-5f02-000000002d00}5568C:\Windows\System32\rundll32.exesoc101win11\Administrator +10341000x800000000000000017736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:51.123{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:51.123{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:53.137{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:53.137{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:55.160{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:55.160{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:55.551{8223a6b9-33a7-6902-6202-000000002d00}11648C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:57.184{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:57.184{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:57.982{8223a6b9-33a4-6902-6102-000000002d00}13324C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000017746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:59.204{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:32:59.204{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:01.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:01.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:03.251{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:03.251{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:05.272{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:05.272{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:07.292{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:07.292{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:09.314{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:09.314{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:11.337{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:11.337{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:13.363{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:13.363{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:14.041{8223a6b9-32ca-6902-5202-000000002d00}11532C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:15.389{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:15.389{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:17.410{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:17.410{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:19.432{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:19.432{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:19.543{8223a6b9-2c48-6902-e600-000000002d00}6964C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exesoc101win11\Administrator +10341000x800000000000000017770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:21.454{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:21.454{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:23.479{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:23.479{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:25.501{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:25.501{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:27.520{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:27.520{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:29.542{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:29.542{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:31.562{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:31.562{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:33.583{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:33.583{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:35.607{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:35.607{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:37.629{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:37.629{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:39.649{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:39.649{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:41.668{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:41.668{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:43.691{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:43.691{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:45.715{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:45.715{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:47.737{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:47.737{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:49.747{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:49.747{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000017800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:51.544{8223a6b9-2c21-6902-5c00-000000002d00}4348C:\Program Files (x86)\Wing FTP Server\WFTPServer.exeNT AUTHORITY\SYSTEM +10341000x800000000000000017801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:51.757{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:51.757{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:53.781{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:53.781{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:55.805{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:55.805{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:57.815{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:57.815{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:59.834{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:33:59.834{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:01.856{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:01.856{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:03.875{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:03.875{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:05.893{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:05.893{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:07.911{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:07.911{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:09.933{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:09.933{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:11.947{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:11.947{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:13.966{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:13.966{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:15.988{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:15.988{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:17.995{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:17.995{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:20.016{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:20.016{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:22.039{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:22.039{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:24.058{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:24.058{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:26.080{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:26.080{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:28.090{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:28.090{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:30.113{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:30.113{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:32.132{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:32.132{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:34.156{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:34.156{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:36.175{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:36.175{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:38.197{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:38.197{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:40.215{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:40.215{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:42.237{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:42.237{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:44.254{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:44.254{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:46.273{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:46.273{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:48.298{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:48.298{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:50.321{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:50.321{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:52.342{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:52.342{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:54.355{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:54.355{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:56.378{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:56.378{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:58.397{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:34:58.397{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:00.421{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:00.421{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:02.448{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:02.448{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:04.470{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:04.470{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:06.481{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:06.481{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:08.506{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:08.506{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:10.530{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:10.530{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:12.552{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:12.552{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:14.567{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:14.567{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:16.586{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:16.586{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:18.606{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:18.606{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:20.631{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:20.631{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:22.655{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:22.655{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:24.674{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:24.674{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:26.697{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:26.697{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:28.725{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:28.725{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:30.739{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:30.739{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:32.760{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:32.760{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:34.776{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:34.776{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:36.794{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:36.794{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:38.806{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:38.806{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:40.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:40.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:42.845{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:42.845{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:44.859{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:44.859{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:46.870{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:46.870{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:48.881{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:48.881{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:50.907{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:50.907{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:52.920{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:52.920{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:54.932{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:54.932{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:56.948{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:56.948{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:58.964{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:35:58.964{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:00.974{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:00.974{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:02.982{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:02.982{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:04.995{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:04.995{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:07.021{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:07.021{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:09.042{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:09.042{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:11.064{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:11.064{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:13.089{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:13.089{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:15.111{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:15.111{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:17.135{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:17.135{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:19.150{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:19.150{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:21.171{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:21.171{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:23.182{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:23.182{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:25.209{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:25.209{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:27.222{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:27.222{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:29.236{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:29.236{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:31.244{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:31.244{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:33.266{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:33.266{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:35.283{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:35.283{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:37.298{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:37.298{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:39.311{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:39.311{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:41.339{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:41.339{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:43.350{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:43.350{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:45.375{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:45.375{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:47.388{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:47.388{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:49.413{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:49.413{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:51.438{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:51.438{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:53.458{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:53.458{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:55.477{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:55.477{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:57.503{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:57.503{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:59.517{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:36:59.517{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:01.529{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:01.529{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:03.554{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:03.554{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:05.575{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:05.575{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:07.587{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:07.587{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:09.606{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:09.606{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000017999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:11.618{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:11.618{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:13.640{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:13.640{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:15.661{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:15.661{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:17.671{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:17.671{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:19.683{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:19.683{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:21.696{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:21.696{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:23.714{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:23.714{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:25.740{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:25.740{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:27.765{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:27.765{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:29.788{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:29.788{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:31.812{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:31.812{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:33.824{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:33.824{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:35.836{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:35.836{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:37.853{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:37.853{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:39.863{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:39.863{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:41.880{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:41.880{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:43.895{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:43.895{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:45.906{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:45.906{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:47.133{8223a6b9-339d-6902-5d02-000000002d00}7280C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +10341000x800000000000000018036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:47.915{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:47.915{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:49.929{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:49.929{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:51.947{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:51.947{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:53.960{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:53.960{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:55.973{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:55.973{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:57.985{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:57.985{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:59.998{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:37:59.998{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:02.007{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:02.007{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:04.017{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B77690F)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:04.017{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:06.032{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:06.032{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:08.045{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:08.045{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:08.438{8223a6b9-3270-6902-4a02-000000002d00}12272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000018059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:10.070{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:10.070{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:10.279{8223a6b9-3236-6902-4602-000000002d00}4856C:\Windows\System32\smartscreen.exesoc101win11\Administrator +10341000x800000000000000018062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:12.097{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:12.097{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:14.109{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:14.109{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:16.122{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:16.122{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:18.135{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:18.135{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:20.149{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:20.149{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:22.172{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:22.172{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:24.197{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:24.197{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:26.222{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:26.222{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:28.237{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:28.237{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:30.253{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B774B5F)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:30.253{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:32.267{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:32.267{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:34.293{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:34.293{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:36.305{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:36.305{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:38.314{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:38.314{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:40.329{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:40.329{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:42.339{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:42.339{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:44.355{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:44.355{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:46.384{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:46.384{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:48.407{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:48.407{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:50.417{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:50.417{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:52.440{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:52.440{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:54.463{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:54.463{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:56.474{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:56.474{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:58.487{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B777FE2)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:38:58.487{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:00.502{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7746A3)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:00.502{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:02.529{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:02.529{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:04.551{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:04.551{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:06.569{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:06.569{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:08.580{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:08.580{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:10.606{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:10.606{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:12.629{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:12.629{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:14.638{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B777BE2)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:14.638{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B777CE4)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:16.657{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:16.657{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:18.681{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:18.681{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:20.706{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:20.706{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:22.727{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:22.727{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:24.742{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:24.742{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:26.769{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:26.769{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:28.788{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:28.788{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:30.809{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:30.809{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:32.825{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:32.825{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:34.846{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:34.846{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:36.860{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:36.860{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:38.881{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:38.881{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:40.894{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:40.894{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:42.908{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:42.908{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:44.932{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:44.932{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:46.944{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:46.944{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:48.968{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:48.968{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:50.995{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:50.995{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:53.005{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:53.005{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:55.032{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:55.032{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:57.053{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:57.053{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:59.069{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:39:59.069{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:01.096{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:01.096{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:03.121{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:03.121{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:05.142{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:05.142{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:07.170{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:07.170{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:09.180{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:09.180{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:11.203{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:11.203{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:13.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:13.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:15.246{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:15.246{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:17.269{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:17.269{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:19.294{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:19.294{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:21.307{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:21.307{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:23.330{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:23.330{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:25.350{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:25.350{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:27.370{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:27.370{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:29.386{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:29.386{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:31.407{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:31.407{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:31.423{8223a6b9-32db-6902-5502-000000002d00}11404C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000018203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:33.428{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:33.428{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:35.447{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:35.447{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:37.463{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:37.463{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:39.487{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:39.487{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:41.508{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:41.508{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:43.530{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:43.530{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:45.555{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:45.555{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:47.581{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:47.581{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:49.596{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:49.596{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:49.825{8223a6b9-2c2a-6902-aa00-000000002d00}6280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000018222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:51.617{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:51.617{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:53.629{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:53.629{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:55.655{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:55.655{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:57.679{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:57.679{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:59.692{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:40:59.692{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:01.715{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:01.715{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:03.742{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:03.742{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:05.765{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:05.765{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:07.070{8223a6b9-333b-6902-5802-000000002d00}11136C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000018239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:07.787{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:07.787{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:09.811{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:09.811{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:11.831{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:11.831{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:13.855{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:13.855{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:15.877{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:15.877{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:17.889{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:17.889{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:19.911{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:19.911{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:21.927{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:21.927{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:23.947{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:23.947{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:25.968{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:25.968{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:27.993{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:27.993{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:30.011{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:30.011{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:32.035{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:32.035{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:34.055{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:34.055{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:36.078{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:36.078{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:38.103{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:38.103{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:40.115{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:40.115{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:42.137{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:42.137{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:44.147{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:44.147{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:46.156{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:46.156{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:48.177{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:48.177{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:50.200{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:50.200{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:52.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:52.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:54.247{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:54.247{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:56.267{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:56.267{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:58.291{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:41:58.291{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:00.312{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:00.312{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:02.336{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:02.336{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:04.346{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:04.346{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:06.370{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:06.370{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:08.397{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:08.397{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:10.423{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:10.423{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:12.436{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:12.436{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:14.457{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:14.457{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:16.474{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:16.474{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:18.485{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:18.485{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:20.494{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:20.494{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:22.519{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:22.519{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:24.534{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:24.534{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:26.562{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:26.562{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:28.588{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:28.588{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:30.613{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:30.613{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:32.639{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7788F9)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:32.639{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:34.652{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:34.652{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:36.664{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:36.664{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:38.691{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:38.691{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:40.706{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:40.706{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:42.732{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:42.732{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:44.749{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:44.749{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:46.774{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:46.774{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:48.789{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:48.789{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:50.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:50.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:52.832{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:52.832{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:54.848{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:54.848{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:56.873{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:56.873{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:58.888{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:42:58.888{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:00.902{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:00.902{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:02.911{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:02.911{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF69B7B9DEC)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:04.938{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:04.938{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:06.966{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:06.966{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:08.979{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:08.979{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:11.003{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:11.003{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:13.018{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7776E8)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:13.018{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:15.035{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:15.035{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:17.063{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:17.063{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:19.089{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:19.089{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:21.113{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:21.113{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:23.139{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:23.139{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:25.154{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:25.154{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:27.171{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:27.171{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:29.199{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:29.199{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:31.222{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:31.222{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:33.247{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:33.247{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:35.268{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:35.268{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:37.296{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:37.296{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:39.307{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:39.307{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:41.332{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:41.332{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:43.355{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:43.355{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:45.371{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:45.371{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:47.393{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:47.393{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:49.414{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:49.414{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:51.429{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:51.429{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:53.452{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:53.452{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:55.478{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:55.478{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:57.494{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:57.494{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:59.515{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:43:59.515{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:01.538{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:01.538{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:03.556{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:03.556{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:05.572{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:05.572{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:07.591{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:07.591{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:09.621{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:09.621{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:11.638{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:11.638{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:13.661{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:13.661{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:15.677{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:15.677{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:17.707{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:17.707{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:19.731{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:19.731{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:21.762{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:21.764{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:23.791{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:23.791{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:25.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:25.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:27.849{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:27.849{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:29.866{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:29.866{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:31.898{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:31.898{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:33.915{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:33.915{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:35.937{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:35.937{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:37.959{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:37.959{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:39.987{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:39.987{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:42.011{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:42.011{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:44.033{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:44.033{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:46.038{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:46.038{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:48.067{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:48.067{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:50.083{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:50.083{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:52.098{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:52.098{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:54.119{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:54.119{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:56.150{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:56.150{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:58.182{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:44:58.182{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:00.207{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:00.207{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:02.228{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:02.228{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:04.241{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:04.242{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:06.263{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:06.263{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:07.536{8223a6b9-3683-6902-7202-000000002d00}5072C:\Program Files\WSL\wsl.exesoc101win11\Administrator +534500x800000000000000018478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:07.546{8223a6b9-3683-6902-7102-000000002d00}6072C:\Windows\System32\wsl.exesoc101win11\Administrator +534500x800000000000000018479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:07.601{8223a6b9-3683-6902-6f02-000000002d00}11428C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000018480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:07.617{8223a6b9-3683-6902-7002-000000002d00}2988C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000018481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:07.901{8223a6b9-3683-6902-7502-000000002d00}2224C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000018482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:07.916{8223a6b9-3683-6902-7302-000000002d00}3444C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000018483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:07.945{8223a6b9-3683-6902-7402-000000002d00}2388C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000018484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.154{8223a6b9-3684-6902-7802-000000002d00}11304C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000018485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.163{8223a6b9-3683-6902-7602-000000002d00}10348C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000018486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.170{8223a6b9-3684-6902-7702-000000002d00}5380C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000018487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.332{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.332{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.574{8223a6b9-367e-6902-6502-000000002d00}12064C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000018490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.987{8223a6b9-3684-6902-7c02-000000002d00}3060C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000018491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.989{8223a6b9-3684-6902-7b02-000000002d00}1696C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000018492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.994{8223a6b9-3684-6902-7902-000000002d00}3496C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000018493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:08.997{8223a6b9-3684-6902-7a02-000000002d00}8892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000018494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:09.266{8223a6b9-3685-6902-7f02-000000002d00}11684C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000018495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:09.270{8223a6b9-3685-6902-7d02-000000002d00}13808C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000018496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:09.270{8223a6b9-3685-6902-7e02-000000002d00}6792C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000018497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:10.336{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:10.336{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:12.370{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:12.370{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:14.393{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:14.393{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:16.403{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:16.404{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:18.409{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:18.409{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:20.419{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:20.419{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:22.433{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:22.433{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:24.466{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:24.466{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:26.481{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:26.481{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:28.499{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:28.499{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:30.531{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:30.531{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:32.539{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:32.541{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:34.560{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:34.560{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:36.593{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:36.593{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:37.924{8223a6b9-36a1-6902-8302-000000002d00}2740C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000018526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:37.927{8223a6b9-36a1-6902-8102-000000002d00}14048C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000018527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:37.927{8223a6b9-36a1-6902-8202-000000002d00}6012C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000018528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:38.619{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:38.619{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:40.642{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:40.642{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:42.664{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:42.664{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:43.091{8223a6b9-36a1-6902-8402-000000002d00}10908C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000018535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:44.686{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:44.686{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:46.708{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:46.708{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:48.721{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:48.721{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:50.737{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:50.737{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:52.766{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:52.766{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:54.784{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:54.784{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:56.804{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:56.804{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:58.810{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:45:58.810{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:00.824{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:00.824{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:02.839{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:02.839{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:03.171{8223a6b9-32de-6902-5702-000000002d00}8824C:\Windows\System32\mmc.exesoc101win11\Administrator +10341000x800000000000000018556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:04.858{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:04.858{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:06.877{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:06.877{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:08.895{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:08.895{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:10.913{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:10.913{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:12.930{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:12.930{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:14.962{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:14.962{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:16.995{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:16.995{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:19.023{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:19.023{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:21.054{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:21.054{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:23.067{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:23.067{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:25.098{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:25.098{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:27.125{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:27.125{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:29.140{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:29.140{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:29.638{8223a6b9-36d5-6902-8702-000000002d00}1288C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +10341000x800000000000000018583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:31.152{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:31.152{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:33.172{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:33.172{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:35.199{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:35.199{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:37.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:37.227{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:39.258{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:39.260{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:41.283{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:41.283{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:43.309{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:43.309{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:45.339{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:45.339{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:47.362{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:47.362{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:49.384{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:49.384{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:50.270{8223a6b9-36ea-6902-8802-000000002d00}2984C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +10341000x800000000000000018604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:51.411{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:51.411{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:53.443{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:53.443{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:55.475{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:55.475{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:57.501{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:57.501{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:59.519{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:46:59.519{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:01.548{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:01.548{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:03.563{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:03.563{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:05.397{8223a6b9-36f9-6902-8902-000000002d00}6356C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +10341000x800000000000000018619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:05.592{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:05.592{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:05.687{8223a6b9-36f9-6902-8a02-000000002d00}12432C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +534500x800000000000000018622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:06.150{8223a6b9-36a2-6902-8502-000000002d00}1764C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000018623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:07.609{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:07.609{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:09.642{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:09.642{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:11.671{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:11.671{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:11.673{8223a6b9-36ff-6902-8c02-000000002d00}1872C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000018630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:13.623{8223a6b9-36ff-6902-8b02-000000002d00}11312C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000018631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:13.689{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:13.689{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:15.704{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:15.704{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:16.203{8223a6b9-3704-6902-8f02-000000002d00}14176C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +10341000x800000000000000018636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:17.723{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:17.723{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:19.072{8223a6b9-3686-6902-8002-000000002d00}1684C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000018639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:19.748{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:19.748{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:21.776{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:21.776{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:23.807{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:23.807{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:25.832{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:25.832{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:27.852{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:27.852{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:29.872{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:29.872{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:31.893{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:31.893{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:33.910{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:33.910{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:35.935{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:35.935{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:37.962{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:37.962{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:39.992{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:39.992{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:42.019{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:42.019{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:42.473{8223a6b9-3700-6902-8e02-000000002d00}5552C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +10341000x800000000000000018664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:44.048{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:44.050{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:46.076{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:46.076{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:48.098{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:48.098{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:50.126{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:50.126{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:51.680{8223a6b9-36ff-6902-8d02-000000002d00}3592C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +10341000x800000000000000018673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:52.146{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:52.146{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:54.170{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:54.170{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:56.193{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:56.193{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:58.215{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:47:58.215{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:00.241{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:00.241{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:02.265{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:02.265{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:04.290{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:04.290{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:06.312{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:06.312{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:08.338{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:08.338{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:10.362{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:10.362{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:12.372{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:12.372{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:14.399{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:14.399{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:16.427{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:16.427{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:18.451{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:18.451{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:20.478{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:20.478{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:22.497{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:22.497{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:24.524{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:24.524{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:26.552{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:26.552{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:28.577{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:28.577{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:30.596{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:30.596{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:32.616{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:32.616{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:34.638{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:34.638{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:36.665{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:36.665{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:38.685{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:38.685{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:40.704{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:40.704{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:42.735{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:42.735{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:44.752{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:44.754{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:46.768{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:46.768{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:48.783{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:48.783{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:50.792{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:50.792{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:52.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:52.820{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:54.840{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:54.840{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:56.869{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:56.869{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:58.878{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:48:58.878{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:00.908{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:00.908{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:01.022{8223a6b9-367d-6902-6402-000000002d00}13784C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000018744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:02.922{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:02.923{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:04.948{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:04.948{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:06.973{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:06.973{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:08.999{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:08.999{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +16341600x800000000000000018752Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:49:09.224C:\Users\research\Desktop\systernals\sysmon-llm-observe-final.xmlSHA256=38ABA8556A331826124B294D7F4E848711D4EC1E18C1FA0D5FC9AAA22287703E +534500x800000000000000018753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:09.224{8223a6b9-3775-6902-9402-000000002d00}1012C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +10341000x800000000000000018754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:11.029{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:11.029{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:13.041{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:13.041{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:13.810{8223a6b9-3779-6902-9602-000000002d00}1696C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000018759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:15.061{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:15.063{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.082{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7B98A1)|UNKNOWN(00007FF69B7B8BF5)|UNKNOWN(00007FF69B7B7A9A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF69B7B8429)|UNKNOWN(00007FF69B7B60D1)|UNKNOWN(00007FF69B7B4943)|UNKNOWN(00007FF69B7BAFBA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.082{8223a6b9-30cc-6902-0e02-000000002d00}1394013644C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF69B7BA9ED)|UNKNOWN(00007FF69B7B8F16)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.827{8223a6b9-3680-6902-6602-000000002d00}4540C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000018764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.837{8223a6b9-2c2d-6902-bb00-000000002d00}8364C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exesoc101win11\Administrator +534500x800000000000000018765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.841{8223a6b9-2c41-6902-d600-000000002d00}10004C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000018766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.853{8223a6b9-2c2b-6902-b500-000000002d00}7916C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exesoc101win11\Administrator +534500x800000000000000018767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.860{8223a6b9-2c44-6902-df00-000000002d00}11032C:\Windows\System32\SecurityHealthSystray.exesoc101win11\Administrator +534500x800000000000000018768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.873{8223a6b9-2d90-6902-8e01-000000002d00}8156C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exesoc101win11\Administrator +534500x800000000000000018769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.874{8223a6b9-2c29-6902-a500-000000002d00}6936C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exesoc101win11\Administrator +534500x800000000000000018770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.890{8223a6b9-2cb0-6902-5e01-000000002d00}10916C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000018771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.946{8223a6b9-2c41-6902-d900-000000002d00}784C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000018772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.969{8223a6b9-2c41-6902-d800-000000002d00}1124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000018773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:17.988{8223a6b9-2c41-6902-d700-000000002d00}9756C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000018774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.002{8223a6b9-3682-6902-6d02-000000002d00}4888C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000018775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.008{8223a6b9-2c21-6902-6100-000000002d00}4584C:\Windows\System32\vm3dservice.exeNT AUTHORITY\SYSTEM +534500x800000000000000018776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.012{8223a6b9-3681-6902-6a02-000000002d00}7196C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000018777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.014{8223a6b9-30cf-6902-1402-000000002d00}13900C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.016{8223a6b9-30cd-6902-1002-000000002d00}10196C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.016{8223a6b9-30d2-6902-1802-000000002d00}2252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.020{8223a6b9-3682-6902-6e02-000000002d00}10412C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000018781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.020{8223a6b9-30cc-6902-0e02-000000002d00}13940C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.022{8223a6b9-30d7-6902-2d02-000000002d00}13480C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.022{8223a6b9-3682-6902-6c02-000000002d00}2500C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000018784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.042{8223a6b9-2c42-6902-da00-000000002d00}1348C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\WindowsTerminal.exesoc101win11\Administrator +534500x800000000000000018785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.052{8223a6b9-2c45-6902-e100-000000002d00}11108C:\Program Files\VMware\VMware Tools\vmtoolsd.exesoc101win11\Administrator +534500x800000000000000018786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.058{8223a6b9-2cde-6902-6901-000000002d00}6564C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exesoc101win11\Administrator +534500x800000000000000018787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.072{8223a6b9-2c5a-6902-1101-000000002d00}13260C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\WebViewHost.exesoc101win11\Administrator +534500x800000000000000018788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.094{8223a6b9-30cc-6902-0d02-000000002d00}3184C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.126{8223a6b9-30cc-6902-0c02-000000002d00}14296C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.152{8223a6b9-2c5a-6902-1501-000000002d00}12548C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.152{8223a6b9-3680-6902-6702-000000002d00}11888C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000018792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.156{8223a6b9-2c55-6902-f800-000000002d00}12156C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000018793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.196{8223a6b9-30cb-6902-0a02-000000002d00}2636C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.214{8223a6b9-2c55-6902-fa00-000000002d00}11636C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000018795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.218{8223a6b9-2c55-6902-fc00-000000002d00}11568C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000018796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.218{8223a6b9-2c55-6902-fd00-000000002d00}11844C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000018797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.232{8223a6b9-3681-6902-6b02-000000002d00}8588C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000018798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.289{8223a6b9-2c5a-6902-1801-000000002d00}13128C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.293{8223a6b9-2c5a-6902-1901-000000002d00}13152C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.297{8223a6b9-2c5a-6902-1701-000000002d00}13120C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.443{8223a6b9-30d0-6902-1502-000000002d00}13056C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.447{8223a6b9-2c5c-6902-1e01-000000002d00}13556C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000018803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.451{8223a6b9-2c5c-6902-1b01-000000002d00}13372C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000018804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.453{8223a6b9-3681-6902-6902-000000002d00}13768C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000018805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.457{8223a6b9-2c5a-6902-1a01-000000002d00}632C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.469{8223a6b9-3681-6902-6802-000000002d00}11804C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +534500x800000000000000018807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.494{8223a6b9-2c5a-6902-1601-000000002d00}10152C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.510{8223a6b9-2c55-6902-f900-000000002d00}12188C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000018809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.762{8223a6b9-33b5-6902-6302-000000002d00}10432C:\Users\research\Desktop\tools\currentports\cports.exesoc101win11\Administrator +534500x800000000000000018810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.770{8223a6b9-2c64-6902-2601-000000002d00}14248C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exesoc101win11\Administrator +534500x800000000000000018811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.770{8223a6b9-33a2-6902-6002-000000002d00}9900C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exesoc101win11\Administrator +534500x800000000000000018812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.782{8223a6b9-30cb-6902-0b02-000000002d00}9484C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000018813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.826{8223a6b9-377d-6902-9a02-000000002d00}7084C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000018814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.836{8223a6b9-2d23-6902-7101-000000002d00}12200C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exesoc101win11\Administrator +534500x800000000000000018815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.867{8223a6b9-2f4b-6902-b101-000000002d00}2364C:\Windows\ImmersiveControlPanel\SystemSettings.exesoc101win11\Administrator +534500x800000000000000018816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.881{8223a6b9-2c2d-6902-b900-000000002d00}7712C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.885{8223a6b9-2c2b-6902-b100-000000002d00}7600C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exesoc101win11\Administrator +534500x800000000000000018818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.888{8223a6b9-2c2b-6902-b000-000000002d00}7592C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exesoc101win11\Administrator +534500x800000000000000018819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.927{8223a6b9-2c2e-6902-bf00-000000002d00}8784C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000018820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.973{8223a6b9-2c2d-6902-bd00-000000002d00}8492C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.975{8223a6b9-2c2d-6902-ba00-000000002d00}8324C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.979{8223a6b9-2c2d-6902-bc00-000000002d00}8428C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:18.983{8223a6b9-2c2c-6902-b800-000000002d00}7228C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.002{8223a6b9-2c2d-6902-be00-000000002d00}8572C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000018825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.288{8223a6b9-2c29-6902-a100-000000002d00}6644C:\Windows\explorer.exesoc101win11\Administrator +534500x800000000000000018826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.338{8223a6b9-2c36-6902-cf00-000000002d00}9816C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000018827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.338{8223a6b9-3779-6902-9702-000000002d00}2540C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000018828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.340{8223a6b9-2c5a-6902-1201-000000002d00}11864C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000018829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.340{8223a6b9-2d24-6902-7201-000000002d00}8976C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000018830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.344{8223a6b9-2f4b-6902-b201-000000002d00}12660C:\Windows\System32\ApplicationFrameHost.exesoc101win11\Administrator +534500x800000000000000018831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.350{8223a6b9-2c2e-6902-c000-000000002d00}9104C:\Windows\System32\ctfmon.exesoc101win11\Administrator +534500x800000000000000018832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.350{8223a6b9-2c2b-6902-b400-000000002d00}7864C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000018833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.354{8223a6b9-2c28-6902-9400-000000002d00}5604C:\Windows\System32\sihost.exesoc101win11\Administrator +534500x800000000000000018834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.356{8223a6b9-2c29-6902-a200-000000002d00}6680C:\Windows\System32\ShellHost.exesoc101win11\Administrator +534500x800000000000000018835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.358{8223a6b9-2c2b-6902-b200-000000002d00}7780C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000018836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.413{8223a6b9-2c28-6902-9a00-000000002d00}6188C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000018837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.455{8223a6b9-2c2a-6902-ab00-000000002d00}6196C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000018838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.459{8223a6b9-2c28-6902-9700-000000002d00}3020C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000018839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.461{8223a6b9-2c2b-6902-b300-000000002d00}7792C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000018840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.471{8223a6b9-2c28-6902-9600-000000002d00}5952C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000018841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.473{8223a6b9-2ca0-6902-4d01-000000002d00}5028C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000018842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.489{8223a6b9-2c28-6902-9800-000000002d00}5464C:\Windows\System32\svchost.exesoc101win11\Administrator +534500x800000000000000018843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:19.682{8223a6b9-377f-6902-9d02-000000002d00}12724C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:20.530{8223a6b9-377d-6902-9802-000000002d00}1112C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000018845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:20.546{8223a6b9-2caa-6902-5401-000000002d00}11252C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.419{8223a6b9-2c20-6902-3d00-000000002d00}2128C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.435{8223a6b9-36bf-6902-8602-000000002d00}10208C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.561{8223a6b9-3781-6902-a002-000000002d00}6296C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000018849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.561{8223a6b9-377f-6902-9e02-000000002d00}14140C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000018850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.605{8223a6b9-2c20-6902-3500-000000002d00}2688C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.607{8223a6b9-2c44-6902-e000-000000002d00}11052C:\Windows\System32\SecurityHealthService.exeNT AUTHORITY\SYSTEM +534500x800000000000000018852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.609{8223a6b9-2c21-6902-5800-000000002d00}4232C:\Program Files\VMware\VMware Tools\vmtoolsd.exeNT AUTHORITY\SYSTEM +534500x800000000000000018853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.784{8223a6b9-2c23-6902-6800-000000002d00}5524C:\Windows\System32\AggregatorHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.811{8223a6b9-2c21-6902-4f00-000000002d00}3860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000018855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.859{8223a6b9-2c1f-6902-2800-000000002d00}1368C:\WINDOWS\system32\svchost.exeC:\Windows\Prefetch\PfSvPerfStats.bin2025-10-29 15:49:21.859NT AUTHORITY\SYSTEM +534500x800000000000000018856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.871{8223a6b9-2caa-6902-5601-000000002d00}11340C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.895{8223a6b9-2c1f-6902-2400-000000002d00}2028C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.895{8223a6b9-377d-6902-9902-000000002d00}10080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.895{8223a6b9-377f-6902-9f02-000000002d00}8596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.895{8223a6b9-2c21-6902-4b00-000000002d00}3640C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.897{8223a6b9-3728-6902-9002-000000002d00}14080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.899{00000000-0000-0000-0000-000000000000}3036<unknown process>NT AUTHORITY\NETWORK SERVICE +534500x800000000000000018863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.909{8223a6b9-376f-6902-9202-000000002d00}10104C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.911{8223a6b9-2c1f-6902-1b00-000000002d00}1536C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.915{8223a6b9-2c22-6902-6400-000000002d00}5012C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.917{8223a6b9-2c20-6902-2f00-000000002d00}2328C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.917{8223a6b9-2ce0-6902-6a01-000000002d00}7120C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.921{8223a6b9-2c21-6902-4e00-000000002d00}3716C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.923{8223a6b9-2c20-6902-3700-000000002d00}2868C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.925{8223a6b9-2c47-6902-e500-000000002d00}10968C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.927{8223a6b9-2c20-6902-3300-000000002d00}2588C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.929{8223a6b9-2c21-6902-5400-000000002d00}3196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.939{8223a6b9-377d-6902-9c02-000000002d00}12580C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.939{8223a6b9-2c1f-6902-2800-000000002d00}1368C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.948{8223a6b9-2c21-6902-5300-000000002d00}4092C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exeNT AUTHORITY\SYSTEM +534500x800000000000000018876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.951{8223a6b9-2c21-6902-4700-000000002d00}3416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.951{8223a6b9-3732-6902-9102-000000002d00}5576C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.957{8223a6b9-2c1f-6902-1d00-000000002d00}1656C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.964{8223a6b9-2c40-6902-d500-000000002d00}9876C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.970{8223a6b9-2c23-6902-6600-000000002d00}5364C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.970{8223a6b9-2f4c-6902-b401-000000002d00}12596C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.984{8223a6b9-2cab-6902-5801-000000002d00}12796C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:21.990{8223a6b9-2c21-6902-4c00-000000002d00}3700C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.014{8223a6b9-2c28-6902-9100-000000002d00}5916C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.024{8223a6b9-2c20-6902-4400-000000002d00}3316C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.036{8223a6b9-2c1f-6902-1400-000000002d00}1260C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.036{8223a6b9-2c1f-6902-2300-000000002d00}1904C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.041{8223a6b9-2c1f-6902-1600-000000002d00}1280C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.043{8223a6b9-2f4d-6902-b501-000000002d00}11800C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.069{8223a6b9-2c20-6902-3a00-000000002d00}3024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.131{8223a6b9-2c20-6902-2e00-000000002d00}2288C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.255{8223a6b9-376f-6902-9302-000000002d00}10716C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.285{8223a6b9-2c31-6902-c400-000000002d00}7376C:\Windows\System32\SearchIndexer.exeNT AUTHORITY\SYSTEM +534500x800000000000000018894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.458{8223a6b9-2c21-6902-5a00-000000002d00}4316C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +534500x800000000000000018895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:22.852{8223a6b9-2c21-6902-5000-000000002d00}3924C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE + +2553225500x800000000000000018896Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:49:24.290GetConfigurationOptionsFailed to open service configuration with error 1018692288 - Last error: The media is write protected. + +2553225500x800000000000000018897Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:49:24.290GetConfigurationOptionsFailed to open service configuration with error 1018692288 - Last error: The media is write protected. +434400x800000000000000018898Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:49:39.964Started15.154.90 +534500x800000000000000018899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:34.638{8223a6b9-378e-6902-0400-000000002e00}496C:\Windows\System32\autochk.exeNT AUTHORITY\SYSTEM +534500x800000000000000018900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:35.167{8223a6b9-378e-6902-0500-000000002e00}580C:\Windows\System32\smss.exeNT AUTHORITY\SYSTEM +534500x800000000000000018901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:35.199{8223a6b9-378f-6902-0700-000000002e00}692C:\Windows\System32\smss.exeNT AUTHORITY\SYSTEM +534500x800000000000000018902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:36.481{8223a6b9-3790-6902-2100-000000002e00}1708C:\Windows\System32\upfc.exeNT AUTHORITY\SYSTEM +534500x800000000000000018903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:38.563{8223a6b9-3792-6902-4c00-000000002e00}3712C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000018904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:39.286{8223a6b9-3792-6902-5700-000000002e00}4296C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exeC:\ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20251029-084939-00000003-100000000.bin2025-10-29 15:49:39.286NT AUTHORITY\SYSTEM +534500x800000000000000018905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:39.383{8223a6b9-3792-6902-5800-000000002e00}4324C:\Program Files\osquery\osqueryd\osqueryd.exeNT AUTHORITY\SYSTEM +11241100x800000000000000018906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:39.998{8223a6b9-3793-6902-6100-000000002e00}4440C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeC:\ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20251029-154939-00000003-fffffffeffffffff.bin2025-10-29 15:49:39.998NT AUTHORITY\SYSTEM +534500x800000000000000018907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:40.644{8223a6b9-3790-6902-2f00-000000002e00}2304C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000018908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:40.754{8223a6b9-3791-6902-4200-000000002e00}3264C:\Windows\System32\dxgiadaptercache.exeNT AUTHORITY\SYSTEM +534500x800000000000000018909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:40.817{8223a6b9-3792-6902-4600-000000002e00}3496C:\Windows\System32\taskhostw.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000018910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:40.952{8223a6b9-3792-6902-5300-000000002e00}3856C:\Windows\System32\ClipRenew.exeNT AUTHORITY\SYSTEM +534500x800000000000000018911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:41.503{8223a6b9-3794-6902-6a00-000000002e00}5500C:\Windows\System32\taskhostw.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.492{8223a6b9-3796-6902-7900-000000002e00}1216C:\Windows\System32\reg.exeNT AUTHORITY\SYSTEM +534500x800000000000000018913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.679{8223a6b9-3796-6902-7a00-000000002e00}1260C:\Windows\System32\find.exeNT AUTHORITY\SYSTEM +534500x800000000000000018914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.683{8223a6b9-3796-6902-7700-000000002e00}5528C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000018915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.726{8223a6b9-3796-6902-7c00-000000002e00}6108C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000018916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.728{8223a6b9-3796-6902-7b00-000000002e00}964C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000018917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.732{8223a6b9-3791-6902-4100-000000002e00}3184C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000018918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.736{8223a6b9-3794-6902-6b00-000000002e00}5520C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.800{8223a6b9-3795-6902-7000-000000002e00}5828C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:42.802{8223a6b9-3796-6902-7600-000000002e00}2308C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000018921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.179{8223a6b9-3797-6902-7d00-000000002e00}1364C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.185{8223a6b9-3797-6902-7e00-000000002e00}4336C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.250{8223a6b9-3797-6902-7f00-000000002e00}868C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.250{8223a6b9-3797-6902-8000-000000002e00}1260C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.480{8223a6b9-3797-6902-8100-000000002e00}5656C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.480{8223a6b9-3797-6902-8200-000000002e00}3184C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.847{8223a6b9-3797-6902-8400-000000002e00}5548C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.847{8223a6b9-3797-6902-8500-000000002e00}5932C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.961{8223a6b9-3797-6902-8600-000000002e00}1756C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:43.963{8223a6b9-3797-6902-8700-000000002e00}5664C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.027{8223a6b9-3797-6902-8800-000000002e00}5540C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.027{8223a6b9-3797-6902-8900-000000002e00}4056C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.077{8223a6b9-3798-6902-8a00-000000002e00}5688C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.077{8223a6b9-3798-6902-8b00-000000002e00}3500C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.165{8223a6b9-3798-6902-8c00-000000002e00}5544C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.165{8223a6b9-3798-6902-8d00-000000002e00}5624C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.237{8223a6b9-3798-6902-8e00-000000002e00}6108C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.237{8223a6b9-3798-6902-8f00-000000002e00}5540C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.315{8223a6b9-3798-6902-9000-000000002e00}3184C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.317{8223a6b9-3798-6902-9100-000000002e00}4416C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.450{8223a6b9-3798-6902-9200-000000002e00}5548C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.450{8223a6b9-3798-6902-9300-000000002e00}5624C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.506{8223a6b9-3798-6902-9400-000000002e00}3268C:\Windows\System32\wevtutil.exeNT AUTHORITY\SYSTEM +534500x800000000000000018944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:44.506{8223a6b9-3798-6902-9500-000000002e00}3188C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000018945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:48.017{8223a6b9-3791-6902-3c00-000000002e00}2992C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\PostRebootEventCache.V2\{2EFD45C7-4C82-4767-800E-9F261328AF15}.bin2025-10-29 14:25:26.251NT AUTHORITY\SYSTEM +534500x800000000000000018946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:49:49.839{8223a6b9-3791-6902-3d00-000000002e00}3008C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +11241100x800000000000000018947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:03.029{8223a6b9-378f-6902-0c00-000000002e00}872C:\WINDOWS\system32\lsass.exeC:\Users\Administrator\AppData\Local\Microsoft\Windows\SFAP\cache0.bin2024-11-11 17:13:25.488NT AUTHORITY\SYSTEM +534500x800000000000000018948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:03.243{8223a6b9-37ab-6902-9c00-000000002e00}6636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:04.561{8223a6b9-37ab-6902-a600-000000002e00}7044C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000018950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:05.542{8223a6b9-37ac-6902-af00-000000002e00}7440C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000018951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:05.629{8223a6b9-37ac-6902-ae00-000000002e00}7404C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000018952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:05.877{8223a6b9-37ab-6902-a500-000000002e00}7028C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000018953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:07.869{8223a6b9-3791-6902-3a00-000000002e00}2964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000018954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:08.627{8223a6b9-378f-6902-1200-000000002e00}1080C:\Windows\System32\LogonUI.exeNT AUTHORITY\SYSTEM +534500x800000000000000018955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:09.983{8223a6b9-37ab-6902-a300-000000002e00}6988C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000018956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:10.109{8223a6b9-37ab-6902-9d00-000000002e00}6692C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000018957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:11.546{8223a6b9-37ad-6902-b400-000000002e00}7944C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000018958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:12.009{8223a6b9-3791-6902-3e00-000000002e00}2588C:\Windows\System32\ctfmon.exeNT AUTHORITY\SYSTEM +534500x800000000000000018959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:13.669{8223a6b9-37af-6902-c200-000000002e00}9044C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000018960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:14.329{8223a6b9-37b0-6902-c800-000000002e00}3912C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000018961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:14.824{8223a6b9-37ac-6902-b000-000000002e00}7516C:\Windows\System32\rundll32.exesoc101win11\Administrator +534500x800000000000000018962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:18.824{8223a6b9-37ba-6902-d300-000000002e00}10140C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000018963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:20.781{8223a6b9-37ad-6902-b700-000000002e00}8124C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000018964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:21.229{8223a6b9-37b3-6902-ca00-000000002e00}9864C:\Windows\System32\mobsync.exesoc101win11\Administrator +10341000x800000000000000018965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:21.708{8223a6b9-37bc-6902-d500-000000002e00}100609692C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37bd-6902-d600-000000002e00}7628C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+20a92ce|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+20a855e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e8f950|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e90228|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e90518|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24c2c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24dd52|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24da30|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24d535|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24d3e4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000018966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:21.773{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\test.txt2025-10-29 15:50:21.773soc101win11\Administrator +11241100x800000000000000018967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.266{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\lockfile2025-10-29 15:50:22.266soc101win11\Administrator +10341000x800000000000000018968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.377{8223a6b9-37bc-6902-d500-000000002e00}100609864C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37be-6902-d700-000000002e00}10272C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c93|C:\WINDOWS\System32\ADVAPI32.dll+30a20|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a9c5cc|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+257b199|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+257b677|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223d8bf|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+26cbe2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d1bd2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d1cb6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+31024b8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.401{8223a6b9-37bc-6902-d500-000000002e00}1006010252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37be-6902-d800-000000002e00}10280C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000018970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.417{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 15:50:22.417soc101win11\Administrator +11241100x800000000000000018971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.423{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +10341000x800000000000000018972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.444{8223a6b9-37bd-6902-d600-000000002e00}76283096C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37be-6902-d700-000000002e00}10272C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.458{8223a6b9-37bc-6902-d500-000000002e00}1006010252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37be-6902-d900-000000002e00}10308C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.458{8223a6b9-37bd-6902-d600-000000002e00}76288124C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37be-6902-d800-000000002e00}10280C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +734700x800000000000000018975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.648{8223a6b9-37be-6902-d700-000000002e00}10272C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vulkan-1.dllVulkan Loader1.4.315.0Vulkan Runtime--SHA256=B4FC93097844C72FB999663BB9E2CEBC53C9D18465DDB01E02641F2FE289B7F6trueElement Labs Inc.Validsoc101win11\Administrator +10341000x800000000000000018976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:22.732{8223a6b9-37bc-6902-d500-000000002e00}100609692C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37be-6902-d700-000000002e00}10272C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x101451C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba7ca|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+15708d8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1570d05|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2622cba|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462a1ac|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462b8c7|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46300c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3a59ef5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+463715c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46eac03|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45ca04d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebcb4d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+252a2de|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ef0e8f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153ade2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153c961|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153818f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84e6cb|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84f88fsoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000018977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:23.030{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\lms-key-22025-10-29 13:25:54.480soc101win11\Administrator +10341000x800000000000000018978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:23.056{8223a6b9-37bc-6902-d500-000000002e00}1006010252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37bf-6902-da00-000000002e00}10512C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:23.089{8223a6b9-37bd-6902-d600-000000002e00}76283096C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37bf-6902-da00-000000002e00}10512C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +734700x800000000000000018980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:23.834{8223a6b9-37bf-6902-da00-000000002e00}10512C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Windows\System32\vulkan-1.dll1.3.300.0Vulkan LoaderVulkan Runtime--SHA256=544DE63A0E4D7D88833708DF2644774CB41872B370E63EC93D30BEA4620AA640false-Unavailablesoc101win11\Administrator +11241100x800000000000000018981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:23.913{8223a6b9-37bd-6902-d600-000000002e00}7628C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\2cad4b8a-529e-401f-b2ce-d6632bad6f7b.dmp2025-10-29 15:50:23.913soc101win11\Administrator +10341000x800000000000000018982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:23.937{8223a6b9-37bd-6902-d600-000000002e00}762810620C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37bf-6902-da00-000000002e00}10512C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1010C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba83a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+250f117|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3100a52|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7e46e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+7c59c60|C:\WINDOWS\SYSTEM32\ntdll.dll+7f238|C:\WINDOWS\SYSTEM32\ntdll.dll+7dc31|C:\WINDOWS\SYSTEM32\ntdll.dll+927b9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:23.969{8223a6b9-37bf-6902-da00-000000002e00}10512C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +10341000x800000000000000018984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:23.993{8223a6b9-37bc-6902-d500-000000002e00}1006010252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37bf-6902-db00-000000002e00}10632C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:24.024{8223a6b9-37bd-6902-d600-000000002e00}76288124C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37bf-6902-db00-000000002e00}10632C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000018986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:24.952{8223a6b9-37ba-6902-d400-000000002e00}9048C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\FileCoAuth.exesoc101win11\Administrator +534500x800000000000000018987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.304{8223a6b9-37c0-6902-dc00-000000002e00}10716C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000018988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.319{8223a6b9-37c0-6902-dd00-000000002e00}10796C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000018989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.337{8223a6b9-37bc-6902-d500-000000002e00}1006010252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37c2-6902-de00-000000002e00}10920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000018990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.371{8223a6b9-37bd-6902-d600-000000002e00}76283096C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37c2-6902-de00-000000002e00}10920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000018991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.494{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 15:50:22.417soc101win11\Administrator +11241100x800000000000000018992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.494{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +11241100x800000000000000018993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.574{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\single-downloads-info.json2025-10-29 13:26:12.356soc101win11\Administrator +11241100x800000000000000018994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.574{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\download-jobs-info.json2025-10-29 13:25:57.795soc101win11\Administrator +11241100x800000000000000018995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.780{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\app-install-location.json2025-10-29 13:26:00.104soc101win11\Administrator +11241100x800000000000000018996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.792{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\blob_storage\ab9a97f4-75ab-4288-bdf0-05a10cc94c2b2025-10-29 15:50:26.792soc101win11\Administrator +11241100x800000000000000018997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.803{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG.old~RFe07c.TMP2025-10-29 15:50:26.801soc101win11\Administrator +11241100x800000000000000018998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:26.807{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG2025-10-29 13:26:00.054soc101win11\Administrator +534500x800000000000000018999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:27.683{8223a6b9-37c3-6902-e200-000000002e00}10572C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\elevation_service.exeNT AUTHORITY\SYSTEM +534500x800000000000000019000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:27.744{8223a6b9-37ab-6902-a800-000000002e00}6320C:\Windows\System32\userinit.exesoc101win11\Administrator +534500x800000000000000019001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:27.784{8223a6b9-37c3-6902-e600-000000002e00}11428C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000019002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:27.873{8223a6b9-37c3-6902-e500-000000002e00}11360C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000019003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:28.155{8223a6b9-37c4-6902-eb00-000000002e00}11664C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000019004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.239{8223a6b9-37c3-6902-e900-000000002e00}11492C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000019005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.243{8223a6b9-37c3-6902-ea00-000000002e00}11508C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.270{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\artifact-permissions-list.json2025-10-29 13:26:10.968soc101win11\Administrator +11241100x800000000000000019007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.292{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\bin\lms.exe2025-10-29 13:25:54.446soc101win11\Administrator +11241100x800000000000000019008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.452{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\persistent-extension-pack-state.json2025-10-29 13:26:28.592soc101win11\Administrator +10341000x800000000000000019009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.472{8223a6b9-37bc-6902-d500-000000002e00}1006010252C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37c5-6902-f200-000000002e00}12076C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.503{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-index-cache.json2025-10-29 13:26:10.986soc101win11\Administrator +10341000x800000000000000019011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.537{8223a6b9-37bd-6902-d600-000000002e00}76288124C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-37c5-6902-f200-000000002e00}12076C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.539{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\last-synced-mcp-state.json2025-10-29 13:26:11.002soc101win11\Administrator +11241100x800000000000000019013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.794{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\backend-preferences-v1.json2025-10-29 13:26:30.140soc101win11\Administrator +11241100x800000000000000019014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.800{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\internal-engine-index.json2025-10-29 13:26:30.295soc101win11\Administrator +534500x800000000000000019015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.842{8223a6b9-37c5-6902-f700-000000002e00}10856C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000019016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.842{8223a6b9-37c5-6902-f800-000000002e00}11336C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000019017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.844{8223a6b9-37c5-6902-f400-000000002e00}12196C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000019018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.846{8223a6b9-37c5-6902-f300-000000002e00}12176C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000019019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.847{8223a6b9-37c5-6902-f600-000000002e00}12212C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.849{8223a6b9-37c5-6902-f500-000000002e00}12204C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.919{8223a6b9-37c5-6902-f900-000000002e00}6236C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000019022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.919{8223a6b9-37c5-6902-fa00-000000002e00}11432C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000019023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.921{8223a6b9-37c5-6902-fb00-000000002e00}11536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:29.923{8223a6b9-37c5-6902-fc00-000000002e00}11512C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:30.466{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\persistent-extension-pack-state.json2025-10-29 13:26:28.592soc101win11\Administrator +11241100x800000000000000019026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:30.531{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-index-cache.json2025-10-29 13:26:10.986soc101win11\Administrator +11241100x800000000000000019027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:31.962{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\collections.json2025-10-29 13:26:12.119soc101win11\Administrator +534500x800000000000000019028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:32.560{8223a6b9-37c7-6902-fd00-000000002e00}12048C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2510.53081.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exesoc101win11\Administrator +11241100x800000000000000019029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:32.972{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\collections.json2025-10-29 13:26:12.119soc101win11\Administrator +534500x800000000000000019030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:33.347{8223a6b9-37c8-6902-0101-000000002e00}11704C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000019031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:33.735{8223a6b9-37c9-6902-0401-000000002e00}11344C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000019032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:33.912{8223a6b9-37c9-6902-0901-000000002e00}12736C:\Windows\System32\wlrmdr.exesoc101win11\Administrator +534500x800000000000000019033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:35.580{8223a6b9-37c5-6902-f100-000000002e00}12068C:\Windows\System32\BdeUISrv.exesoc101win11\Administrator +11241100x800000000000000019034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:36.840{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\84c03433-4323-4bc3-b66c-ba23162521f3.tmp2025-10-29 15:50:36.840soc101win11\Administrator +11241100x800000000000000019035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:36.840{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Preferences~RF107ac.TMP2025-10-29 15:50:36.840soc101win11\Administrator +534500x800000000000000019036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:38.224{8223a6b9-3792-6902-4300-000000002e00}3300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:38.472{8223a6b9-37ce-6902-0c01-000000002e00}13012C:\Windows\System32\dxgiadaptercache.exeNT AUTHORITY\SYSTEM +534500x800000000000000019038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.074{8223a6b9-37c3-6902-e800-000000002e00}11464C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000019039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.166{8223a6b9-37ca-6902-0a01-000000002e00}12760C:\Windows\System32\taskhostw.exesoc101win11\Administrator +11241100x800000000000000019040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.230{8223a6b9-37cf-6902-0f01-000000002e00}13104C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\app.log2025-09-03 13:59:03.317soc101win11\Administrator +11241100x800000000000000019041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.246{8223a6b9-37cf-6902-0f01-000000002e00}13104C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\server.log2025-09-03 13:59:03.320soc101win11\Administrator +534500x800000000000000019042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.247{8223a6b9-3795-6902-6d00-000000002e00}5712C:\Windows\System32\SppExtComObj.ExeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000019043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.251{8223a6b9-3794-6902-6c00-000000002e00}5632C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000019044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.423{8223a6b9-37cf-6902-1001-000000002e00}13164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.430{8223a6b9-37cf-6902-1101-000000002e00}13180C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.536{8223a6b9-37cf-6902-1201-000000002e00}13252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.537{8223a6b9-37cf-6902-1301-000000002e00}13260C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:40.396{8223a6b9-37cf-6902-0f01-000000002e00}13104C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\ollama.pid2025-09-03 13:59:08.110soc101win11\Administrator +22542200x800000000000000019049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:39.387{8223a6b9-37cf-6902-0f01-000000002e00}13104ollama.com0::ffff:34.36.133.15;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +734700x800000000000000019050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:40.923{8223a6b9-37d0-6902-1401-000000002e00}11660C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\Administrator\AppData\Local\Programs\Ollama\lib\ollama\cuda_v12\cudart64_12.dll6,14,11,12080NVIDIA CUDA Runtime, Version 12.8.57 NVIDIA CUDA 12.8.57 RuntimeNVIDIA CorporationCUDART64_128_57.DLLSHA256=B8A8EE29FD67548A3205DD1F891986F3D886A4D093EF6F1B920F2E555A29A0AAtrueOllama Inc.Validsoc101win11\Administrator +534500x800000000000000019051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:42.563{8223a6b9-3792-6902-5100-000000002e00}4016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:44.462{8223a6b9-37d4-6902-1b01-000000002e00}11468C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:44.472{8223a6b9-37d4-6902-1c01-000000002e00}11956C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:44.566{8223a6b9-37cf-6902-0f01-000000002e00}13104C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\updates_v2\0x8DE0D0A19DC250A2025-10-29 15:50:44.566soc101win11\Administrator +534500x800000000000000019055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:44.986{8223a6b9-37d4-6902-1e01-000000002e00}4692C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +22542200x800000000000000019056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:43.954{8223a6b9-37cf-6902-0f01-000000002e00}13104release-assets.githubusercontent.com0::ffff:185.199.109.133;::ffff:185.199.110.133;::ffff:185.199.108.133;::ffff:185.199.111.133;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000019057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:45.637{8223a6b9-37ce-6902-0d01-000000002e00}13036C:\Windows\SysWOW64\runonce.exesoc101win11\Administrator +534500x800000000000000019058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:47.493{8223a6b9-37d4-6902-1d01-000000002e00}12784C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:49.453{8223a6b9-37d9-6902-1f01-000000002e00}5632C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:49.456{8223a6b9-37d9-6902-2001-000000002e00}4720C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:52.475{8223a6b9-37d9-6902-2101-000000002e00}13236C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:54.427{8223a6b9-37de-6902-2201-000000002e00}13272C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:54.429{8223a6b9-37de-6902-2301-000000002e00}13164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:57.450{8223a6b9-37de-6902-2401-000000002e00}5060C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:57.493{8223a6b9-37e1-6902-2501-000000002e00}7332C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000019066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:57.493{8223a6b9-37e1-6902-2701-000000002e00}5396C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000019067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:57.495{8223a6b9-37e1-6902-2601-000000002e00}11728C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000019068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:58.833{8223a6b9-37c4-6902-ee00-000000002e00}11784C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000019069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:59.404{8223a6b9-37e3-6902-2801-000000002e00}4068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:50:59.409{8223a6b9-37e3-6902-2901-000000002e00}4084C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:00.280{8223a6b9-37c4-6902-ed00-000000002e00}11776C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000019072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:02.419{8223a6b9-37e3-6902-2a01-000000002e00}1780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:04.409{8223a6b9-37e8-6902-2b01-000000002e00}11956C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:04.412{8223a6b9-37e8-6902-2c01-000000002e00}12760C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:07.430{8223a6b9-37e8-6902-2d01-000000002e00}5712C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:09.410{8223a6b9-37ed-6902-2f01-000000002e00}4592C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:09.415{8223a6b9-37ed-6902-3001-000000002e00}6196C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:12.425{8223a6b9-37ed-6902-3101-000000002e00}8936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:13.757{8223a6b9-37c3-6902-e700-000000002e00}11456C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000019080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:14.403{8223a6b9-37f2-6902-3201-000000002e00}4828C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:14.405{8223a6b9-37f2-6902-3301-000000002e00}4804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:17.410{8223a6b9-37f2-6902-3401-000000002e00}10288C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:19.404{8223a6b9-37f7-6902-3501-000000002e00}3196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:19.407{8223a6b9-37f7-6902-3601-000000002e00}3192C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:22.422{8223a6b9-37f7-6902-3701-000000002e00}13264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +16341600x800000000000000019086Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 15:51:22.984C:\Users\research\Desktop\systernals\sysmon-llm-observe-final.xmlSHA256=38ABA8556A331826124B294D7F4E848711D4EC1E18C1FA0D5FC9AAA22287703E +534500x800000000000000019087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:22.984{8223a6b9-37fa-6902-3801-000000002e00}12056C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +534500x800000000000000019088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:24.428{8223a6b9-37fc-6902-3901-000000002e00}1020C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:24.431{8223a6b9-37fc-6902-3a01-000000002e00}6084C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:27.441{8223a6b9-37fc-6902-3b01-000000002e00}1496C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:29.028{8223a6b9-3800-6902-4501-000000002e00}7400C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000019092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:29.090{8223a6b9-3800-6902-4401-000000002e00}10120C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000019093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:29.437{8223a6b9-3801-6902-4701-000000002e00}2508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:29.441{8223a6b9-3801-6902-4801-000000002e00}2528C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:32.451{8223a6b9-3801-6902-4901-000000002e00}3304C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:33.562{8223a6b9-37ab-6902-9e00-000000002e00}6700C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:34.466{8223a6b9-3806-6902-4b01-000000002e00}3200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:34.468{8223a6b9-3806-6902-4c01-000000002e00}6816C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:34.529{8223a6b9-3806-6902-4a01-000000002e00}10896C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:35.284{8223a6b9-3792-6902-5600-000000002e00}4248C:\WINDOWS\System32\svchost.exeC:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin2024-11-11 15:59:26.910NT AUTHORITY\LOCAL SERVICE +11241100x800000000000000019101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:35.674{8223a6b9-3792-6902-5600-000000002e00}4248C:\WINDOWS\System32\svchost.exeC:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin2024-11-11 15:46:44.877NT AUTHORITY\LOCAL SERVICE +11241100x800000000000000019102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:35.733{8223a6b9-3792-6902-5600-000000002e00}4248C:\WINDOWS\System32\svchost.exeC:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4051859043-1187413090-3677023548-500_UserData.bin2025-09-03 14:28:56.034NT AUTHORITY\LOCAL SERVICE +534500x800000000000000019103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:36.281{8223a6b9-3790-6902-1500-000000002e00}1268C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:36.475{8223a6b9-3808-6902-4f01-000000002e00}9616C:\Windows\System32\appidpolicyconverter.exeNT AUTHORITY\SYSTEM +534500x800000000000000019105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:36.475{8223a6b9-3808-6902-5001-000000002e00}8008C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:37.486{8223a6b9-3806-6902-4d01-000000002e00}13272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:39.412{8223a6b9-380b-6902-5101-000000002e00}1128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:39.414{8223a6b9-380b-6902-5201-000000002e00}9688C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.703{8223a6b9-380d-6902-5401-000000002e00}5532C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000019110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.737{8223a6b9-37c5-6902-f200-000000002e00}12076C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000019111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.739{8223a6b9-37bc-6902-d500-000000002e00}10060C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000019112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.761{8223a6b9-37be-6902-d800-000000002e00}10280C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000019113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.776{8223a6b9-37bd-6902-d600-000000002e00}7628C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000019114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.810{8223a6b9-37c2-6902-de00-000000002e00}10920C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000019115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.814{8223a6b9-380d-6902-5501-000000002e00}10076C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000019116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.818{8223a6b9-37bf-6902-db00-000000002e00}10632C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000019117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.843{8223a6b9-37be-6902-d900-000000002e00}10308C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000019118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:41.845{8223a6b9-37be-6902-d700-000000002e00}10272C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000019119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:42.423{8223a6b9-380b-6902-5301-000000002e00}11592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:44.413{8223a6b9-3810-6902-5d01-000000002e00}6816C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:44.417{8223a6b9-3810-6902-5e01-000000002e00}13260C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:47.418{8223a6b9-3810-6902-5f01-000000002e00}10016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:49.436{8223a6b9-3815-6902-6001-000000002e00}11064C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:49.437{8223a6b9-3815-6902-6101-000000002e00}3584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:49.467{8223a6b9-379c-6902-9800-000000002e00}6296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:52.100{8223a6b9-380d-6902-5701-000000002e00}1764C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000019127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:52.502{8223a6b9-3815-6902-6201-000000002e00}2516C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:52.696{8223a6b9-37d0-6902-1401-000000002e00}11660C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000019129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:52.708{8223a6b9-37d0-6902-1501-000000002e00}11680C:\Windows\System32\conhost.exesoc101win11\Administrator +734700x800000000000000019130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:53.813{8223a6b9-3819-6902-6301-000000002e00}1904C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\Administrator\AppData\Local\Programs\Ollama\lib\ollama\cuda_v12\cudart64_12.dll6,14,11,12080NVIDIA CUDA Runtime, Version 12.8.57 NVIDIA CUDA 12.8.57 RuntimeNVIDIA CorporationCUDART64_128_57.DLLSHA256=B8A8EE29FD67548A3205DD1F891986F3D886A4D093EF6F1B920F2E555A29A0AAtrueOllama Inc.Validsoc101win11\Administrator +534500x800000000000000019131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:54.418{8223a6b9-381a-6902-6501-000000002e00}4524C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:54.420{8223a6b9-381a-6902-6601-000000002e00}9688C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:54.443{8223a6b9-37cf-6902-0f01-000000002e00}13104C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000019134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:57.412{8223a6b9-381a-6902-6701-000000002e00}4592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:57.525{8223a6b9-3819-6902-6301-000000002e00}1904C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000019136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:57.541{8223a6b9-3819-6902-6401-000000002e00}8448C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:51:59.558{8223a6b9-37fe-6902-3e01-000000002e00}2596C:\Windows\System32\Taskmgr.exesoc101win11\Administrator +10341000x800000000000000019138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:06.608{8223a6b9-3826-6902-6901-000000002e00}1068010684C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3826-6902-6a01-000000002e00}11052C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+20a92ce|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+20a855e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e8f950|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e90228|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e90518|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24c2c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24dd52|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24da30|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24d535|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24d3e4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:06.648{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\test.txt2025-10-29 15:52:06.648soc101win11\Administrator +11241100x800000000000000019140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.058{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\lockfile2025-10-29 15:52:07.058soc101win11\Administrator +10341000x800000000000000019141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.106{8223a6b9-3826-6902-6901-000000002e00}1068011020C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6b01-000000002e00}10992C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c93|C:\WINDOWS\System32\ADVAPI32.dll+30a20|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a9c5cc|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+257b199|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+257b677|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223d8bf|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+26cbe2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d1bd2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d1cb6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+31024b8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.117{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6c01-000000002e00}11000C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.129{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 15:52:07.127soc101win11\Administrator +11241100x800000000000000019144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.135{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +10341000x800000000000000019145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.149{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6d01-000000002e00}10700C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.159{8223a6b9-3826-6902-6a01-000000002e00}1105210276C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6b01-000000002e00}10992C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.172{8223a6b9-3826-6902-6a01-000000002e00}1105210304C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6c01-000000002e00}11000C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +734700x800000000000000019148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.178{8223a6b9-3827-6902-6b01-000000002e00}10992C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Local\Programs\LM Studio\vulkan-1.dllVulkan Loader1.4.315.0Vulkan Runtime--SHA256=B4FC93097844C72FB999663BB9E2CEBC53C9D18465DDB01E02641F2FE289B7F6trueElement Labs Inc.Validsoc101win11\Administrator +10341000x800000000000000019149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.204{8223a6b9-3826-6902-6901-000000002e00}1068010684C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6b01-000000002e00}10992C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x101451C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba7ca|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+15708d8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1570d05|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2622cba|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462a1ac|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462b8c7|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46300c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3a59ef5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+463715c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46eac03|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45ca04d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebcb4d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+252a2de|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ef0e8f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153ade2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153c961|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153818f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84e6cb|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84f88fsoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.445{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\lms-key-22025-10-29 13:25:54.480soc101win11\Administrator +10341000x800000000000000019151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.460{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6e01-000000002e00}12148C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.494{8223a6b9-3826-6902-6a01-000000002e00}1105210276C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6e01-000000002e00}12148C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +734700x800000000000000019153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.569{8223a6b9-3827-6902-6e01-000000002e00}12148C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Windows\System32\vulkan-1.dll1.3.300.0Vulkan LoaderVulkan Runtime--SHA256=544DE63A0E4D7D88833708DF2644774CB41872B370E63EC93D30BEA4620AA640false-Unavailablesoc101win11\Administrator +11241100x800000000000000019154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.619{8223a6b9-3826-6902-6a01-000000002e00}11052C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Crashpad\reports\b41a9efb-42d5-4f57-94fb-a46ec881124f.dmp2025-10-29 15:52:07.619soc101win11\Administrator +10341000x800000000000000019155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.642{8223a6b9-3826-6902-6a01-000000002e00}110525136C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6e01-000000002e00}12148C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1010C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba83a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+250f117|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3100a52|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7e46e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+7c59c60|C:\WINDOWS\SYSTEM32\ntdll.dll+7f238|C:\WINDOWS\SYSTEM32\ntdll.dll+7dc31|C:\WINDOWS\SYSTEM32\ntdll.dll+927b9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.671{8223a6b9-3827-6902-6e01-000000002e00}12148C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +10341000x800000000000000019157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.685{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6f01-000000002e00}5180C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:07.706{8223a6b9-3826-6902-6a01-000000002e00}1105210304C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3827-6902-6f01-000000002e00}5180C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:08.339{8223a6b9-3828-6902-7201-000000002e00}984C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000019160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.211{8223a6b9-3827-6902-7001-000000002e00}1272C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000019161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.213{8223a6b9-3827-6902-7101-000000002e00}7588C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.229{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3829-6902-7301-000000002e00}6324C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.274{8223a6b9-3826-6902-6a01-000000002e00}1105210276C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3829-6902-7301-000000002e00}6324C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.363{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json.lmstudio-temp2025-10-29 15:52:07.127soc101win11\Administrator +11241100x800000000000000019165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.365{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\settings.json2025-10-29 13:25:53.509soc101win11\Administrator +11241100x800000000000000019166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.394{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\single-downloads-info.json2025-10-29 13:26:12.356soc101win11\Administrator +11241100x800000000000000019167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.394{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\download-jobs-info.json2025-10-29 13:25:57.795soc101win11\Administrator +11241100x800000000000000019168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.539{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\blob_storage\b7755b6f-cd55-4885-8834-e2911f7369df2025-10-29 15:52:09.539soc101win11\Administrator +11241100x800000000000000019169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.545{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG.old~RF271cb.TMP2025-10-29 15:52:09.545soc101win11\Administrator +11241100x800000000000000019170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.548{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Local Storage\leveldb\LOG2025-10-29 13:26:00.054soc101win11\Administrator +10341000x800000000000000019171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.589{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3829-6902-7401-000000002e00}2052C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.593{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\app-install-location.json2025-10-29 13:26:00.104soc101win11\Administrator +10341000x800000000000000019173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.688{8223a6b9-3826-6902-6a01-000000002e00}1105210304C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-3829-6902-7401-000000002e00}2052C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:09.697{8223a6b9-37ae-6902-ba00-000000002e00}7472C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +534500x800000000000000019175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:10.062{8223a6b9-3829-6902-7501-000000002e00}11576C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +534500x800000000000000019176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.699{8223a6b9-382a-6902-7701-000000002e00}9620C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000019177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.700{8223a6b9-382a-6902-7801-000000002e00}9628C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.714{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\artifact-permissions-list.json2025-10-29 13:26:10.968soc101win11\Administrator +11241100x800000000000000019179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.775{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\bin\lms.exe2025-10-29 13:25:54.446soc101win11\Administrator +10341000x800000000000000019180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.789{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382b-6902-7901-000000002e00}3788C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.794{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG.old~RF27a95.TMP2025-10-29 15:52:11.794soc101win11\Administrator +11241100x800000000000000019182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.798{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\persistent-extension-pack-state.json2025-10-29 13:26:28.592soc101win11\Administrator +11241100x800000000000000019183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.801{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Session Storage\LOG2025-10-29 13:26:11.066soc101win11\Administrator +11241100x800000000000000019184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.813{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-index-cache.json2025-10-29 13:26:10.986soc101win11\Administrator +10341000x800000000000000019185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.918{8223a6b9-3826-6902-6a01-000000002e00}1105210276C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382b-6902-7901-000000002e00}3788C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:11.926{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\last-synced-mcp-state.json2025-10-29 13:26:11.002soc101win11\Administrator +11241100x800000000000000019187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.192{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\internal-engine-index.json2025-10-29 13:26:30.295soc101win11\Administrator +11241100x800000000000000019188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.192{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\backend-preferences-v1.json2025-10-29 13:26:30.140soc101win11\Administrator +534500x800000000000000019189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.240{8223a6b9-382c-6902-7e01-000000002e00}12740C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000019190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.245{8223a6b9-382c-6902-7f01-000000002e00}4660C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000019191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.246{8223a6b9-382b-6902-7b01-000000002e00}13028C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000019192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.262{8223a6b9-382b-6902-7c01-000000002e00}2516C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.267{8223a6b9-382b-6902-7a01-000000002e00}8712C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +11241100x800000000000000019194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.295{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\conversation-config.json2025-10-29 13:25:59.931soc101win11\Administrator +534500x800000000000000019195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.297{8223a6b9-382c-6902-7d01-000000002e00}12752C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.479{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\ui-state\window-1.json2025-10-29 13:28:00.985soc101win11\Administrator +534500x800000000000000019197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.553{8223a6b9-382c-6902-8001-000000002e00}9284C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000019198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.568{8223a6b9-382c-6902-8101-000000002e00}2040C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.572{8223a6b9-382c-6902-8201-000000002e00}8228C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000019200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.579{8223a6b9-382c-6902-8301-000000002e00}4940C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:12.822{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\persistent-extension-pack-state.json2025-10-29 13:26:28.592soc101win11\Administrator +11241100x800000000000000019202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:13.618{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-index-cache.json2025-10-29 13:26:10.986soc101win11\Administrator +11241100x800000000000000019203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:13.619{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\ui-state\window-1.json2025-10-29 13:28:00.985soc101win11\Administrator +11241100x800000000000000019204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:13.654{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:13.669{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +10341000x800000000000000019206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:14.691{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:14.702{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF6818BB5C0)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e79c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e2ff|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c39ea9|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3be8013|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+f49d18soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:14.703{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47ee00|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3d1030|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+308e84|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4ccdfa6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:14.794{8223a6b9-3826-6902-6a01-000000002e00}1105210304C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:14.828{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\collections.json2025-10-29 13:26:12.119soc101win11\Administrator +10341000x800000000000000019211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:15.209{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:15.209{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:15.842{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\collections.json2025-10-29 13:26:12.119soc101win11\Administrator +11241100x800000000000000019214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.339{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.354{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.371{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.393{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +734700x800000000000000019218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.479{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\extensions\backends\llama.cpp-win-x86_64-avx2-1.53.1\llama.dll-----SHA256=3B9F78A9ACC748001341C9DE15A69434023C6CDA9B9E561CAD9CB5588299D7EEfalse-Unavailablesoc101win11\Administrator +11241100x800000000000000019219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.542{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.553{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.566{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +534500x800000000000000019222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.654{8223a6b9-382d-6902-8701-000000002e00}13124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.657{8223a6b9-382d-6902-8401-000000002e00}2540C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000019224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.666{8223a6b9-382d-6902-8601-000000002e00}4856C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.668{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +534500x800000000000000019226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.673{8223a6b9-382d-6902-8501-000000002e00}12796C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000019227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.677{8223a6b9-3830-6902-8d01-000000002e00}8448C:\Windows\System32\taskkill.exesoc101win11\Administrator +11241100x800000000000000019228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.682{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +534500x800000000000000019229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.685{8223a6b9-3830-6902-8901-000000002e00}10192C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000019230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.686{8223a6b9-3830-6902-8e01-000000002e00}8260C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000019231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.691{8223a6b9-3830-6902-8c01-000000002e00}5532C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.694{8223a6b9-3830-6902-8a01-000000002e00}4044C:\Windows\System32\cmd.exesoc101win11\Administrator +11241100x800000000000000019233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.695{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +534500x800000000000000019234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.696{8223a6b9-3830-6902-8b01-000000002e00}9520C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.728{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.747{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +534500x800000000000000019237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.769{8223a6b9-3800-6902-4601-000000002e00}6116C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +11241100x800000000000000019238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.836{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.857{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:16.868{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:17.003{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:17.034{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:17.046{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +10341000x800000000000000019244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:17.231{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:17.231{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:19.238{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:19.238{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:19.345{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:19.600{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\948ed941-cde3-4ca1-8875-8fd1678b7b70.tmp2025-10-29 15:52:19.600soc101win11\Administrator +11241100x800000000000000019250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:19.606{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Preferences~RF29919.TMP2025-10-29 15:52:19.606soc101win11\Administrator +534500x800000000000000019251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:21.073{8223a6b9-37b3-6902-cc00-000000002e00}10000C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:21.290{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:21.294{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:23.479{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:23.479{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:24.928{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:52:24.928soc101win11\Administrator +11241100x800000000000000019257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:25.351{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:25.874{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:25.874{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:26.770{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:52:24.928soc101win11\Administrator +11241100x800000000000000019261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:26.850{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:28.884{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:28.892{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:31.544{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:52:24.928soc101win11\Administrator +11241100x800000000000000019265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:31.549{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:31.688{8223a6b9-37ff-6902-4101-000000002e00}1396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:31.759{8223a6b9-383f-6902-8f01-000000002e00}9592C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000019268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:31.780{8223a6b9-380e-6902-5801-000000002e00}7644C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +10341000x800000000000000019269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:31.913{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:31.913{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:33.592{8223a6b9-3841-6902-9001-000000002e00}5648C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +10341000x800000000000000019272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:33.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:33.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:34.272{8223a6b9-37ac-6902-ab00-000000002e00}7216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:35.472{8223a6b9-3800-6902-4201-000000002e00}13072C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:35.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:35.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:36.048{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:36.063{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:36.207{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:36.218{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:36.232{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +10341000x800000000000000019283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:37.956{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:37.956{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:38.244{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:38.260{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-data.json.lmstudio-temp2025-10-29 15:52:38.260soc101win11\Administrator +11241100x800000000000000019287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:38.274{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\model-data.json2025-10-29 13:54:15.091soc101win11\Administrator +534500x800000000000000019288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:38.386{8223a6b9-3846-6902-9201-000000002e00}1992C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000019289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:38.997{8223a6b9-3846-6902-9101-000000002e00}10644C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:39.960{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:39.960{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:41.968{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:41.968{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:43.421{8223a6b9-3793-6902-6700-000000002e00}5024C:\Windows\System32\dllhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:43.437{8223a6b9-3797-6902-8300-000000002e00}1240C:\Windows\System32\VSSVC.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:43.989{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:43.989{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:46.008{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:46.008{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:47.280{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\working-directories\17617443599272025-10-29 15:52:47.280soc101win11\Administrator +11241100x800000000000000019301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:47.289{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:52:47.287soc101win11\Administrator +11241100x800000000000000019302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:47.311{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:47.363{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\working-directories\17617443599272025-10-29 15:52:47.363soc101win11\Administrator +11241100x800000000000000019304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:47.408{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:47.468{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:47.487{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +10341000x800000000000000019307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:48.013{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:48.013{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:48.360{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:52:47.287soc101win11\Administrator +11241100x800000000000000019310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:48.362{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:50.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:50.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:52.041{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:52.041{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:54.065{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:54.065{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:56.074{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:56.074{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:56.108{8223a6b9-381c-6902-6801-000000002e00}10096C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000019320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:57.098{8223a6b9-3854-6902-9301-000000002e00}7420C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000019321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:58.097{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:52:58.097{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:00.120{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:00.120{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:02.138{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:02.138{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:04.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:04.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:06.170{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:06.170{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:08.186{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:08.186{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:10.210{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:10.210{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:12.231{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:12.231{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:14.253{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:14.253{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:16.275{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:16.275{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:18.291{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:18.291{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:20.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:20.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:22.327{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:22.327{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:24.339{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:24.339{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:26.358{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:26.358{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:28.381{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:28.381{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:30.401{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:30.401{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:32.417{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:32.417{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:33.939{8223a6b9-379a-6902-9600-000000002e00}3500C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000019358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:33.947{8223a6b9-3790-6902-2a00-000000002e00}2076C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:34.439{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:34.439{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:36.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:36.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:38.477{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:38.477{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:38.874{8223a6b9-3882-6902-9601-000000002e00}8436C:\Windows\System32\wbem\WMIADAP.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:40.498{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:40.498{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:42.518{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:42.518{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:43.022{8223a6b9-3886-6902-9701-000000002e00}8448C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +10341000x800000000000000019371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:44.537{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:44.537{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:46.546{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:46.546{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:48.568{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:48.568{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:50.589{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:50.589{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:52.613{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:52.613{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:54.635{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:54.635{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:56.654{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:56.654{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:57.629{8223a6b9-3877-6902-9501-000000002e00}12752C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +10341000x800000000000000019386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:58.676{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:53:58.676{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:00.695{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:00.695{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:02.713{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:02.713{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:04.732{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:04.732{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:06.755{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:06.755{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:07.115{8223a6b9-3826-6902-6901-000000002e00}1068010640C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-389f-6902-9a01-000000002e00}8932C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:07.153{8223a6b9-3826-6902-6a01-000000002e00}1105210276C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-389f-6902-9a01-000000002e00}8932C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:07.205{8223a6b9-3826-6902-6901-000000002e00}1068010684C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-389f-6902-9a01-000000002e00}8932C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x101451C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba7ca|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+15708d8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1570d05|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2622cba|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462a1ac|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462b8c7|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46300c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3a59ef5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+463715c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46eac03|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45ca04d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebcb4d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+252a2de|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ef0e8f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153ade2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153c961|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153818f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84e6cb|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84f88fsoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:07.213{8223a6b9-389f-6902-9a01-000000002e00}8932C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +10341000x800000000000000019400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:08.775{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:08.775{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:10.087{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:10.089{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:10.089soc101win11\Administrator +11241100x800000000000000019404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:10.097{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:10.790{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:10.790{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:12.806{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:12.806{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:14.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:14.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:16.832{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:16.832{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:18.853{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:18.853{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:20.876{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:20.876{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:22.895{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:22.895{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:24.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:24.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:26.936{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:26.936{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:28.956{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:28.956{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:30.568{8223a6b9-38b5-6902-9b01-000000002e00}12408C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:30.979{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:30.979{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:33.002{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:33.002{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:35.026{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:35.026{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:37.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:37.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:38.429{8223a6b9-38be-6902-9c01-000000002e00}3340C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:39.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:39.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:41.087{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:41.087{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:43.098{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:43.098{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:44.091{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000019442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:44.095{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:44.097{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:45.118{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:45.118{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:45.118{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:45.120{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:46.918{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:46.922{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:47.140{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:47.140{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:47.931{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:47.935{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:48.951{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:48.953{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:49.158{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:49.158{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:49.973{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:49.973{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:50.993{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:50.997{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:51.183{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:51.183{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:52.012{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:52.014{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:53.027{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:53.029{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:53.203{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:53.203{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:54.046{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:54.050{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:55.066{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:55.066{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:55.223{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:55.223{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:56.083{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:56.087{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:57.101{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:57.103{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:57.242{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:57.242{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:58.117{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:58.120{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:59.135{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:59.138{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:59.262{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:54:59.262{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:00.153{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:00.153{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:01.169{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:01.173{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:01.280{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:01.280{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:02.191{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:02.193{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:03.210{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:03.212{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:03.304{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:03.304{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:04.154{8223a6b9-38d8-6902-9e01-000000002e00}1228C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000019501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:04.220{8223a6b9-38d8-6902-9d01-000000002e00}5028C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000019502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:04.226{8223a6b9-38d8-6902-9f01-000000002e00}4944C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:04.227{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:04.233{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:05.246{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:05.250{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:05.326{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:05.326{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:06.265{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:06.265{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:07.286{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:07.286{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:07.348{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:07.348{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:08.274{8223a6b9-38dc-6902-a101-000000002e00}2484C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000019516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:08.278{8223a6b9-38dc-6902-a301-000000002e00}2760C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:08.306{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:08.306{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:08.671{8223a6b9-38dc-6902-a401-000000002e00}2160C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000019520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:09.311{8223a6b9-38d8-6902-a001-000000002e00}12912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:09.323{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:09.325{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:09.368{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:09.368{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:10.341{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:10.341{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:11.354{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:11.357{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:11.386{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:11.386{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:11.990{8223a6b9-38dc-6902-a201-000000002e00}2688C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:12.371{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:12.374{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:13.389{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:13.390{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:13.406{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:13.406{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:14.407{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:14.409{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:15.428{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:15.428{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:15.428{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:15.431{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:16.446{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:16.449{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:17.448{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:17.448{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:17.464{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:17.468{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:18.484{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:18.486{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:19.469{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:19.469{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:19.493{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:19.495{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:20.506{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:20.508{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:21.487{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:21.487{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:21.574{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:21.576{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:22.586{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:22.589{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:23.508{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:23.508{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:23.603{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:23.607{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:24.623{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:24.625{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:25.526{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:25.526{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:25.640{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:25.640{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:26.657{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:26.661{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:27.548{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:27.548{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:27.677{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:27.679{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:28.694{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:28.697{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:29.569{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:29.569{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:29.713{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:29.715{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:31.057{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:31.059{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:31.588{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:31.588{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:32.067{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:32.067{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:33.084{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:33.090{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:33.611{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:33.611{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:34.107{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:34.110{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:35.115{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:35.115{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:35.628{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:35.628{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:36.130{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:36.134{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:37.144{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:37.144{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:37.654{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:37.654{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:38.099{8223a6b9-3795-6902-7400-000000002e00}6088C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:38.163{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:38.163{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:39.170{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:39.174{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:39.598{8223a6b9-38fb-6902-a801-000000002e00}8004C:\Program Files (x86)\Java\jre1.8.0_431\bin\javaws.exesoc101win11\Administrator +10341000x800000000000000019614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:39.682{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:39.682{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:39.871{8223a6b9-38dd-6902-a601-000000002e00}4920C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +11241100x800000000000000019617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:40.188{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:40.192{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:41.200{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:41.202{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:41.700{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:41.700{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:42.250{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:42.252{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:43.258{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:43.262{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:43.721{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:43.721{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:44.281{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:44.281{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:45.299{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:45.301{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:45.742{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:45.742{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:46.316{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:46.316{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:47.333{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:47.335{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:47.759{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:47.759{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:48.349{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:48.349{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:48.684{8223a6b9-38dc-6902-a501-000000002e00}5032C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +11241100x800000000000000019644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:49.371{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:49.371{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:49.687{8223a6b9-38fb-6902-a901-000000002e00}9412C:\Program Files (x86)\Java\jre1.8.0_431\bin\jp2launcher.exesoc101win11\Administrator +10341000x800000000000000019647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:49.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:49.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:50.389{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:50.389{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:51.395{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:51.395{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:51.793{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:51.793{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:52.415{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:52.415{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:53.421{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:53.421{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:53.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:53.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:54.610{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:54.610{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:55.632{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:55.634{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:55.836{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:55.836{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:56.643{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:56.645{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:57.649{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:57.651{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:57.857{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:57.857{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:58.656{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:58.658{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:59.678{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:59.678{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:59.868{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:55:59.868{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:00.696{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:00.698{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:01.715{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:01.717{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:01.888{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:01.888{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:02.734{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:02.736{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:03.752{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:03.754{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:03.909{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:03.909{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:04.771{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:04.773{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:05.789{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:05.789{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:05.931{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:05.931{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:06.808{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:06.808{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:07.825{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:07.827{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:07.953{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:07.953{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:08.858{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:08.865{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:09.896{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:09.898{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:09.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:09.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:11.989{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:11.989{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:12.118{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:12.119{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:12.630{8223a6b9-391c-6902-ab01-000000002e00}1232C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\app.log2025-09-03 13:59:03.317soc101win11\Administrator +11241100x800000000000000019714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:12.649{8223a6b9-391c-6902-ab01-000000002e00}1232C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\server.log2025-09-03 13:59:03.320soc101win11\Administrator +534500x800000000000000019715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:12.926{8223a6b9-391c-6902-ac01-000000002e00}5896C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:12.930{8223a6b9-391c-6902-ad01-000000002e00}9636C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:13.089{8223a6b9-391c-6902-af01-000000002e00}9856C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:13.095{8223a6b9-391c-6902-b001-000000002e00}12148C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:13.134{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:13.134{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:13.657{8223a6b9-391c-6902-ab01-000000002e00}1232C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\ollama.pid2025-09-03 13:59:08.110soc101win11\Administrator +734700x800000000000000019722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:13.773{8223a6b9-391d-6902-b701-000000002e00}9176C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\Administrator\AppData\Local\Programs\Ollama\lib\ollama\cuda_v12\cudart64_12.dll6,14,11,12080NVIDIA CUDA Runtime, Version 12.8.57 NVIDIA CUDA 12.8.57 RuntimeNVIDIA CorporationCUDART64_128_57.DLLSHA256=B8A8EE29FD67548A3205DD1F891986F3D886A4D093EF6F1B920F2E555A29A0AAtrueOllama Inc.Validsoc101win11\Administrator +22542200x800000000000000019723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:12.707{8223a6b9-391c-6902-ab01-000000002e00}1232ollama.com0::ffff:34.36.133.15;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +10341000x800000000000000019724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:14.012{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:14.012{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:14.152{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:14.160{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:15.190{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:15.192{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:15.873{8223a6b9-391a-6902-aa01-000000002e00}11344C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000019731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:16.035{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:16.035{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:16.105{8223a6b9-391c-6902-ae01-000000002e00}8892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:16.209{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:16.211{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:16.623{8223a6b9-391c-6902-ab01-000000002e00}1232C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\updates_v2\0x8DE0D0A19DC250A2025-10-29 15:56:16.623soc101win11\Administrator +11241100x800000000000000019737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:17.217{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:17.219{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:17.882{8223a6b9-3921-6902-b901-000000002e00}5864C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:17.887{8223a6b9-3921-6902-ba01-000000002e00}7492C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:18.061{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:18.061{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:18.237{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:18.239{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +22542200x800000000000000019745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:16.365{8223a6b9-391c-6902-ab01-000000002e00}1232release-assets.githubusercontent.com0::ffff:185.199.108.133;::ffff:185.199.111.133;::ffff:185.199.109.133;::ffff:185.199.110.133;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +11241100x800000000000000019746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:19.252{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:19.252{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:20.075{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:20.075{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:20.264{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:20.265{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:20.903{8223a6b9-3921-6902-bb01-000000002e00}3616C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:21.072{8223a6b9-391d-6902-b701-000000002e00}91763168C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe{8223a6b9-3925-6902-bc01-000000002e00}11432C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7f389|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7d6cd|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7d743soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:21.273{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:21.276{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:22.089{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:22.089{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:23.337{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:23.348{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:23.617{8223a6b9-3927-6902-be01-000000002e00}7872C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:23.625{8223a6b9-3927-6902-bf01-000000002e00}3196C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:24.704{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:24.706{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:24.839{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:24.839{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:25.718{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:25.720{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:26.641{8223a6b9-3927-6902-c001-000000002e00}12940C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:26.853{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:26.853{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:27.008{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:27.020{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:28.342{8223a6b9-392b-6902-c101-000000002e00}1804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:28.347{8223a6b9-392c-6902-c201-000000002e00}10960C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:28.603{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:28.605{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:29.306{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:29.306{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:29.623{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:29.626{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:30.643{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:30.646{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:31.325{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:31.325{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:31.363{8223a6b9-392c-6902-c301-000000002e00}9624C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:31.658{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:31.661{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:32.869{8223a6b9-3930-6902-c401-000000002e00}11692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:32.872{8223a6b9-3930-6902-c501-000000002e00}12160C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:33.342{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:33.342{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:33.833{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:33.835{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:34.838{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:34.840{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:35.356{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:35.356{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:35.847{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:35.853{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:35.885{8223a6b9-3930-6902-c601-000000002e00}9324C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000019801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:36.748{8223a6b9-37c5-6902-ef00-000000002e00}11988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:36.870{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:36.871{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:37.376{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:37.376{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:37.889{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:37.893{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:37.945{8223a6b9-3935-6902-c701-000000002e00}5004C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:37.953{8223a6b9-3935-6902-c801-000000002e00}3236C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:38.915{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:38.919{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:39.391{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:39.392{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:40.129{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:40.131{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:40.966{8223a6b9-3935-6902-c901-000000002e00}7136C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:41.144{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:41.146{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:41.410{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:41.410{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:41.892{8223a6b9-380d-6902-5601-000000002e00}2128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000019822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:42.176{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:42.187{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:47.858{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:47.881{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+69cb0d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF6818BE764)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e79csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:48.159{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:48.161{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:48.199{8223a6b9-393f-6902-ca01-000000002e00}4548C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:48.203{8223a6b9-393f-6902-cb01-000000002e00}10200C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:48.373{8223a6b9-3940-6902-cd01-000000002e00}10436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:48.376{8223a6b9-3940-6902-ce01-000000002e00}3264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:48.542{8223a6b9-3940-6902-cf01-000000002e00}11348C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:48.545{8223a6b9-3940-6902-d001-000000002e00}11928C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000019834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:49.295{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:49.295{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:49.908{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:49.908{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:50.303{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:50.305{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000019840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:51.325{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:51.327{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:51.578{8223a6b9-3940-6902-cc01-000000002e00}2528C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:51.926{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:51.926{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:52.319{8223a6b9-37b4-6902-cd00-000000002e00}10064C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25101.25.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exesoc101win11\Administrator +11241100x800000000000000019846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:52.337{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:54:44.095soc101win11\Administrator +11241100x800000000000000019847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:52.340{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:53.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:54.132{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:54.193{8223a6b9-3944-6902-d101-000000002e00}12320C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:54.354{8223a6b9-3944-6902-d201-000000002e00}6964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:55.709{8223a6b9-3946-6902-d301-000000002e00}8784C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:56.260{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:56.284{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:56.323{8223a6b9-3947-6902-d401-000000002e00}9564C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:58.679{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:56:58.679{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:00.686{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:00.686{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:02.704{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:02.704{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:05.061{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:05.061{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:07.114{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:07.114{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:07.316{8223a6b9-3952-6902-d501-000000002e00}4272C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:09.715{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:09.715{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:09.802{8223a6b9-3954-6902-d601-000000002e00}8512C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:11.057{8223a6b9-3955-6902-d701-000000002e00}6284C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:11.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:11.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:14.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:14.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:14.445{8223a6b9-3958-6902-d801-000000002e00}7048C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:16.072{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:16.072{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:18.093{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:18.093{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:19.325{8223a6b9-395e-6902-da01-000000002e00}10036C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:20.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:20.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:22.718{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:22.718{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:23.822{8223a6b9-395e-6902-db01-000000002e00}3780C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:24.146{8223a6b9-3962-6902-dc01-000000002e00}10428C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:25.131{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:25.131{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:27.831{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:27.831{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:29.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:29.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:31.852{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:31.852{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:33.873{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:33.873{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:34.068{8223a6b9-396c-6902-dd01-000000002e00}4568C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:35.897{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:35.897{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:37.917{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:37.917{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:38.952{8223a6b9-3971-6902-de01-000000002e00}8888C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:39.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:39.936{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000019905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:41.443{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:57:41.442soc101win11\Administrator +11241100x800000000000000019906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:41.535{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000019907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:41.955{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:41.955{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:43.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:43.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:44.817{8223a6b9-3976-6902-df01-000000002e00}3268C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:45.989{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:45.989{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:46.435{8223a6b9-3978-6902-e001-000000002e00}12924C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:48.013{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:48.013{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:48.779{8223a6b9-397b-6902-e101-000000002e00}2544C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:49.404{8223a6b9-397c-6902-e201-000000002e00}4596C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:50.028{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:50.029{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:52.049{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:52.049{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:54.055{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:54.055{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:54.400{8223a6b9-3981-6902-e301-000000002e00}6740C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:55.442{8223a6b9-3981-6902-e401-000000002e00}10432C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:56.079{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:56.079{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:58.188{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:58.188{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:58.945{8223a6b9-3985-6902-e501-000000002e00}1572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:57:59.565{8223a6b9-3986-6902-e601-000000002e00}4068C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:00.206{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:00.206{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:02.219{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:02.219{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:03.943{8223a6b9-398a-6902-e701-000000002e00}5752C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:04.232{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:04.232{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:04.887{8223a6b9-398b-6902-e801-000000002e00}6964C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:06.250{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:06.250{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:08.265{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:08.265{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:10.271{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:10.271{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:12.275{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:12.275{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:14.294{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:14.294{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:16.305{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:16.315{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:18.340{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:18.340{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:20.347{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:20.347{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:22.367{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:22.367{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:22.521{8223a6b9-3995-6902-e901-000000002e00}1660C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +10341000x800000000000000019960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:24.374{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:24.374{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:26.559{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:26.559{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:29.207{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:29.207{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:31.211{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:31.211{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:33.325{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:33.325{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:34.474{8223a6b9-39a9-6902-ea01-000000002e00}4016C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:35.343{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:35.343{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:35.798{8223a6b9-39a9-6902-eb01-000000002e00}12212C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:36.067{8223a6b9-39aa-6902-ec01-000000002e00}1572C:\Windows\System32\netsh.exesoc101win11\Administrator +11241100x800000000000000019975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:36.072{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:58:36.072soc101win11\Administrator +11241100x800000000000000019976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:36.073{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000019977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:36.295{8223a6b9-39ab-6902-ed01-000000002e00}4700C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:37.357{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:37.357{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:38.820{8223a6b9-39ad-6902-ee01-000000002e00}12320C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:39.516{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:39.516{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:40.633{8223a6b9-39ae-6902-ef01-000000002e00}11528C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:41.836{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:41.836{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:43.857{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:43.857{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:44.442{8223a6b9-39b2-6902-f001-000000002e00}2164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000019989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:45.533{8223a6b9-39b3-6902-f101-000000002e00}11484C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000019990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:45.870{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:45.870{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:48.184{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:48.185{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:48.942{8223a6b9-39b7-6902-f201-000000002e00}4272C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000019995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:50.442{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000019996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:50.442{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000019997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:50.572{8223a6b9-39b8-6902-f301-000000002e00}6076C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000019998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:51.570{8223a6b9-382a-6902-7601-000000002e00}2936C:\Windows\System32\wbem\WmiApSrv.exeNT AUTHORITY\SYSTEM +10341000x800000000000000019999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:52.461{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:52.461{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:53.699{8223a6b9-39bc-6902-f401-000000002e00}5608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:54.175{8223a6b9-39bd-6902-f501-000000002e00}12908C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:54.562{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:54.563{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:56.766{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:56.766{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:58.824{8223a6b9-39c1-6902-f601-000000002e00}12056C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:58.957{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:58.957{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:58:59.397{8223a6b9-39c2-6902-f701-000000002e00}10292C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:00.977{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:00.977{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:02.990{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:02.991{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:05.874{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:05.874{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:05.946{8223a6b9-39c8-6902-f801-000000002e00}10436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:06.078{8223a6b9-39c9-6902-f901-000000002e00}12768C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:08.478{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:08.478{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:08.876{8223a6b9-39cc-6902-fa01-000000002e00}12944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:10.343{8223a6b9-39cc-6902-fb01-000000002e00}8124C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:10.485{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:10.485{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:12.616{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:12.616{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:13.950{8223a6b9-39d0-6902-fc01-000000002e00}3876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:14.461{8223a6b9-39d1-6902-fd01-000000002e00}9836C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:14.839{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:14.839{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:16.856{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:16.856{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:19.222{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:19.222{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:19.960{8223a6b9-39d6-6902-fe01-000000002e00}7264C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:21.239{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:21.239{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:23.253{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:23.253{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:23.849{8223a6b9-39da-6902-ff01-000000002e00}10380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:24.915{8223a6b9-39db-6902-0002-000000002e00}5048C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:25.474{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:25.474{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:27.486{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:27.486{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:28.834{8223a6b9-39e0-6902-0102-000000002e00}2020C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:29.685{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:29.685{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:31.033{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:59:31.033soc101win11\Administrator +11241100x800000000000000020050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:31.404{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:32.003{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:32.003{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:32.470{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 15:59:31.033soc101win11\Administrator +11241100x800000000000000020054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:32.472{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000020055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:34.083{8223a6b9-39e5-6902-0202-000000002e00}6208C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:34.343{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:34.343{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:36.361{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:36.361{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:38.373{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:38.373{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:39.091{8223a6b9-3790-6902-2600-000000002e00}540C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000020063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:39.333{8223a6b9-39e9-6902-0302-000000002e00}8684C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:40.386{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:40.386{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:41.208{8223a6b9-39e9-6902-0402-000000002e00}7708C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:42.403{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:42.403{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:44.462{8223a6b9-39ef-6902-0502-000000002e00}9356C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:44.958{8223a6b9-37ae-6902-bd00-000000002e00}8220C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:45.039{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:45.039{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:45.412{8223a6b9-39ef-6902-0602-000000002e00}4004C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:47.498{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:47.673{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:49.840{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:49.840{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:51.861{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:51.861{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:54.039{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:54.040{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:56.517{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:56.518{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:58.850{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 15:59:58.850{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:00.863{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:00.863{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:02.870{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:02.870{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:05.364{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:05.364{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:05.569{8223a6b9-3a04-6902-0902-000000002e00}10412C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:07.383{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:07.383{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:07.864{8223a6b9-3a06-6902-0b02-000000002e00}4660C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:09.387{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:09.387{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:09.498{8223a6b9-3a08-6902-0d02-000000002e00}10944C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:11.633{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:11.633{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+69cb0d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF6818BE764)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e79csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:13.653{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:13.653{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:14.197{8223a6b9-3a0c-6902-0e02-000000002e00}9172C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:15.671{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:15.671{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:16.630{8223a6b9-3a0d-6902-0f02-000000002e00}11688C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:18.631{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:18.631{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:19.948{8223a6b9-3a12-6902-1202-000000002e00}13020C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:20.651{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:20.651{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:22.665{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:22.665{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:24.255{8223a6b9-3a17-6902-1502-000000002e00}3272C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:25.134{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:25.134{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:25.680{8223a6b9-3a18-6902-1602-000000002e00}11132C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:27.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:27.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:29.021{8223a6b9-3a1b-6902-1802-000000002e00}8784C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:29.388{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:29.388{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:31.171{8223a6b9-3791-6902-3c00-000000002e00}2992C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\PostRebootEventCache.V2\{2EFD45C7-4C82-4767-800E-9F261328AF15}.bin2025-10-29 14:25:26.251NT AUTHORITY\SYSTEM +10341000x800000000000000020124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:31.402{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:31.402{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:33.423{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:33.423{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:34.023{8223a6b9-3a21-6902-1a02-000000002e00}8640C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:35.437{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:35.438{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:37.455{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:37.455{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:39.392{8223a6b9-3a26-6902-1b02-000000002e00}5364C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:39.884{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:39.884{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:42.634{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:42.634{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:44.142{8223a6b9-3a2a-6902-1c02-000000002e00}4800C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:44.653{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:44.653{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:45.944{8223a6b9-3795-6902-6f00-000000002e00}5744C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:46.671{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:46.671{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:49.007{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:49.007{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:51.014{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:51.014{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:53.018{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:53.018{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:55.273{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:55.273{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:57.290{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:57.290{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:59.472{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:00:59.473{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:01.638{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:01.638{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:03.659{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:03.659{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:05.665{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:05.665{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:07.676{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:07.676{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:09.680{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:09.680{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:11.893{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:11.893{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:13.247{8223a6b9-3791-6902-4000-000000002e00}3136C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +10341000x800000000000000020169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:13.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:13.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:15.386{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:01:15.386soc101win11\Administrator +11241100x800000000000000020172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:15.450{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:15.920{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:15.920{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:16.757{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:01:15.386soc101win11\Administrator +11241100x800000000000000020176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:16.761{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:18.136{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:18.136{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:20.381{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:20.381{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:22.511{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:22.511{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:22.564{8223a6b9-3a51-6902-1d02-000000002e00}12652C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:24.263{8223a6b9-3a52-6902-1e02-000000002e00}7092C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:24.529{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:24.529{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:25.178{8223a6b9-3a53-6902-1f02-000000002e00}1364C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:26.544{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:26.544{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:28.700{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:28.700{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:28.758{8223a6b9-3a57-6902-2002-000000002e00}9412C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:30.086{8223a6b9-3a58-6902-2102-000000002e00}10352C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:30.902{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:30.902{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:32.918{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:32.918{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:33.840{8223a6b9-3a5c-6902-2202-000000002e00}7744C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:35.042{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:35.042{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+69cb0d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF68186C26A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e79csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:37.271{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:37.271{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:39.275{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:39.275{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:39.352{8223a6b9-3a1c-6902-1902-000000002e00}8856C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +10341000x800000000000000020206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:41.292{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:41.292{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:43.846{8223a6b9-3a67-6902-2402-000000002e00}7080C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:44.136{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:44.136{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:44.398{8223a6b9-3a61-6902-2302-000000002e00}13036C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +10341000x800000000000000020212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:46.147{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:46.147{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:48.271{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:48.271{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:48.883{8223a6b9-3a6c-6902-2502-000000002e00}4272C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:50.294{8223a6b9-3a6c-6902-2602-000000002e00}1568C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:50.398{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:50.398{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:52.413{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:52.413{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:53.915{8223a6b9-3a71-6902-2702-000000002e00}8384C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:54.755{8223a6b9-3a71-6902-2802-000000002e00}7136C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:54.713{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:54.880{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:56.897{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:56.897{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:58.805{8223a6b9-3a75-6902-2902-000000002e00}7760C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:58.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:58.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:01:59.210{8223a6b9-3a76-6902-2a02-000000002e00}4916C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:00.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:00.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:03.262{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:03.262{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:03.966{8223a6b9-3a7b-6902-2b02-000000002e00}7248C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:05.277{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:05.277{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:07.281{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:07.281{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:09.883{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:09.883{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:11.889{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:11.889{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:13.896{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:13.896{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:16.015{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:16.015{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:18.026{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:18.026{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:20.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:20.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:22.286{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:22.286{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:24.295{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:24.295{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:26.326{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:26.326{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:28.335{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:28.335{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:30.352{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:30.352{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:32.549{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:32.549{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:33.663{8223a6b9-3a98-6902-2d02-000000002e00}2068C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:34.563{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:34.563{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:34.589{8223a6b9-3a14-6902-1302-000000002e00}5676C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000020269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:35.216{8223a6b9-3a98-6902-2e02-000000002e00}8936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000020270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:35.417{8223a6b9-3a19-6902-1702-000000002e00}4796C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000020271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:35.914{8223a6b9-3a9a-6902-2f02-000000002e00}9360C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:36.594{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:36.594{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:37.611{8223a6b9-3a9b-6902-3002-000000002e00}11108C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:38.912{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:38.912{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:39.038{8223a6b9-3a9d-6902-3102-000000002e00}11304C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:40.169{8223a6b9-3a9e-6902-3202-000000002e00}7672C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:40.927{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:40.927{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:42.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:42.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:43.661{8223a6b9-3aa2-6902-3402-000000002e00}1076C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:45.737{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:45.737{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:48.115{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:48.117{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:49.054{8223a6b9-3aa7-6902-3602-000000002e00}2988C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:50.432{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:50.432{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:52.449{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:52.449{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:53.902{8223a6b9-3aac-6902-3702-000000002e00}9640C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:54.466{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:54.466{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:54.703{8223a6b9-3aad-6902-3802-000000002e00}6888C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000020297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:56.082{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:02:56.081soc101win11\Administrator +11241100x800000000000000020298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:56.276{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:56.484{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:56.484{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:57.689{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:02:56.081soc101win11\Administrator +11241100x800000000000000020302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:57.898{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:58.502{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:58.502{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:58.678{8223a6b9-3ab1-6902-3902-000000002e00}11676C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:02:59.503{8223a6b9-3ab2-6902-3a02-000000002e00}3708C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:00.721{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:00.721{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:03.090{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:03.090{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:04.478{8223a6b9-3ab6-6902-3b02-000000002e00}12040C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:05.434{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:05.434{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:06.273{8223a6b9-3ab7-6902-3c02-000000002e00}1320C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:07.452{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:07.452{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:09.457{8223a6b9-3abb-6902-3e02-000000002e00}7504C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:09.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:09.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:09.802{8223a6b9-3abc-6902-3f02-000000002e00}7948C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:11.831{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:11.831{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:14.024{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:14.024{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:14.026{8223a6b9-3ac0-6902-4002-000000002e00}12712C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:14.419{8223a6b9-3ac1-6902-4102-000000002e00}864C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:16.213{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:16.215{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:18.446{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:18.446{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:19.185{8223a6b9-3ac5-6902-4202-000000002e00}11992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:20.040{8223a6b9-3ac6-6902-4302-000000002e00}10112C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:20.463{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:20.463{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:22.481{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:22.481{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:23.720{8223a6b9-3aca-6902-4402-000000002e00}3196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:24.122{8223a6b9-3acb-6902-4502-000000002e00}1244C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:24.732{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:24.732{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:26.954{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:26.954{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:29.007{8223a6b9-3ad0-6902-4602-000000002e00}6980C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:29.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:29.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:30.020{8223a6b9-3ad1-6902-4702-000000002e00}11476C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:31.476{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:31.476{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:33.492{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:33.492{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:34.016{8223a6b9-3ad4-6902-4802-000000002e00}9156C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:35.513{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:35.513{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:35.699{8223a6b9-3ad5-6902-4902-000000002e00}1752C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:37.531{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:37.531{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:38.891{8223a6b9-3ada-6902-4b02-000000002e00}11080C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:39.913{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:39.913{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:40.072{8223a6b9-3ada-6902-4c02-000000002e00}13004C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:42.589{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:42.590{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:44.036{8223a6b9-3ade-6902-4d02-000000002e00}2372C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:44.942{8223a6b9-3adf-6902-4e02-000000002e00}4860C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:45.048{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:45.048{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:47.306{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:47.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:48.944{8223a6b9-3ad7-6902-4a02-000000002e00}8372C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000020370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:49.067{8223a6b9-3ae3-6902-4f02-000000002e00}11644C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:49.698{8223a6b9-3ae4-6902-5002-000000002e00}8080C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:50.001{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:50.001{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:51.225{8223a6b9-37a8-6902-9900-000000002e00}6376C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:52.454{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:52.454{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:53.889{8223a6b9-3ae8-6902-5102-000000002e00}1240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:54.308{8223a6b9-3ae9-6902-5202-000000002e00}4048C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:54.580{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:54.580{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:56.583{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:56.583{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:58.634{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:58.634{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:58.640{8223a6b9-3aed-6902-5302-000000002e00}7576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:03:59.476{8223a6b9-3aee-6902-5402-000000002e00}8260C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:00.911{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:00.911{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:03.321{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:03.321{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:05.326{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:05.326{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:07.440{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:07.440{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:09.715{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:09.715{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:10.338{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:04:10.338soc101win11\Administrator +11241100x800000000000000020398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:10.536{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:11.776{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:11.776{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:13.983{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:13.983{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+69cb0d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|UNKNOWN(00007FF68186C26A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e79csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:16.446{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:16.446{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:18.667{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:18.667{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:20.891{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:20.891{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:23.396{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:23.396{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:25.639{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:25.639{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:27.924{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:27.924{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:30.214{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:30.214{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:32.466{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:32.467{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:34.215{8223a6b9-3a17-6902-1402-000000002e00}2300C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:34.711{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:34.711{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:37.254{8223a6b9-3b14-6902-5502-000000002e00}4220C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:37.256{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:37.256{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:39.256{8223a6b9-3b16-6902-5702-000000002e00}8100C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:39.601{8223a6b9-3b14-6902-5602-000000002e00}7864C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:40.105{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:40.105{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:42.112{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:42.112{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:44.114{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:44.114{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:45.852{8223a6b9-3791-6902-3900-000000002e00}2944C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000020434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:45.936{8223a6b9-3b1c-6902-5902-000000002e00}5608C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:46.150{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:46.151{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:48.100{8223a6b9-3b1d-6902-5a02-000000002e00}864C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:49.243{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:49.243{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:49.315{8223a6b9-3b20-6902-5b02-000000002e00}5916C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:51.253{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:51.253{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:53.259{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:53.259{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:54.640{8223a6b9-3b24-6902-5d02-000000002e00}5196C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:55.265{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:55.265{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:56.132{8223a6b9-3b25-6902-5e02-000000002e00}8564C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000020449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:56.134{8223a6b9-3a8a-6902-2c02-000000002e00}10980C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +10341000x800000000000000020450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:57.286{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:57.286{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:59.304{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:59.304{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:04:59.478{8223a6b9-3b2a-6902-6102-000000002e00}10736C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:00.771{8223a6b9-3b2a-6902-6202-000000002e00}10776C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000020456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:01.005{8223a6b9-391c-6902-ab01-000000002e00}1232C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exeC:\Users\Administrator\AppData\Local\Ollama\updates_v2\0x8DE0D0A19DC250A\OllamaSetup.exe2025-10-29 16:05:01.004soc101win11\Administrator +10341000x800000000000000020457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:01.323{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:01.323{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:04.371{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:04.371{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:04.514{8223a6b9-3b2f-6902-6402-000000002e00}7264C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:06.384{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:06.384{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:08.564{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:08.564{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:08.746{8223a6b9-3b33-6902-6602-000000002e00}5104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:10.493{8223a6b9-3b34-6902-6702-000000002e00}5900C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:11.002{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:11.002{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:11.022{8223a6b9-3a05-6902-0a02-000000002e00}2132C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\25.189.0928.0002\OneDriveLauncher.exesoc101win11\Administrator +10341000x800000000000000020471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:13.017{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:13.017{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:14.754{8223a6b9-3b38-6902-6802-000000002e00}728C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:15.070{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:15.071{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:18.252{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:18.252{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:19.354{8223a6b9-3b3e-6902-6a02-000000002e00}12908C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:21.130{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:21.130{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:23.136{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:23.136{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:24.444{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:05:24.443soc101win11\Administrator +534500x800000000000000020484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:25.114{8223a6b9-3b43-6902-6d02-000000002e00}6488C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:25.140{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:25.141{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:25.377{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:27.380{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:27.380{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:27.645{8223a6b9-3aa0-6902-3302-000000002e00}852C:\Windows\System32\UsoClient.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:29.397{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:29.397{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:29.741{8223a6b9-3b48-6902-6e02-000000002e00}1576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:31.114{8223a6b9-3b3c-6902-6902-000000002e00}3300C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000020495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:31.436{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:31.438{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:34.391{8223a6b9-3b4d-6902-6f02-000000002e00}12780C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:34.504{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:34.504{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:36.519{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:36.519{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:38.532{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:38.532{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:39.133{8223a6b9-3b52-6902-7002-000000002e00}8640C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:40.545{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:40.545{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:42.591{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:42.591{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:45.255{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:45.255{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:45.882{8223a6b9-3b57-6902-7202-000000002e00}9312C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:47.274{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:47.274{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:49.470{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:49.470{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:49.998{8223a6b9-3b5b-6902-7402-000000002e00}9916C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:51.907{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:51.909{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:53.801{8223a6b9-3b60-6902-7502-000000002e00}11988C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:54.250{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:54.250{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:56.492{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:56.492{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:58.511{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:58.511{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:05:58.641{8223a6b9-3b65-6902-7602-000000002e00}6864C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:00.114{8223a6b9-3b66-6902-7702-000000002e00}3052C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:01.001{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:01.001{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:03.013{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:03.013{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:04.512{8223a6b9-3795-6902-7100-000000002e00}5924C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:05.028{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:05.436{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:06.312{8223a6b9-3b6b-6902-7802-000000002e00}7496C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:07.900{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:07.900{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:08.941{8223a6b9-3b70-6902-7a02-000000002e00}6340C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:09.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:09.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:11.362{8223a6b9-3b70-6902-7b02-000000002e00}2540C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:12.023{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:12.154{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:13.533{8223a6b9-3b42-6902-6c02-000000002e00}5788C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +10341000x800000000000000020545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:14.170{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:14.170{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:16.187{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:16.187{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:16.272{8223a6b9-3b74-6902-7c02-000000002e00}860C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:18.202{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:18.202{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:20.219{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:20.219{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:20.295{8223a6b9-3b7a-6902-7d02-000000002e00}1740C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:22.318{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:22.319{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:24.284{8223a6b9-3b7f-6902-7e02-000000002e00}5004C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:25.027{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:25.027{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:27.048{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:27.048{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:29.073{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:29.075{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:30.168{8223a6b9-3b84-6902-7f02-000000002e00}9968C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:31.519{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:31.519{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:33.682{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:33.684{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:33.911{8223a6b9-3b89-6902-8002-000000002e00}8448C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:36.161{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:36.161{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:38.179{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:38.179{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:39.210{8223a6b9-3b8e-6902-8202-000000002e00}4572C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:40.390{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:40.390{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:40.606{8223a6b9-3b8e-6902-8302-000000002e00}12804C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:43.082{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:43.082{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:43.415{8223a6b9-3b2f-6902-6302-000000002e00}7912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000020581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:44.902{8223a6b9-3b93-6902-8402-000000002e00}11468C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:46.291{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:46.291{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:48.306{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:48.306{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:49.586{8223a6b9-3b3f-6902-6b02-000000002e00}2092C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000020587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:49.665{8223a6b9-3b98-6902-8502-000000002e00}780C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:50.312{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:50.312{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:50.771{8223a6b9-3b17-6902-5802-000000002e00}8372C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:52.633{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:52.633{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:54.161{8223a6b9-3b9c-6902-8602-000000002e00}10664C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:54.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:54.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:55.326{8223a6b9-3b9d-6902-8702-000000002e00}1576C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:56.937{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:56.937{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:58.039{8223a6b9-3b8a-6902-8102-000000002e00}2124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000020600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:58.661{8223a6b9-3ba1-6902-8802-000000002e00}6856C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:58.949{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:06:58.949{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:00.968{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:00.968{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:02.978{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:02.978{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:04.050{8223a6b9-3ba7-6902-8902-000000002e00}13060C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:04.996{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:04.996{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:06.413{8223a6b9-3ba7-6902-8a02-000000002e00}7220C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:07.495{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:07.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:08.416{8223a6b9-3b25-6902-5f02-000000002e00}9720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000020614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:09.266{8223a6b9-3bac-6902-8b02-000000002e00}2428C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:09.665{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:09.665{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:11.680{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:11.680{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:13.722{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:13.723{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:13.946{8223a6b9-3bb0-6902-8d02-000000002e00}1676C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:14.392{8223a6b9-3b22-6902-5c02-000000002e00}6956C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000020623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:14.862{8223a6b9-3bb1-6902-8e02-000000002e00}12384C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:16.413{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:16.413{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:18.425{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:18.425{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:19.053{8223a6b9-3bb6-6902-9002-000000002e00}7028C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:20.677{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:20.677{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:21.633{8223a6b9-39f8-6902-0702-000000002e00}6668C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000020632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:22.052{8223a6b9-3a11-6902-1002-000000002e00}9604C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000020633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:22.489{8223a6b9-39ff-6902-0802-000000002e00}6728C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000020634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:22.489{8223a6b9-3a11-6902-1102-000000002e00}3264C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:22.930{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:22.930{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:23.664{8223a6b9-3bba-6902-9102-000000002e00}3780C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:25.385{8223a6b9-3bbb-6902-9202-000000002e00}10192C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:25.426{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:25.426{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:27.429{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:27.429{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:28.808{8223a6b9-3bbf-6902-9302-000000002e00}5584C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:29.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:29.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:31.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:31.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:33.922{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:33.924{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:33.924{8223a6b9-3bc4-6902-9402-000000002e00}12864C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:36.125{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:36.127{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:38.293{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:38.293{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:38.776{8223a6b9-3bc9-6902-9502-000000002e00}5636C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:40.313{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:40.313{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:40.780{8223a6b9-3bca-6902-9602-000000002e00}10184C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:42.332{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:42.332{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:43.662{8223a6b9-3bce-6902-9702-000000002e00}8180C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:44.822{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:44.824{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:47.050{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:47.050{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:49.506{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:49.507{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:49.539{8223a6b9-3bd3-6902-9802-000000002e00}8368C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:51.800{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:51.800{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:53.816{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:53.816{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:54.608{8223a6b9-3b56-6902-7102-000000002e00}264C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000020674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:55.545{8223a6b9-3bd8-6902-9902-000000002e00}12716C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:55.667{8223a6b9-3b59-6902-7302-000000002e00}1236C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:55.950{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:55.950{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:58.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:58.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:07:58.830{8223a6b9-3bdd-6902-9a02-000000002e00}10352C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:00.179{8223a6b9-3bde-6902-9b02-000000002e00}13220C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:00.322{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:00.322{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:02.335{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:02.540{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:04.217{8223a6b9-3be2-6902-9c02-000000002e00}8544C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:05.422{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:05.422{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:06.008{8223a6b9-3be3-6902-9d02-000000002e00}12072C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:07.426{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:07.426{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:09.122{8223a6b9-3be7-6902-9e02-000000002e00}5332C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:09.916{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:09.916{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:10.453{8223a6b9-3be8-6902-9f02-000000002e00}9612C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:11.936{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:11.936{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:13.640{8223a6b9-3bed-6902-a002-000000002e00}10368C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:13.952{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:13.952{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:14.446{8223a6b9-3bed-6902-a202-000000002e00}2440C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:16.437{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:16.439{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:18.641{8223a6b9-3bf1-6902-a302-000000002e00}5056C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:18.672{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:18.672{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:19.294{8223a6b9-3bf2-6902-a402-000000002e00}3508C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:21.131{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:21.132{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:23.293{8223a6b9-37b6-6902-ce00-000000002e00}4880C:\Windows\System32\smartscreen.exesoc101win11\Administrator +10341000x800000000000000020711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:23.300{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:23.300{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:25.314{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:25.314{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:25.490{8223a6b9-3bf6-6902-a502-000000002e00}2148C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:27.328{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:27.328{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:28.641{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:08:28.641soc101win11\Administrator +11241100x800000000000000020719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:28.865{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:29.562{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:29.562{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:30.258{8223a6b9-3bfb-6902-a602-000000002e00}13240C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:31.797{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:31.797{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:33.443{8223a6b9-3bed-6902-a102-000000002e00}4812C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +534500x800000000000000020726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:33.679{8223a6b9-3c01-6902-a702-000000002e00}3840C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:33.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:33.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:35.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:35.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:37.844{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:37.844{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:38.671{8223a6b9-3c05-6902-a802-000000002e00}7024C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:39.556{8223a6b9-3c06-6902-a902-000000002e00}1912C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:39.853{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:39.853{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:42.075{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:42.076{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:44.133{8223a6b9-3c0a-6902-aa02-000000002e00}3676C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:44.294{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:44.294{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:46.305{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:46.305{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:48.327{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:48.327{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:48.661{8223a6b9-3c0f-6902-ab02-000000002e00}6076C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:50.717{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:50.717{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:53.040{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:53.040{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:53.919{8223a6b9-3c15-6902-ad02-000000002e00}12060C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:54.661{8223a6b9-3c15-6902-ae02-000000002e00}3672C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:55.059{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:55.059{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:57.073{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:57.073{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:59.044{8223a6b9-3c19-6902-af02-000000002e00}7468C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:59.518{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:08:59.518{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:01.530{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:01.530{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:03.544{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:03.544{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:04.175{8223a6b9-3c1e-6902-b002-000000002e00}12928C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:05.010{8223a6b9-3c1f-6902-b102-000000002e00}10936C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:05.911{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:05.911{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:06.259{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:09:06.258soc101win11\Administrator +11241100x800000000000000020769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:06.484{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:07.932{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:07.932{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:08.806{8223a6b9-3c23-6902-b202-000000002e00}12796C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:09.413{8223a6b9-3c24-6902-b302-000000002e00}2528C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:09.951{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:09.951{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:12.180{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:12.180{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:13.714{8223a6b9-3c28-6902-b402-000000002e00}6648C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:14.195{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:14.195{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:14.493{8223a6b9-3c29-6902-b502-000000002e00}1628C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:16.213{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:16.213{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:18.224{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:18.224{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:19.007{8223a6b9-3c2e-6902-b602-000000002e00}2148C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:19.464{8223a6b9-3c2e-6902-b702-000000002e00}12656C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:20.236{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:20.236{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:22.735{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:22.735{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:24.040{8223a6b9-3c32-6902-b802-000000002e00}10096C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:25.022{8223a6b9-3c33-6902-b902-000000002e00}9572C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:25.158{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:25.158{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:27.179{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:27.179{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:28.847{8223a6b9-3806-6902-4e01-000000002e00}5940C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +10341000x800000000000000020799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:29.302{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:29.302{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:29.527{8223a6b9-3c38-6902-bb02-000000002e00}11576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:30.674{8223a6b9-3c39-6902-bc02-000000002e00}1660C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:31.690{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:31.690{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:33.710{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:33.710{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:33.935{8223a6b9-3c3c-6902-bd02-000000002e00}6636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:35.678{8223a6b9-3c3d-6902-be02-000000002e00}8424C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:35.804{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:35.804{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:37.822{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:37.822{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:39.444{8223a6b9-3c42-6902-bf02-000000002e00}11528C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:39.834{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:39.835{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:40.390{8223a6b9-3c43-6902-c002-000000002e00}9788C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:41.847{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:41.847{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:43.160{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:09:43.160soc101win11\Administrator +11241100x800000000000000020820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:43.395{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000020821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:43.865{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:43.865{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:44.681{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:09:43.160soc101win11\Administrator +11241100x800000000000000020824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:44.683{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000020825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:45.430{8223a6b9-3c46-6902-c102-000000002e00}6076C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:45.887{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:45.887{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:46.311{8223a6b9-3c47-6902-c202-000000002e00}7968C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:48.311{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:48.311{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:49.240{8223a6b9-3c4c-6902-c402-000000002e00}9576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:50.176{8223a6b9-3c4c-6902-c502-000000002e00}12164C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:50.328{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:50.328{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:52.344{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:52.344{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:54.598{8223a6b9-3c51-6902-c602-000000002e00}6140C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:54.824{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:54.824{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:57.055{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:57.055{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:58.843{8223a6b9-3c55-6902-c802-000000002e00}7636C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:59.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:59.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:09:59.547{8223a6b9-3c56-6902-c902-000000002e00}3496C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:01.092{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:01.092{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:03.545{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:03.546{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:04.242{8223a6b9-3c5b-6902-ca02-000000002e00}596C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:05.574{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:05.574{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:05.927{8223a6b9-3c5b-6902-cb02-000000002e00}3104C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:08.215{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:08.215{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:09.430{8223a6b9-3c5f-6902-cc02-000000002e00}12112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:10.551{8223a6b9-3c60-6902-cd02-000000002e00}1128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:10.693{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:10.693{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:12.810{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:12.810{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:13.962{8223a6b9-3c64-6902-ce02-000000002e00}4180C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:15.004{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:15.004{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:17.018{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:17.018{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:18.821{8223a6b9-3c6a-6902-cf02-000000002e00}4812C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:19.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:19.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:20.431{8223a6b9-3c6a-6902-d002-000000002e00}4784C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:21.093{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:21.094{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:23.112{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:23.112{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:24.233{8223a6b9-3c6e-6902-d102-000000002e00}12064C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:25.117{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:25.117{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:25.390{8223a6b9-3c6f-6902-d202-000000002e00}8128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:27.236{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:27.237{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:28.858{8223a6b9-3c74-6902-d302-000000002e00}8368C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:29.699{8223a6b9-3c74-6902-d402-000000002e00}13072C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:29.790{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:29.791{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:32.109{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:32.110{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:32.597{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:10:32.596soc101win11\Administrator +11241100x800000000000000020888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:32.828{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000020889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:34.075{8223a6b9-3c79-6902-d502-000000002e00}3676C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:34.326{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:34.326{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:34.825{8223a6b9-3c79-6902-d602-000000002e00}3208C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:36.337{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:36.337{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:38.433{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF68186698F)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:38.434{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:38.702{8223a6b9-3c7d-6902-d702-000000002e00}1784C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:40.067{8223a6b9-3c7e-6902-d802-000000002e00}4036C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:40.708{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:40.708{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:43.202{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:43.202{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:44.067{8223a6b9-3c83-6902-d902-000000002e00}2516C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:45.219{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:45.219{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:45.703{8223a6b9-3c83-6902-da02-000000002e00}4800C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:47.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:47.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:48.911{8223a6b9-3c87-6902-db02-000000002e00}7704C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:49.869{8223a6b9-3c88-6902-dc02-000000002e00}11656C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:50.319{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:50.319{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:50.807{8223a6b9-3c4b-6902-c302-000000002e00}12124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:52.335{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:52.335{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:53.840{8223a6b9-3c8c-6902-dd02-000000002e00}3656C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:54.340{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:54.340{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:54.544{8223a6b9-3c8d-6902-de02-000000002e00}6912C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:56.682{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:56.684{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:58.948{8223a6b9-3c91-6902-df02-000000002e00}2028C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:59.065{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:59.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:10:59.760{8223a6b9-3c92-6902-e102-000000002e00}1056C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:01.394{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:01.396{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:03.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:03.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:04.336{8223a6b9-3c96-6902-e302-000000002e00}9608C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:05.710{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF6818BF31F)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:05.710{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:07.723{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:07.723{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:08.677{8223a6b9-3c9b-6902-e402-000000002e00}11912C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:09.589{8223a6b9-3c9c-6902-e502-000000002e00}10184C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:10.003{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:10.003{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:12.328{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:12.329{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:13.712{8223a6b9-3ca0-6902-e602-000000002e00}156C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:14.719{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:14.719{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:15.208{8223a6b9-3ca1-6902-e702-000000002e00}13264C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:16.738{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:16.738{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:18.833{8223a6b9-3ca5-6902-e802-000000002e00}3220C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:18.944{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:18.944{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:19.185{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:11:19.185soc101win11\Administrator +11241100x800000000000000020951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:19.212{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000020952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:19.588{8223a6b9-3ca6-6902-e902-000000002e00}4700C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:21.769{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:21.769{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:24.460{8223a6b9-3cab-6902-ea02-000000002e00}8004C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:24.888{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:24.889{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:27.353{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:27.353{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:27.970{8223a6b9-3791-6902-3c00-000000002e00}2992C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\PostRebootEventCache.V2\{2EFD45C7-4C82-4767-800E-9F261328AF15}.bin2025-10-29 14:25:26.251NT AUTHORITY\SYSTEM +534500x800000000000000020961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:28.958{8223a6b9-3caf-6902-ec02-000000002e00}8360C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:29.367{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:29.367{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:29.968{8223a6b9-3cb0-6902-ed02-000000002e00}6396C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:31.383{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:31.383{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:33.598{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF681868C22)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:33.598{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:33.753{8223a6b9-3cb4-6902-ee02-000000002e00}6944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:34.227{8223a6b9-3cb5-6902-ef02-000000002e00}7468C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000020971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:35.347{8223a6b9-3b28-6902-6002-000000002e00}3612C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +10341000x800000000000000020972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:35.617{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:35.617{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:37.833{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:37.833{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:38.640{8223a6b9-3cb9-6902-f002-000000002e00}10144C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:39.209{8223a6b9-3cba-6902-f102-000000002e00}5172C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:40.174{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:40.174{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:42.498{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF6818BEE63)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:42.499{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:43.712{8223a6b9-3cbe-6902-f202-000000002e00}12240C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:44.713{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:44.713{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:45.089{8223a6b9-3cbf-6902-f302-000000002e00}3424C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:46.729{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:46.729{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:48.768{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:48.769{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000020990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:48.965{8223a6b9-3cc3-6902-f502-000000002e00}9236C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000020991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:49.509{8223a6b9-3cc4-6902-f602-000000002e00}5128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000020992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:50.983{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF681868822)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:50.983{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF681868924)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:53.005{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000020995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:53.005{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000020996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:53.035{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:11:53.035soc101win11\Administrator +11241100x800000000000000020997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:53.583{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000020998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:54.224{8223a6b9-3cc9-6902-f702-000000002e00}11132C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000020999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:55.151{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:55.153{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:55.153{8223a6b9-3cc9-6902-f802-000000002e00}11816C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:55.154{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:11:53.035soc101win11\Administrator +11241100x800000000000000021003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:55.388{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:57.353{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:57.353{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:58.641{8223a6b9-3ccd-6902-f902-000000002e00}5732C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:58.906{8223a6b9-3cce-6902-fa02-000000002e00}7012C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:59.367{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:11:59.367{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:01.481{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:01.481{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:03.599{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:03.599{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:04.082{8223a6b9-3cd2-6902-fb02-000000002e00}3400C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:04.318{8223a6b9-3c51-6902-c702-000000002e00}9296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:05.482{8223a6b9-3cd3-6902-fc02-000000002e00}2704C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:05.618{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:05.618{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:07.798{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:07.798{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:08.734{8223a6b9-3cd7-6902-fd02-000000002e00}12252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:09.436{8223a6b9-3cd8-6902-fe02-000000002e00}3316C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:09.902{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:09.902{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:12.011{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:12.011{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:13.867{8223a6b9-3cdc-6902-ff02-000000002e00}8004C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:14.099{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:14.099{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:14.709{8223a6b9-3cdd-6902-0003-000000002e00}12132C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:16.655{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:16.657{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:18.851{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:18.851{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:18.975{8223a6b9-3ce1-6902-0103-000000002e00}12892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:19.461{8223a6b9-3ce2-6902-0203-000000002e00}8224C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:20.855{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:20.855{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:22.863{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:22.863{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:23.641{8223a6b9-3ce6-6902-0303-000000002e00}7176C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:25.116{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:25.116{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:25.337{8223a6b9-3ce6-6902-0403-000000002e00}3032C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:27.134{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:27.134{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:28.641{8223a6b9-3ceb-6902-0503-000000002e00}5360C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:29.103{8223a6b9-3cec-6902-0603-000000002e00}8388C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:29.335{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:29.336{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:31.485{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:31.485{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:33.504{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:33.504{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:33.976{8223a6b9-3cf0-6902-0703-000000002e00}6268C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:34.479{8223a6b9-3cf1-6902-0803-000000002e00}5924C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:35.524{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:35.524{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:37.544{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:37.544{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:38.694{8223a6b9-3cf5-6902-0903-000000002e00}9752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:39.101{8223a6b9-3cf6-6902-0a03-000000002e00}2092C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:39.561{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:39.561{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:41.731{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:41.731{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:43.657{8223a6b9-3cfa-6902-0b03-000000002e00}7860C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:44.101{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:44.101{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:44.831{8223a6b9-3cfb-6902-0d03-000000002e00}12732C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:45.999{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:12:45.999soc101win11\Administrator +10341000x800000000000000021072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:46.110{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:46.110{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:46.110{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:48.127{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:48.127{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:48.823{8223a6b9-3cff-6902-0e03-000000002e00}7920C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:50.248{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:50.248{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:52.350{8223a6b9-3d00-6902-0f03-000000002e00}2324C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:52.580{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:52.581{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:53.729{8223a6b9-3d04-6902-1003-000000002e00}5784C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:54.222{8223a6b9-3d05-6902-1103-000000002e00}13272C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:54.929{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:54.931{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:57.111{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:57.111{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:58.726{8223a6b9-3d09-6902-1303-000000002e00}13244C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:59.120{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:59.120{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:12:59.431{8223a6b9-3d0a-6902-1403-000000002e00}9556C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:01.292{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:01.292{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:03.729{8223a6b9-3d0e-6902-1503-000000002e00}13072C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:03.845{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:03.845{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:04.240{8223a6b9-3d0e-6902-1603-000000002e00}5300C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:05.860{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:05.860{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:07.241{8223a6b9-3ab8-6902-3d02-000000002e00}9876C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:08.032{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:08.032{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:08.640{8223a6b9-3d13-6902-1703-000000002e00}11464C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:09.123{8223a6b9-3d14-6902-1803-000000002e00}7500C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:10.357{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:10.359{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:12.496{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:12.496{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:13.671{8223a6b9-3d18-6902-1903-000000002e00}2020C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:14.308{8223a6b9-3d19-6902-1a03-000000002e00}10376C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:14.513{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:14.513{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:16.531{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:16.531{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:18.546{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:18.546{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:18.879{8223a6b9-3d1d-6902-1b03-000000002e00}6256C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:19.427{8223a6b9-3d1e-6902-1c03-000000002e00}9612C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:20.555{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:20.555{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:22.756{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:22.756{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:23.939{8223a6b9-3d22-6902-1d03-000000002e00}3044C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:24.995{8223a6b9-3d23-6902-1e03-000000002e00}2696C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:25.125{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:25.125{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:26.729{8223a6b9-3bb6-6902-8f02-000000002e00}9636C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000021129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:27.136{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:27.136{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:28.845{8223a6b9-3d27-6902-1f03-000000002e00}2988C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:29.154{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:29.154{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:30.515{8223a6b9-3c95-6902-e202-000000002e00}7864C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000021135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:31.364{8223a6b9-3d28-6902-2003-000000002e00}13152C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:31.519{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:31.519{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:31.684{8223a6b9-3c92-6902-e002-000000002e00}6380C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:33.522{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:33.522{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:33.640{8223a6b9-3d2c-6902-2103-000000002e00}6764C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:34.226{8223a6b9-3d2d-6902-2203-000000002e00}2028C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:35.526{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:35.618{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:37.752{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:37.752{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:38.640{8223a6b9-3d31-6902-2303-000000002e00}6136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:39.341{8223a6b9-3d32-6902-2403-000000002e00}9396C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:39.767{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:39.767{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:40.278{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:13:40.278soc101win11\Administrator +11241100x800000000000000021152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:40.283{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:41.923{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:41.924{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:41.925{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:13:40.278soc101win11\Administrator +11241100x800000000000000021156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:42.369{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:43.640{8223a6b9-3d36-6902-2503-000000002e00}8240C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:44.559{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:44.560{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:44.740{8223a6b9-3d36-6902-2603-000000002e00}7244C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000021161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:45.208{8223a6b9-3cc3-6902-f402-000000002e00}856C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:46.643{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:46.643{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:48.873{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:48.873{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:48.959{8223a6b9-3d3b-6902-2703-000000002e00}3300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:51.073{8223a6b9-3d3b-6902-2803-000000002e00}11660C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:51.126{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:51.126{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:53.138{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:53.138{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:53.714{8223a6b9-3d40-6902-2a03-000000002e00}4812C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:54.239{8223a6b9-3d41-6902-2b03-000000002e00}13204C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:55.280{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:55.280{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:56.440{8223a6b9-3bad-6902-8c02-000000002e00}11476C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:57.585{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:57.585{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:58.755{8223a6b9-3d45-6902-2c03-000000002e00}4784C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:59.908{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:59.908{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:13:59.909{8223a6b9-3cfb-6902-0c03-000000002e00}8324C:\Windows\System32\sc.exeNT AUTHORITY\SYSTEM +534500x800000000000000021183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:00.991{8223a6b9-3d46-6902-2d03-000000002e00}6832C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:02.124{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:02.124{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:03.707{8223a6b9-3d4a-6902-2e03-000000002e00}436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:04.119{8223a6b9-3d4b-6902-2f03-000000002e00}5900C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:04.143{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:04.143{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:05.336{8223a6b9-3d07-6902-1203-000000002e00}8384C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:06.257{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:06.257{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:08.370{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:08.370{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:08.817{8223a6b9-3d4f-6902-3003-000000002e00}3264C:\Windows\System32\netsh.exesoc101win11\Administrator +11241100x800000000000000021196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:08.827{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:14:08.826soc101win11\Administrator +11241100x800000000000000021197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:08.844{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:09.087{8223a6b9-3d4f-6902-3203-000000002e00}3052C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:10.387{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:10.387{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:12.579{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:12.580{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:13.864{8223a6b9-3d54-6902-3303-000000002e00}6200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:13.977{8223a6b9-3d55-6902-3403-000000002e00}8112C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:14.785{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:14.785{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:16.801{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:16.801{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:18.641{8223a6b9-3d59-6902-3503-000000002e00}12204C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:18.818{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:18.818{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:19.128{8223a6b9-3d5a-6902-3603-000000002e00}4744C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:20.862{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:20.862{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:22.882{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:22.882{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:23.641{8223a6b9-3d5e-6902-3703-000000002e00}1204C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:24.617{8223a6b9-3d5f-6902-3803-000000002e00}2916C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:24.899{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:24.899{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:27.244{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:27.245{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:28.873{8223a6b9-3d63-6902-3903-000000002e00}6380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:29.107{8223a6b9-3d64-6902-3a03-000000002e00}5080C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:29.378{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:29.378{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:31.439{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:31.439{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:33.620{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:33.620{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:33.872{8223a6b9-3d68-6902-3b03-000000002e00}7108C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:35.667{8223a6b9-3d68-6902-3c03-000000002e00}10268C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:35.763{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:35.763{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:37.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:37.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:38.693{8223a6b9-3d6d-6902-3d03-000000002e00}7800C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:39.160{8223a6b9-3d6e-6902-3e03-000000002e00}5732C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:39.799{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:39.799{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:41.960{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:41.961{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:43.742{8223a6b9-3d72-6902-3f03-000000002e00}10420C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:44.388{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:44.388{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:45.505{8223a6b9-3d73-6902-4003-000000002e00}5060C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:46.409{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:46.409{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:48.428{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:48.428{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:48.740{8223a6b9-3d77-6902-4103-000000002e00}12876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:49.226{8223a6b9-3d78-6902-4203-000000002e00}5888C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:50.443{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:50.443{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:52.463{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:52.463{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:53.641{8223a6b9-3d7c-6902-4303-000000002e00}4136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:54.142{8223a6b9-3d7d-6902-4403-000000002e00}1292C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:54.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:54.838{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:57.005{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:57.005{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:58.744{8223a6b9-3d82-6902-4503-000000002e00}5096C:\Windows\System32\netsh.exesoc101win11\Administrator +11241100x800000000000000021264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:58.794{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:14:58.794soc101win11\Administrator +10341000x800000000000000021265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:59.024{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:59.024{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:59.031{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:14:59.758{8223a6b9-3d82-6902-4603-000000002e00}11484C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:01.042{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:01.042{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:03.269{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:03.271{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:03.641{8223a6b9-3d87-6902-4703-000000002e00}11460C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:04.935{8223a6b9-3d87-6902-4803-000000002e00}7464C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:06.139{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:06.139{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:08.142{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:08.142{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:09.117{8223a6b9-3d8b-6902-4903-000000002e00}10856C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:10.159{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:10.159{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:12.175{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:12.175{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:13.856{8223a6b9-3d90-6902-4a03-000000002e00}6256C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:14.088{8223a6b9-3d91-6902-4b03-000000002e00}6200C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:14.318{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:14.318{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:16.625{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:16.625{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:18.881{8223a6b9-3d95-6902-4c03-000000002e00}2856C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:18.932{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:18.932{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:19.755{8223a6b9-3d96-6902-4d03-000000002e00}8040C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:21.143{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869539)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:21.143{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:23.160{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:23.160{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:23.640{8223a6b9-3d9a-6902-4e03-000000002e00}2952C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:24.543{8223a6b9-3d9b-6902-4f03-000000002e00}1204C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:25.179{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:25.236{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:26.161{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:15:26.161soc101win11\Administrator +11241100x800000000000000021303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:26.412{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:27.385{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:27.385{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:28.899{8223a6b9-3da0-6902-5003-000000002e00}8264C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:29.399{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:29.399{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:29.635{8223a6b9-3da0-6902-5103-000000002e00}3248C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:31.517{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:31.517{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:33.640{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:33.640{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:33.678{8223a6b9-3da4-6902-5203-000000002e00}5764C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:33.846{8223a6b9-3da5-6902-5303-000000002e00}4796C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:35.657{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:35.657{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:37.675{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:37.675{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:38.705{8223a6b9-3da9-6902-5403-000000002e00}7740C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:39.397{8223a6b9-3daa-6902-5503-000000002e00}3852C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:39.681{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:39.681{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:41.699{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:41.699{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:43.640{8223a6b9-3dae-6902-5603-000000002e00}3076C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:43.719{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:43.719{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:44.648{8223a6b9-3daf-6902-5703-000000002e00}12636C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:45.736{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:45.736{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:47.741{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:47.741{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:48.692{8223a6b9-3db3-6902-5803-000000002e00}9620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:49.400{8223a6b9-3db4-6902-5903-000000002e00}11508C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:49.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:49.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:51.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:51.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|UNKNOWN(00007FF681869A6C)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:53.641{8223a6b9-3db8-6902-5a03-000000002e00}5920C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:54.053{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:54.053{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:54.400{8223a6b9-3db9-6902-5b03-000000002e00}8504C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:56.376{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:56.376{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:58.724{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:58.724{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:58.724{8223a6b9-3dbd-6902-5c03-000000002e00}8424C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:15:59.530{8223a6b9-3dbe-6902-5d03-000000002e00}396C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:00.742{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:00.742{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:02.748{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:02.748{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:05.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:05.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:05.523{8223a6b9-3dc2-6902-6003-000000002e00}12892C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:07.024{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:07.024{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:07.795{8223a6b9-3dc4-6902-6103-000000002e00}5992C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000021360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:09.034{8223a6b9-3b31-6902-6502-000000002e00}3132C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000021361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:09.037{8223a6b9-3dc7-6902-6203-000000002e00}4480C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:09.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF681868328)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:09.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:10.909{8223a6b9-3dc8-6902-6303-000000002e00}10396C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:11.059{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:11.059{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:13.086{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:13.086{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:13.722{8223a6b9-3dcc-6902-6403-000000002e00}8512C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:14.161{8223a6b9-3dcd-6902-6503-000000002e00}9932C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:15.108{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:15.108{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:17.552{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:17.552{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:19.123{8223a6b9-3dd1-6902-6803-000000002e00}3756C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:19.289{8223a6b9-3d4f-6902-3103-000000002e00}13116C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:19.557{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:19.557{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:19.851{8223a6b9-3dd2-6902-6903-000000002e00}4564C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:21.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:21.702{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:23.844{8223a6b9-3dd7-6902-6b03-000000002e00}2028C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:23.926{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:23.926{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:25.943{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:25.943{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:27.958{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:27.958{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:28.640{8223a6b9-3ddb-6902-6d03-000000002e00}4796C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:29.188{8223a6b9-3ddc-6902-6e03-000000002e00}8712C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:30.185{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:30.185{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:31.448{8223a6b9-3dce-6902-6703-000000002e00}9636C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000021394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:32.203{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:32.203{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:33.848{8223a6b9-3de0-6902-6f03-000000002e00}10788C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:34.209{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:34.209{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:34.836{8223a6b9-3de1-6902-7003-000000002e00}2160C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:36.726{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:36.726{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:38.745{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:38.745{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:39.096{8223a6b9-3de5-6902-7103-000000002e00}6608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:40.512{8223a6b9-3de6-6902-7203-000000002e00}1740C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:40.759{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:40.759{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:42.586{8223a6b9-3cae-6902-eb02-000000002e00}2428C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +10341000x800000000000000021409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:43.104{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:43.106{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:43.708{8223a6b9-3deb-6902-7303-000000002e00}3196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:44.588{8223a6b9-3deb-6902-7403-000000002e00}2520C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:45.345{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:45.345{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:47.364{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:47.364{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:48.641{8223a6b9-3def-6902-7503-000000002e00}9744C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:49.223{8223a6b9-3df0-6902-7603-000000002e00}5784C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:49.372{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:49.372{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:51.561{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:51.561{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:53.665{8223a6b9-3df4-6902-7703-000000002e00}8424C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:53.777{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:53.777{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:54.837{8223a6b9-3df5-6902-7803-000000002e00}9968C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:55.792{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:55.792{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:57.800{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:57.800{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:58.870{8223a6b9-3df9-6902-7903-000000002e00}8C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:59.473{8223a6b9-3dfa-6902-7a03-000000002e00}5328C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:59.480{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:16:59.480soc101win11\Administrator +11241100x800000000000000021434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:16:59.482{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:00.115{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:00.115{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:00.778{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:16:59.480soc101win11\Administrator +11241100x800000000000000021438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:01.013{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:02.135{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:02.135{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:03.728{8223a6b9-3dfe-6902-7b03-000000002e00}4800C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000021442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:04.154{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:04.154{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:04.481{8223a6b9-3dff-6902-7c03-000000002e00}12912C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:06.618{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:06.618{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:08.625{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:08.625{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:10.645{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:10.645{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:12.071{8223a6b9-3e06-6902-7f03-000000002e00}3596C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:12.328{8223a6b9-3dd5-6902-6a03-000000002e00}1444C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000021453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:12.336{8223a6b9-3e07-6902-8003-000000002e00}11488C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000021454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:12.371{8223a6b9-3e08-6902-8103-000000002e00}10236C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:12.373{8223a6b9-3e04-6902-7e03-000000002e00}7196C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000021456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:12.617{8223a6b9-3790-6902-1800-000000002e00}1332C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +10341000x800000000000000021457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:12.652{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:12.652{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:13.174{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:16:59.480soc101win11\Administrator +11241100x800000000000000021460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:13.176{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:14.190{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 16:16:59.480soc101win11\Administrator +11241100x800000000000000021462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:14.192{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:14.662{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 16:17:14.662{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:51.808{8223a6b9-4ffe-6902-8803-000000002e00}456C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:51.808{8223a6b9-4ffe-6902-8903-000000002e00}11932C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000021467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:51.979{8223a6b9-3e09-6902-8403-000000002e00}3292C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000021468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:52.299{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:52.299{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:52.830{8223a6b9-4fff-6902-8d03-000000002e00}12252C:\Program Files\VMware\VMware Tools\VMwareResolutionSet.exeNT AUTHORITY\SYSTEM +534500x800000000000000021471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:53.266{8223a6b9-3925-6902-bc01-000000002e00}11432C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000021472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:53.299{8223a6b9-3925-6902-bd01-000000002e00}1764C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000021473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:53.481{8223a6b9-4ffe-6902-8703-000000002e00}2180C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000021474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:53.856{8223a6b9-5000-6902-9103-000000002e00}7940C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000021475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:54.320{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:54.320{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +22542200x800000000000000021477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:54.913{8223a6b9-391c-6902-ab01-000000002e00}1232release-assets.githubusercontent.com0::ffff:185.199.111.133;::ffff:185.199.108.133;::ffff:185.199.110.133;::ffff:185.199.109.133;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +11241100x800000000000000021478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:55.723{8223a6b9-3791-6902-3c00-000000002e00}2992C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\PostRebootEventCache.V2\{2EFD45C7-4C82-4767-800E-9F261328AF15}.bin2025-10-29 14:25:26.251NT AUTHORITY\SYSTEM +534500x800000000000000021479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:55.848{8223a6b9-4fff-6902-8b03-000000002e00}6404C:\Windows\System32\taskhostw.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000021480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:55.998{8223a6b9-5001-6902-9303-000000002e00}4524C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:56.085{8223a6b9-3827-6902-6c01-000000002e00}11000C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Network\c75c1b8a-99d3-4899-96bf-0f5242982570.tmp2025-10-29 17:33:56.077soc101win11\Administrator +11241100x800000000000000021482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:56.128{8223a6b9-3827-6902-6c01-000000002e00}11000C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\AppData\Roaming\LM Studio\Network\Network Persistent State~RF5f9f9d.TMP2025-10-29 17:33:56.128soc101win11\Administrator +10341000x800000000000000021483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:56.341{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:56.341{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:57.248{8223a6b9-5004-6902-9803-000000002e00}1336C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000021486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:57.290{8223a6b9-5003-6902-9703-000000002e00}11280C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000021487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:57.863{8223a6b9-3dcd-6902-6603-000000002e00}10204C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000021488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:57.881{8223a6b9-5005-6902-9903-000000002e00}7240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:57.886{8223a6b9-5005-6902-9a03-000000002e00}9608C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000021490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:58.013{8223a6b9-5005-6902-9c03-000000002e00}6988C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:58.018{8223a6b9-5005-6902-9d03-000000002e00}11932C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000021492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:58.233{8223a6b9-5000-6902-8f03-000000002e00}4656C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000021493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:58.358{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:33:58.358{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:00.380{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:00.380{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:00.527{8223a6b9-5000-6902-9203-000000002e00}8224C:\Windows\System32\ipconfig.exeNT AUTHORITY\SYSTEM +534500x800000000000000021498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:00.532{8223a6b9-4ffe-6902-8603-000000002e00}4940C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000021499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:00.534{8223a6b9-4fff-6902-8c03-000000002e00}9848C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:01.033{8223a6b9-5005-6902-9b03-000000002e00}10592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:01.561{8223a6b9-5008-6902-9e03-000000002e00}7120C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +10341000x800000000000000021502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:02.397{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:02.397{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:02.808{8223a6b9-500a-6902-9f03-000000002e00}12892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:02.811{8223a6b9-500a-6902-a003-000000002e00}10688C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:04.414{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:04.414{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:05.816{8223a6b9-500a-6902-a103-000000002e00}13144C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:06.140{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:06.142{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:06.432{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:06.432{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:07.148{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:07.151{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:07.851{8223a6b9-500f-6902-a203-000000002e00}1636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:07.855{8223a6b9-500f-6902-a303-000000002e00}12152C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:08.163{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:08.168{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:08.451{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:08.451{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:09.184{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:09.184{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:10.196{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:10.196{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:10.467{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:10.467{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:10.857{8223a6b9-500f-6902-a403-000000002e00}4524C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:11.213{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:11.213{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:12.230{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:12.230{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:12.484{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:12.484{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:12.833{8223a6b9-5014-6902-a503-000000002e00}6280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:12.837{8223a6b9-5014-6902-a603-000000002e00}1448C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:13.242{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:13.244{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:14.255{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:14.257{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:14.505{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:14.505{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:15.265{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:15.265{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:15.837{8223a6b9-5014-6902-a703-000000002e00}2852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:16.273{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:16.275{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:16.525{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:16.525{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:17.286{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:17.286{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:17.864{8223a6b9-5019-6902-a803-000000002e00}13056C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:17.872{8223a6b9-5019-6902-a903-000000002e00}8448C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:18.297{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:18.299{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:18.531{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:18.531{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:19.307{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:19.309{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:20.316{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:20.318{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:20.537{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:20.537{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:20.874{8223a6b9-5019-6902-aa03-000000002e00}452C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:21.328{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:21.328{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:22.339{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:22.341{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:22.543{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:22.543{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:22.861{8223a6b9-501e-6902-ab03-000000002e00}13128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:22.864{8223a6b9-501e-6902-ac03-000000002e00}4656C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:24.568{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:24.568{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:25.869{8223a6b9-501e-6902-ad03-000000002e00}10736C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:25.980{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:25.982{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:26.574{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:26.574{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:26.988{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:26.988{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:27.832{8223a6b9-5023-6902-ae03-000000002e00}12088C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:27.836{8223a6b9-5023-6902-af03-000000002e00}10784C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:28.002{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:28.002{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:28.588{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:28.588{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:29.021{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:29.021{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:30.039{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:30.039{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:30.609{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:30.609{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:30.832{8223a6b9-5023-6902-b003-000000002e00}9300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:31.057{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:31.059{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:32.070{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:32.070{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:32.629{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:32.629{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:32.808{8223a6b9-5028-6902-b103-000000002e00}1044C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:32.822{8223a6b9-5028-6902-b203-000000002e00}3780C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:33.077{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:33.079{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:34.098{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:34.098{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:34.651{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:34.651{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:35.115{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:35.118{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:35.816{8223a6b9-5028-6902-b303-000000002e00}13068C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:36.133{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:36.133{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:36.675{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:36.675{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:37.151{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:37.151{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:37.828{8223a6b9-502d-6902-b403-000000002e00}11724C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:37.830{8223a6b9-502d-6902-b503-000000002e00}9620C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:38.169{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:38.169{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:38.697{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:38.697{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:39.190{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:39.190{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:40.195{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:40.195{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:40.706{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:40.706{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:40.832{8223a6b9-502d-6902-b603-000000002e00}3888C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:41.212{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:41.212{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:42.233{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:42.233{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:42.725{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:42.725{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:42.852{8223a6b9-5032-6902-b703-000000002e00}1488C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:42.855{8223a6b9-5032-6902-b803-000000002e00}10024C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:43.583{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:43.583{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:44.600{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:44.600{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:44.744{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:44.744{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:45.621{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:45.623{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:45.860{8223a6b9-5032-6902-b903-000000002e00}7708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:46.633{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:46.633{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +10341000x800000000000000021649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:46.761{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:46.761{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000021651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:47.654{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:47.657{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:47.853{8223a6b9-5037-6902-ba03-000000002e00}12752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:47.857{8223a6b9-5037-6902-bb03-000000002e00}8432C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:48.622{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000021656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:48.682{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\server-logs-state.json2025-10-29 13:25:54.486soc101win11\Administrator +11241100x800000000000000021657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:48.685{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:48.697{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +11241100x800000000000000021659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:48.697{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\working-directories\17617443599272025-10-29 17:34:48.697soc101win11\Administrator +10341000x800000000000000021660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:48.780{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:48.780{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:49.604{8223a6b9-5038-6902-bd03-000000002e00}1276C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +11241100x800000000000000021663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:49.708{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json.lmstudio-temp2025-10-29 17:34:06.140soc101win11\Administrator +11241100x800000000000000021664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:49.708{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\conversations\1761744359927.conversation.json2025-10-29 13:25:59.929soc101win11\Administrator +534500x800000000000000021665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:50.054{8223a6b9-3c35-6902-ba02-000000002e00}4860C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +10341000x800000000000000021666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:50.795{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:50.795{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:50.875{8223a6b9-5037-6902-bc03-000000002e00}7240C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:52.809{8223a6b9-503c-6902-bf03-000000002e00}3896C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:52.819{8223a6b9-503c-6902-c003-000000002e00}4508C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:52.826{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:52.826{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:54.829{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:54.829{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:55.811{8223a6b9-503c-6902-c103-000000002e00}6284C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:56.855{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:56.857{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:57.835{8223a6b9-5041-6902-c203-000000002e00}4876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:57.844{8223a6b9-5041-6902-c303-000000002e00}12656C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:58.870{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:34:58.870{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:00.846{8223a6b9-5041-6902-c403-000000002e00}5520C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:00.895{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:00.895{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:02.818{8223a6b9-5046-6902-c503-000000002e00}9300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:02.822{8223a6b9-5046-6902-c603-000000002e00}8892C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:02.909{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:02.909{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:04.931{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:04.931{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:05.334{8223a6b9-5049-6902-c803-000000002e00}1928C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000021692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:05.334{8223a6b9-5049-6902-c903-000000002e00}9472C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000021693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:05.866{8223a6b9-5046-6902-c703-000000002e00}2040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:06.948{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:06.948{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:07.814{8223a6b9-504b-6902-ca03-000000002e00}10688C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:07.819{8223a6b9-504b-6902-cb03-000000002e00}8128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:08.979{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:08.979{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:10.870{8223a6b9-504b-6902-cc03-000000002e00}9396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:10.999{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:10.999{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:12.839{8223a6b9-5050-6902-cd03-000000002e00}2064C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:12.848{8223a6b9-5050-6902-ce03-000000002e00}2288C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:13.032{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:13.032{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:15.049{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:15.049{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:15.887{8223a6b9-5050-6902-cf03-000000002e00}10288C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:17.065{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:17.065{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:17.803{8223a6b9-5055-6902-d003-000000002e00}4660C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:17.807{8223a6b9-5055-6902-d103-000000002e00}6416C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:19.097{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:19.097{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:20.803{8223a6b9-5055-6902-d203-000000002e00}7348C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:21.119{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:21.119{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:22.810{8223a6b9-505a-6902-d303-000000002e00}2852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:22.813{8223a6b9-505a-6902-d403-000000002e00}12824C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:23.148{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:23.150{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:25.167{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:25.167{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:25.828{8223a6b9-505a-6902-d503-000000002e00}5048C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:27.186{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:27.186{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:27.379{8223a6b9-3d3f-6902-2903-000000002e00}5608C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:27.798{8223a6b9-505f-6902-d603-000000002e00}4260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:27.809{8223a6b9-505f-6902-d703-000000002e00}8348C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:29.214{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:29.214{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:30.812{8223a6b9-505f-6902-d803-000000002e00}6816C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:31.222{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:31.222{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:32.864{8223a6b9-5064-6902-d903-000000002e00}3236C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:32.874{8223a6b9-5064-6902-da03-000000002e00}7880C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:33.250{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:33.250{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:35.283{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:35.283{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:35.868{8223a6b9-5064-6902-db03-000000002e00}10936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:37.301{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:37.301{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:37.814{8223a6b9-5069-6902-dc03-000000002e00}456C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:37.822{8223a6b9-5069-6902-dd03-000000002e00}4452C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:39.331{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:39.331{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:40.836{8223a6b9-5069-6902-de03-000000002e00}1740C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:41.338{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:41.338{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:42.851{8223a6b9-506e-6902-df03-000000002e00}4044C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:42.858{8223a6b9-506e-6902-e003-000000002e00}12988C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:43.369{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:43.369{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:45.386{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:45.386{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:45.869{8223a6b9-506e-6902-e103-000000002e00}8892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:46.144{8223a6b9-3dc2-6902-5f03-000000002e00}11076C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:47.404{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:47.404{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:47.816{8223a6b9-5073-6902-e203-000000002e00}5968C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:47.823{8223a6b9-5073-6902-e303-000000002e00}1928C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:49.414{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:49.414{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:50.524{8223a6b9-3dbe-6902-5e03-000000002e00}9876C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000021767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:50.879{8223a6b9-5073-6902-e403-000000002e00}2040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:51.446{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:51.446{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:52.833{8223a6b9-5078-6902-e503-000000002e00}2696C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:52.838{8223a6b9-5078-6902-e603-000000002e00}2640C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:53.449{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:53.449{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:55.467{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:55.467{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:55.895{8223a6b9-5078-6902-e703-000000002e00}11484C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:56.436{8223a6b9-3b6c-6902-7902-000000002e00}2536C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:57.486{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:57.486{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:57.801{8223a6b9-507d-6902-e803-000000002e00}1644C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:57.806{8223a6b9-507d-6902-e903-000000002e00}10188C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:59.503{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:35:59.503{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:00.821{8223a6b9-507d-6902-ea03-000000002e00}8092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:01.534{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:01.534{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:02.786{8223a6b9-5082-6902-eb03-000000002e00}12096C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:02.798{8223a6b9-5082-6902-ec03-000000002e00}10268C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:03.561{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:03.561{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:05.592{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:05.592{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:05.799{8223a6b9-5082-6902-ed03-000000002e00}6980C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:07.616{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:07.616{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:07.806{8223a6b9-5087-6902-ee03-000000002e00}7384C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:07.809{8223a6b9-5087-6902-ef03-000000002e00}9156C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:09.635{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:09.635{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:10.799{8223a6b9-5087-6902-f003-000000002e00}4748C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:11.664{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:11.664{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:12.807{8223a6b9-508c-6902-f103-000000002e00}8112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:12.813{8223a6b9-508c-6902-f203-000000002e00}10856C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:13.694{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:13.694{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:15.712{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:15.712{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:15.809{8223a6b9-508c-6902-f303-000000002e00}10376C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:17.742{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:17.742{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:17.822{8223a6b9-5091-6902-f703-000000002e00}9304C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:17.833{8223a6b9-5091-6902-f803-000000002e00}7900C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:19.760{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:19.762{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:20.839{8223a6b9-5091-6902-f903-000000002e00}12652C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:21.791{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:21.791{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:22.796{8223a6b9-5096-6902-fa03-000000002e00}6332C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:22.800{8223a6b9-5096-6902-fb03-000000002e00}8180C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:23.804{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:23.804{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:25.807{8223a6b9-5096-6902-fc03-000000002e00}10336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:25.823{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:25.823{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:27.805{8223a6b9-509b-6902-fd03-000000002e00}12060C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:27.812{8223a6b9-509b-6902-fe03-000000002e00}1680C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:27.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:27.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:29.853{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:29.855{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:30.805{8223a6b9-509b-6902-ff03-000000002e00}10728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:31.869{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:31.869{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:32.801{8223a6b9-50a0-6902-0004-000000002e00}160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:32.813{8223a6b9-50a0-6902-0104-000000002e00}6112C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:33.896{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:33.896{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:35.817{8223a6b9-50a0-6902-0204-000000002e00}13056C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:35.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:35.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:37.796{8223a6b9-50a5-6902-0304-000000002e00}6816C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:37.799{8223a6b9-50a5-6902-0404-000000002e00}1552C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:37.946{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:37.946{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:39.951{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:39.951{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:40.806{8223a6b9-50a5-6902-0504-000000002e00}4916C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:41.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:41.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:42.804{8223a6b9-50aa-6902-0604-000000002e00}7176C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:42.810{8223a6b9-50aa-6902-0704-000000002e00}544C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:44.005{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:44.005{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:45.815{8223a6b9-50aa-6902-0804-000000002e00}13028C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:46.025{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:46.025{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:47.805{8223a6b9-50af-6902-0904-000000002e00}9656C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:47.817{8223a6b9-50af-6902-0a04-000000002e00}6380C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:48.026{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:48.026{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:48.681{8223a6b9-5002-6902-9503-000000002e00}4500C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000021863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:48.689{8223a6b9-5002-6902-9403-000000002e00}8100C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:50.059{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:50.059{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:50.874{8223a6b9-50af-6902-0b04-000000002e00}7232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:52.087{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:52.087{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:52.810{8223a6b9-50b4-6902-0c04-000000002e00}10592C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:52.813{8223a6b9-50b4-6902-0d04-000000002e00}5716C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:54.117{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:54.117{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:55.873{8223a6b9-50b4-6902-0e04-000000002e00}3816C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:56.139{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:56.139{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:57.825{8223a6b9-50b9-6902-0f04-000000002e00}1448C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:57.828{8223a6b9-50b9-6902-1004-000000002e00}6496C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:58.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:36:58.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:00.164{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:00.164{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:00.883{8223a6b9-50b9-6902-1104-000000002e00}12988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:02.185{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:02.185{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:02.879{8223a6b9-50be-6902-1204-000000002e00}8892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:02.883{8223a6b9-50be-6902-1304-000000002e00}9868C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:04.205{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:04.205{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:05.923{8223a6b9-50be-6902-1404-000000002e00}6396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:06.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:06.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:07.803{8223a6b9-50c3-6902-1504-000000002e00}11132C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:07.813{8223a6b9-50c3-6902-1604-000000002e00}7076C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:08.251{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:08.251{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:10.278{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:10.278{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:10.822{8223a6b9-50c3-6902-1704-000000002e00}11464C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:12.299{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:12.299{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:12.803{8223a6b9-50c8-6902-1804-000000002e00}6740C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:12.807{8223a6b9-50c8-6902-1904-000000002e00}11284C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:14.319{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:14.319{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:15.155{8223a6b9-508e-6902-f503-000000002e00}11008C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000021906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:15.232{8223a6b9-508e-6902-f403-000000002e00}11392C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000021907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:15.286{8223a6b9-508f-6902-f603-000000002e00}13112C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000021908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:15.823{8223a6b9-50c8-6902-1a04-000000002e00}12864C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:16.341{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:16.341{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:17.816{8223a6b9-50cd-6902-1b04-000000002e00}5692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:17.823{8223a6b9-50cd-6902-1c04-000000002e00}7216C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:18.363{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:18.363{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:20.388{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:20.388{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:20.839{8223a6b9-50cd-6902-1d04-000000002e00}3456C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:22.411{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:22.411{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:22.806{8223a6b9-50d2-6902-1e04-000000002e00}2264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:22.811{8223a6b9-50d2-6902-1f04-000000002e00}1620C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:24.436{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:24.436{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:25.047{8223a6b9-50d5-6902-2204-000000002e00}7760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:25.049{8223a6b9-50d5-6902-2104-000000002e00}4728C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000021926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:25.832{8223a6b9-50d2-6902-2004-000000002e00}11948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:26.460{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:26.460{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:27.838{8223a6b9-50d7-6902-2404-000000002e00}3276C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:27.841{8223a6b9-50d7-6902-2504-000000002e00}7128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:28.484{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:28.484{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:30.512{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:30.512{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:30.842{8223a6b9-50d7-6902-2604-000000002e00}11336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:32.540{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:32.540{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:32.832{8223a6b9-50dc-6902-2704-000000002e00}3888C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:32.835{8223a6b9-50dc-6902-2804-000000002e00}12636C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000021940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:33.118{8223a6b9-378f-6902-0c00-000000002e00}872C:\WINDOWS\system32\lsass.exeC:\Users\Administrator\AppData\Local\Microsoft\Windows\SFAP\cache0.bin2024-11-11 17:13:25.488NT AUTHORITY\SYSTEM +534500x800000000000000021941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:33.482{8223a6b9-50dd-6902-2b04-000000002e00}1336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000021942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:33.528{8223a6b9-50dd-6902-2a04-000000002e00}7704C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000021943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:33.667{8223a6b9-3e00-6902-7d03-000000002e00}4048C:\Windows\System32\LogonUI.exeNT AUTHORITY\SYSTEM +534500x800000000000000021944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:33.775{8223a6b9-50dd-6902-2c04-000000002e00}6976C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:34.552{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:34.552{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:35.852{8223a6b9-50dc-6902-2904-000000002e00}11048C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:36.571{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:36.571{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:36.608{8223a6b9-50d5-6902-2304-000000002e00}10192C:\Windows\System32\ctfmon.exeNT AUTHORITY\SYSTEM +534500x800000000000000021951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:37.797{8223a6b9-50e1-6902-2d04-000000002e00}3708C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:37.804{8223a6b9-50e1-6902-2e04-000000002e00}2224C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:38.594{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:38.596{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:40.612{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:40.612{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:40.810{8223a6b9-50e1-6902-2f04-000000002e00}13260C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:42.639{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:42.639{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:42.848{8223a6b9-50e6-6902-3004-000000002e00}12752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:42.854{8223a6b9-50e6-6902-3104-000000002e00}2852C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:44.652{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:44.652{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:45.867{8223a6b9-50e6-6902-3204-000000002e00}7240C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:46.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:46.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:47.846{8223a6b9-50eb-6902-3304-000000002e00}12732C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:47.850{8223a6b9-50eb-6902-3404-000000002e00}5288C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:48.698{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:48.698{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:50.720{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:50.720{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:50.866{8223a6b9-50eb-6902-3504-000000002e00}9380C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:52.738{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:52.738{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:52.808{8223a6b9-50f0-6902-3604-000000002e00}9612C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:52.816{8223a6b9-50f0-6902-3704-000000002e00}7732C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:54.758{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:54.758{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:55.824{8223a6b9-50f0-6902-3804-000000002e00}1912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:56.787{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:56.787{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:57.805{8223a6b9-50f5-6902-3904-000000002e00}7176C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:57.812{8223a6b9-50f5-6902-3a04-000000002e00}2540C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:58.810{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:37:58.810{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:00.812{8223a6b9-50f5-6902-3b04-000000002e00}6728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:00.838{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:00.838{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:02.850{8223a6b9-50fa-6902-3c04-000000002e00}6648C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000021991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:02.856{8223a6b9-50fa-6902-3d04-000000002e00}8528C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000021992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:02.861{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:02.861{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:03.763{8223a6b9-50fb-6902-3f04-000000002e00}5048C:\Windows\System32\taskhostw.exesoc101win11\Administrator +10341000x800000000000000021995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:04.883{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:04.883{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000021997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:05.853{8223a6b9-50fa-6902-3e04-000000002e00}6104C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000021998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:06.905{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000021999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:06.905{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:07.814{8223a6b9-50ff-6902-4004-000000002e00}4588C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:07.820{8223a6b9-50ff-6902-4104-000000002e00}2300C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:08.929{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:08.929{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:10.833{8223a6b9-50ff-6902-4204-000000002e00}9572C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:10.950{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:10.950{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:12.820{8223a6b9-5104-6902-4304-000000002e00}9436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:12.826{8223a6b9-5104-6902-4404-000000002e00}8376C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:12.964{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:12.964{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:14.981{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:14.981{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:15.833{8223a6b9-5104-6902-4504-000000002e00}5776C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:16.997{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:16.997{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:17.874{8223a6b9-5109-6902-4604-000000002e00}2140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:17.878{8223a6b9-5109-6902-4704-000000002e00}8512C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:19.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:19.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:20.866{8223a6b9-5109-6902-4804-000000002e00}10792C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:21.032{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:21.032{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:22.810{8223a6b9-510e-6902-4904-000000002e00}9876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:22.812{8223a6b9-510e-6902-4a04-000000002e00}6288C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:23.042{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:23.042{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:25.050{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:25.051{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:25.818{8223a6b9-510e-6902-4b04-000000002e00}12756C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:27.074{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:27.074{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:27.810{8223a6b9-5113-6902-4c04-000000002e00}5900C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:27.818{8223a6b9-5113-6902-4d04-000000002e00}3220C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:29.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:29.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:30.823{8223a6b9-5113-6902-4e04-000000002e00}5552C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:31.086{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:31.086{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:32.811{8223a6b9-5118-6902-4f04-000000002e00}2704C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:32.817{8223a6b9-5118-6902-5004-000000002e00}7784C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:33.094{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:33.094{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:35.112{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:35.112{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:35.809{8223a6b9-5118-6902-5104-000000002e00}10096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:37.121{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:37.121{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:37.823{8223a6b9-511d-6902-5204-000000002e00}6248C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:37.826{8223a6b9-511d-6902-5304-000000002e00}10696C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:39.140{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:39.140{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:40.834{8223a6b9-511d-6902-5404-000000002e00}6108C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:41.159{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:41.159{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:42.808{8223a6b9-5122-6902-5604-000000002e00}5524C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:42.811{8223a6b9-5122-6902-5704-000000002e00}12072C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:43.169{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:43.169{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:45.179{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:45.179{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:45.807{8223a6b9-5122-6902-5804-000000002e00}6984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:46.455{8223a6b9-5125-6902-5904-000000002e00}1628C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:47.202{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:47.202{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:47.490{8223a6b9-5122-6902-5504-000000002e00}12856C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000022066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:47.791{8223a6b9-5127-6902-5a04-000000002e00}3648C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:47.805{8223a6b9-5127-6902-5b04-000000002e00}8008C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:49.218{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:49.218{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:50.797{8223a6b9-5127-6902-5c04-000000002e00}11948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:51.238{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:51.238{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:52.811{8223a6b9-512c-6902-5d04-000000002e00}6656C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:52.816{8223a6b9-512c-6902-5e04-000000002e00}4748C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:53.259{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:53.259{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:55.279{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:55.279{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:55.813{8223a6b9-512c-6902-5f04-000000002e00}6292C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:57.037{8223a6b9-5130-6902-6104-000000002e00}7636C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000022081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:57.075{8223a6b9-512f-6902-6004-000000002e00}9744C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +10341000x800000000000000022082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:57.297{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:57.297{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:57.821{8223a6b9-5131-6902-6204-000000002e00}864C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:57.824{8223a6b9-5131-6902-6304-000000002e00}4900C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:59.305{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:38:59.305{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:00.830{8223a6b9-5131-6902-6404-000000002e00}7704C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:01.334{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:01.334{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:02.901{8223a6b9-5136-6902-6604-000000002e00}5496C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:02.905{8223a6b9-5136-6902-6704-000000002e00}8180C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:03.350{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:03.350{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:05.369{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:05.369{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:05.908{8223a6b9-5136-6902-6804-000000002e00}8668C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:07.387{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:07.387{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:07.822{8223a6b9-513b-6902-6904-000000002e00}860C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:07.832{8223a6b9-513b-6902-6a04-000000002e00}8888C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:09.402{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:09.402{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:10.825{8223a6b9-513b-6902-6b04-000000002e00}11988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:11.419{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:11.419{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:12.823{8223a6b9-5140-6902-6c04-000000002e00}4260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:12.829{8223a6b9-5140-6902-6d04-000000002e00}5144C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:13.436{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:13.436{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:15.451{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:15.451{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:15.828{8223a6b9-5140-6902-6e04-000000002e00}6112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:17.469{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:17.471{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:17.821{8223a6b9-5145-6902-6f04-000000002e00}8900C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:17.825{8223a6b9-5145-6902-7004-000000002e00}12732C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:19.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:19.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:20.824{8223a6b9-5145-6902-7104-000000002e00}3008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:21.530{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:21.530{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:22.795{8223a6b9-514a-6902-7204-000000002e00}13004C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:22.800{8223a6b9-514a-6902-7304-000000002e00}3752C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:23.547{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:23.547{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:25.566{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:25.566{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:25.796{8223a6b9-514a-6902-7404-000000002e00}7912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:27.588{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:27.588{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:27.847{8223a6b9-514f-6902-7504-000000002e00}6536C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:27.852{8223a6b9-514f-6902-7604-000000002e00}6768C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:29.606{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:29.608{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:30.907{8223a6b9-514f-6902-7704-000000002e00}1140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:31.638{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:31.638{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:32.810{8223a6b9-5154-6902-7804-000000002e00}9476C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:32.815{8223a6b9-5154-6902-7904-000000002e00}6856C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:33.669{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:33.669{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:35.690{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:35.690{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:35.822{8223a6b9-5154-6902-7a04-000000002e00}1124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:37.720{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:37.720{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:37.806{8223a6b9-5159-6902-7b04-000000002e00}11660C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:37.818{8223a6b9-5159-6902-7c04-000000002e00}2116C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:39.750{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:39.750{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:40.806{8223a6b9-5159-6902-7d04-000000002e00}7420C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:41.772{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:41.772{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:42.818{8223a6b9-515e-6902-7e04-000000002e00}8128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:42.821{8223a6b9-515e-6902-7f04-000000002e00}1572C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:43.797{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:43.797{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:45.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:45.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:45.817{8223a6b9-515e-6902-8004-000000002e00}7860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:47.807{8223a6b9-5163-6902-8104-000000002e00}9680C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:47.818{8223a6b9-5163-6902-8204-000000002e00}9280C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:47.840{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:47.840{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:49.859{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:49.859{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:50.200{8223a6b9-5166-6902-8404-000000002e00}4332C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000022169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:50.815{8223a6b9-5163-6902-8304-000000002e00}7056C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:51.880{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:51.880{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:52.826{8223a6b9-5168-6902-8504-000000002e00}7940C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:52.830{8223a6b9-5168-6902-8604-000000002e00}1764C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:53.896{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:53.896{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:55.820{8223a6b9-5168-6902-8704-000000002e00}11132C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:55.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:55.915{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:57.830{8223a6b9-516d-6902-8804-000000002e00}3000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:57.834{8223a6b9-516d-6902-8904-000000002e00}12760C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:57.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:57.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:59.954{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:39:59.954{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:00.835{8223a6b9-516d-6902-8a04-000000002e00}6740C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:01.975{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:01.975{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:02.813{8223a6b9-5172-6902-8b04-000000002e00}6076C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:02.818{8223a6b9-5172-6902-8c04-000000002e00}2640C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:03.996{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:03.996{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:05.809{8223a6b9-5172-6902-8d04-000000002e00}12156C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:06.017{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:06.017{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:07.822{8223a6b9-5177-6902-8e04-000000002e00}9636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:07.825{8223a6b9-5177-6902-8f04-000000002e00}2296C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:08.038{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:08.038{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:10.058{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:10.058{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:10.825{8223a6b9-5177-6902-9004-000000002e00}2932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:12.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:12.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:12.821{8223a6b9-517c-6902-9104-000000002e00}8712C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:12.825{8223a6b9-517c-6902-9204-000000002e00}12940C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:14.100{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:14.100{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:15.823{8223a6b9-517c-6902-9304-000000002e00}3256C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:16.122{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:16.122{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:17.856{8223a6b9-5181-6902-9404-000000002e00}6316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:17.866{8223a6b9-5181-6902-9504-000000002e00}1248C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:18.143{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:18.143{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:20.165{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:20.165{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:20.871{8223a6b9-5181-6902-9604-000000002e00}5280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:22.186{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:22.186{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:22.806{8223a6b9-5186-6902-9704-000000002e00}1620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:22.810{8223a6b9-5186-6902-9804-000000002e00}6984C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:24.195{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:24.195{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:25.812{8223a6b9-5186-6902-9904-000000002e00}6000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:26.208{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:26.208{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:27.799{8223a6b9-518b-6902-9a04-000000002e00}6944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:27.804{8223a6b9-518b-6902-9b04-000000002e00}9616C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:28.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:28.229{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:30.248{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:30.248{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:30.799{8223a6b9-518b-6902-9c04-000000002e00}10428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:32.262{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:32.264{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:32.808{8223a6b9-5190-6902-9d04-000000002e00}11692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:32.817{8223a6b9-5190-6902-9e04-000000002e00}7128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:34.288{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:34.288{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:35.817{8223a6b9-5190-6902-9f04-000000002e00}2092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:36.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:36.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:37.818{8223a6b9-5195-6902-a004-000000002e00}10168C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:37.825{8223a6b9-5195-6902-a104-000000002e00}6240C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:38.335{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:38.335{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:40.353{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:40.353{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:40.827{8223a6b9-5195-6902-a204-000000002e00}10184C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:42.371{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:42.371{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:42.804{8223a6b9-519a-6902-a304-000000002e00}5980C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:42.821{8223a6b9-519a-6902-a404-000000002e00}1496C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:44.394{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:44.394{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:45.814{8223a6b9-519a-6902-a504-000000002e00}9780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:46.407{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:46.407{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:47.824{8223a6b9-519f-6902-a604-000000002e00}552C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:47.829{8223a6b9-519f-6902-a704-000000002e00}5496C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:48.432{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:48.432{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:50.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:50.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:50.847{8223a6b9-519f-6902-a804-000000002e00}9248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:52.478{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:52.478{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:52.843{8223a6b9-51a4-6902-a904-000000002e00}8344C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:52.847{8223a6b9-51a4-6902-aa04-000000002e00}8888C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:54.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:54.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:55.849{8223a6b9-51a4-6902-ab04-000000002e00}8412C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:56.512{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:56.512{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:57.834{8223a6b9-51a9-6902-ac04-000000002e00}2852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:57.840{8223a6b9-51a9-6902-ad04-000000002e00}11276C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:58.536{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:40:58.536{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:00.560{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:00.560{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:00.832{8223a6b9-51a9-6902-ae04-000000002e00}7240C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:02.581{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:02.581{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:02.818{8223a6b9-51ae-6902-af04-000000002e00}13056C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:02.827{8223a6b9-51ae-6902-b004-000000002e00}7872C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:04.599{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:04.599{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:05.880{8223a6b9-51ae-6902-b104-000000002e00}7564C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:06.619{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:06.619{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:07.823{8223a6b9-51b3-6902-b204-000000002e00}2064C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:07.827{8223a6b9-51b3-6902-b304-000000002e00}13260C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:08.640{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:08.640{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:10.658{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:10.658{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:10.818{8223a6b9-51b3-6902-b404-000000002e00}2556C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:12.679{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:12.679{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:12.842{8223a6b9-51b8-6902-b504-000000002e00}2260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:12.855{8223a6b9-51b8-6902-b604-000000002e00}544C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:14.697{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:14.697{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:15.849{8223a6b9-51b8-6902-b704-000000002e00}7176C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:16.712{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:16.712{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:17.881{8223a6b9-51bd-6902-b804-000000002e00}8152C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:17.894{8223a6b9-51bd-6902-b904-000000002e00}6556C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:18.729{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:18.729{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:20.748{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:20.748{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:20.892{8223a6b9-51bd-6902-ba04-000000002e00}720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:22.766{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:22.766{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:22.836{8223a6b9-51c2-6902-bb04-000000002e00}1800C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:22.843{8223a6b9-51c2-6902-bc04-000000002e00}9836C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:24.787{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:24.787{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:25.829{8223a6b9-51c2-6902-bd04-000000002e00}6368C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:26.804{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:26.804{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:27.830{8223a6b9-51c7-6902-be04-000000002e00}12896C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:27.834{8223a6b9-51c7-6902-bf04-000000002e00}156C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:28.821{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:28.821{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:30.822{8223a6b9-51c7-6902-c004-000000002e00}3912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:30.838{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:30.838{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:32.825{8223a6b9-51cc-6902-c104-000000002e00}6976C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:32.838{8223a6b9-51cc-6902-c204-000000002e00}13140C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:32.857{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:32.857{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:34.877{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:34.877{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:35.842{8223a6b9-51cc-6902-c304-000000002e00}7192C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:36.899{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:36.899{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:37.839{8223a6b9-51d1-6902-c404-000000002e00}7480C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:37.845{8223a6b9-51d1-6902-c504-000000002e00}6356C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:38.919{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:38.919{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:40.843{8223a6b9-51d1-6902-c604-000000002e00}2448C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:40.939{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:40.939{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:42.846{8223a6b9-51d6-6902-c704-000000002e00}4040C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:42.851{8223a6b9-51d6-6902-c804-000000002e00}7980C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:42.957{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:42.957{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:44.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:44.973{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:45.854{8223a6b9-51d6-6902-c904-000000002e00}2080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:46.993{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:46.993{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:47.838{8223a6b9-51db-6902-ca04-000000002e00}1844C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:47.843{8223a6b9-51db-6902-cb04-000000002e00}11464C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:49.014{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:49.014{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:50.844{8223a6b9-51db-6902-cc04-000000002e00}7008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:51.034{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:51.034{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:52.811{8223a6b9-51e0-6902-cd04-000000002e00}11932C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:52.824{8223a6b9-51e0-6902-ce04-000000002e00}4604C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:53.051{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:53.051{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:55.069{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:55.069{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:55.837{8223a6b9-51e0-6902-cf04-000000002e00}6872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:57.086{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:57.086{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:57.835{8223a6b9-51e5-6902-d004-000000002e00}12920C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:57.838{8223a6b9-51e5-6902-d104-000000002e00}8448C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:59.099{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:41:59.099{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:00.880{8223a6b9-51e5-6902-d204-000000002e00}8200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:01.121{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:01.121{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:02.835{8223a6b9-51ea-6902-d304-000000002e00}8560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:02.847{8223a6b9-51ea-6902-d404-000000002e00}2932C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:03.138{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:03.138{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:05.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:05.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:05.891{8223a6b9-51ea-6902-d504-000000002e00}13272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:07.174{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:07.174{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:07.835{8223a6b9-51ef-6902-d604-000000002e00}1196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:07.840{8223a6b9-51ef-6902-d704-000000002e00}3616C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:09.190{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:09.190{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:10.892{8223a6b9-51ef-6902-d804-000000002e00}12124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:11.212{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:11.212{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:12.813{8223a6b9-51f4-6902-d904-000000002e00}3176C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:12.826{8223a6b9-51f4-6902-da04-000000002e00}6376C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:13.229{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:13.229{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:15.248{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:15.248{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:15.825{8223a6b9-51f4-6902-db04-000000002e00}8920C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:17.265{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:17.265{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:17.829{8223a6b9-51f9-6902-dc04-000000002e00}6232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:17.835{8223a6b9-51f9-6902-dd04-000000002e00}8008C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:19.282{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:19.282{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:20.835{8223a6b9-51f9-6902-de04-000000002e00}11912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:21.301{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:21.301{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:22.838{8223a6b9-51fe-6902-df04-000000002e00}7800C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:22.842{8223a6b9-51fe-6902-e004-000000002e00}10068C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:23.316{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:23.316{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:25.345{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:25.345{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:25.846{8223a6b9-51fe-6902-e104-000000002e00}7740C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:27.372{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:27.372{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:27.825{8223a6b9-5203-6902-e204-000000002e00}728C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:27.831{8223a6b9-5203-6902-e304-000000002e00}3292C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:29.400{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:29.400{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:30.838{8223a6b9-5203-6902-e404-000000002e00}10264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:31.432{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:31.432{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000022426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:31.693{8223a6b9-3791-6902-3c00-000000002e00}2992C:\WINDOWS\system32\svchost.exeC:\Windows\SoftwareDistribution\PostRebootEventCache.V2\{2EFD45C7-4C82-4767-800E-9F261328AF15}.bin2025-10-29 14:25:26.251NT AUTHORITY\SYSTEM +534500x800000000000000022427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:32.820{8223a6b9-5208-6902-e504-000000002e00}1476C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:32.823{8223a6b9-5208-6902-e604-000000002e00}9400C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:33.460{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:33.460{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:33.791{8223a6b9-3791-6902-3c00-000000002e00}2992C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:35.488{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:35.488{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:35.827{8223a6b9-5208-6902-e704-000000002e00}11236C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:37.510{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:37.510{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:37.817{8223a6b9-520d-6902-e804-000000002e00}1496C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:37.820{8223a6b9-520d-6902-e904-000000002e00}5584C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:39.528{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:39.528{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:40.825{8223a6b9-520d-6902-ea04-000000002e00}852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:41.556{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:41.556{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:42.796{8223a6b9-5212-6902-eb04-000000002e00}11840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:42.813{8223a6b9-5212-6902-ec04-000000002e00}552C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:43.579{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:43.579{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:45.605{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:45.605{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:45.814{8223a6b9-5212-6902-ed04-000000002e00}4200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:47.609{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:47.609{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:47.831{8223a6b9-5217-6902-ee04-000000002e00}7464C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:47.840{8223a6b9-5217-6902-ef04-000000002e00}12060C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:49.636{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:49.636{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:50.875{8223a6b9-5217-6902-f004-000000002e00}9288C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:51.659{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:51.659{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:52.848{8223a6b9-521c-6902-f104-000000002e00}2852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:52.856{8223a6b9-521c-6902-f204-000000002e00}12752C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:53.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:53.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:55.697{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:55.697{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:55.906{8223a6b9-521c-6902-f304-000000002e00}3032C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:57.713{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:57.713{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:57.856{8223a6b9-5221-6902-f404-000000002e00}9892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:57.867{8223a6b9-5221-6902-f504-000000002e00}6468C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:59.731{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:42:59.731{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:00.915{8223a6b9-5221-6902-f604-000000002e00}3828C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:01.748{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:01.748{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:02.865{8223a6b9-5226-6902-f704-000000002e00}1656C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:02.875{8223a6b9-5226-6902-f804-000000002e00}6896C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:03.764{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:03.764{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:05.784{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:05.784{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:05.864{8223a6b9-5226-6902-f904-000000002e00}1680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:07.804{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:07.804{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:07.855{8223a6b9-522b-6902-fa04-000000002e00}2732C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:07.859{8223a6b9-522b-6902-fb04-000000002e00}8280C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:09.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:09.817{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:10.875{8223a6b9-522b-6902-fc04-000000002e00}5784C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:11.843{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:11.843{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:12.810{8223a6b9-5230-6902-fd04-000000002e00}1444C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:12.823{8223a6b9-5230-6902-fe04-000000002e00}7136C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:13.866{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:13.866{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:15.833{8223a6b9-5230-6902-ff04-000000002e00}6556C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:15.883{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:15.883{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:17.908{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:17.908{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:17.911{8223a6b9-5235-6902-0005-000000002e00}5964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:17.928{8223a6b9-5235-6902-0105-000000002e00}13136C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:19.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:19.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:20.933{8223a6b9-5235-6902-0205-000000002e00}6380C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:21.951{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:21.951{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:22.818{8223a6b9-523a-6902-0305-000000002e00}1200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:22.823{8223a6b9-523a-6902-0405-000000002e00}5780C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:23.966{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:23.966{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:25.834{8223a6b9-523a-6902-0505-000000002e00}4428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:25.983{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:25.983{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:27.830{8223a6b9-523f-6902-0605-000000002e00}1880C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:27.834{8223a6b9-523f-6902-0705-000000002e00}12132C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:28.007{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:28.007{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:30.035{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:30.035{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:30.841{8223a6b9-523f-6902-0805-000000002e00}6280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:32.051{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:32.051{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:32.817{8223a6b9-5244-6902-0905-000000002e00}1344C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:32.823{8223a6b9-5244-6902-0a05-000000002e00}7108C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:34.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:34.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:35.823{8223a6b9-5244-6902-0b05-000000002e00}2984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:36.093{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:36.093{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:37.812{8223a6b9-5249-6902-0c05-000000002e00}2312C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:37.818{8223a6b9-5249-6902-0d05-000000002e00}1780C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:38.106{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:38.106{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:40.123{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:40.123{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:40.829{8223a6b9-5249-6902-0e05-000000002e00}13200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:42.148{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:42.148{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:42.855{8223a6b9-524e-6902-0f05-000000002e00}4812C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:42.859{8223a6b9-524e-6902-1005-000000002e00}12780C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:44.177{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:44.177{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:45.867{8223a6b9-524e-6902-1105-000000002e00}11464C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:45.893{8223a6b9-3e08-6902-8303-000000002e00}5324C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:46.192{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:46.192{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:47.848{8223a6b9-5253-6902-1205-000000002e00}2760C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:47.855{8223a6b9-5253-6902-1305-000000002e00}1364C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:48.202{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:48.202{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:50.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:50.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:50.550{8223a6b9-5256-6902-1505-000000002e00}11688C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000022555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:50.814{8223a6b9-5256-6902-1705-000000002e00}11140C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000022556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:50.874{8223a6b9-5253-6902-1405-000000002e00}1564C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:52.252{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:52.252{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:52.832{8223a6b9-5258-6902-1805-000000002e00}8712C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:52.841{8223a6b9-5258-6902-1905-000000002e00}2096C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:54.273{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:54.273{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:55.839{8223a6b9-5258-6902-1a05-000000002e00}3256C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:56.291{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:56.291{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:56.610{8223a6b9-5000-6902-8e03-000000002e00}740C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:57.868{8223a6b9-525d-6902-1b05-000000002e00}3616C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:57.871{8223a6b9-525d-6902-1c05-000000002e00}10036C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:58.318{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:43:58.318{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:00.347{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:00.347{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:00.868{8223a6b9-525d-6902-1d05-000000002e00}13216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:02.361{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:02.361{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:02.826{8223a6b9-5262-6902-1e05-000000002e00}2836C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:02.842{8223a6b9-5262-6902-1f05-000000002e00}6092C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:04.373{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:04.373{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:05.846{8223a6b9-5262-6902-2005-000000002e00}3264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:06.401{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:06.401{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:07.816{8223a6b9-5267-6902-2105-000000002e00}11800C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:07.823{8223a6b9-5267-6902-2205-000000002e00}9968C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:08.430{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:08.430{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:10.459{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:10.461{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:10.824{8223a6b9-5267-6902-2305-000000002e00}3648C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:12.488{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:12.488{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:12.819{8223a6b9-526c-6902-2405-000000002e00}8408C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:12.824{8223a6b9-526c-6902-2505-000000002e00}5648C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:14.504{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:14.504{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:15.833{8223a6b9-526c-6902-2605-000000002e00}7228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:16.535{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:16.535{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:17.846{8223a6b9-5271-6902-2705-000000002e00}11336C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:17.851{8223a6b9-5271-6902-2805-000000002e00}728C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:18.565{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:18.565{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:20.583{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:20.583{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:20.870{8223a6b9-5271-6902-2905-000000002e00}1008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:22.600{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:22.600{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:22.808{8223a6b9-5276-6902-2a05-000000002e00}2304C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:22.824{8223a6b9-5276-6902-2b05-000000002e00}11272C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000022610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:23.616{8223a6b9-5277-6902-3105-000000002e00}5904C:\Windows\System32\UCPDMgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000022611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:23.626{8223a6b9-5277-6902-3205-000000002e00}1496C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:23.808{8223a6b9-5277-6902-3405-000000002e00}8932C:\Windows\System32\tasklist.exeNT AUTHORITY\SYSTEM +534500x800000000000000022613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:23.814{8223a6b9-5277-6902-3505-000000002e00}3660C:\Windows\System32\findstr.exeNT AUTHORITY\SYSTEM +534500x800000000000000022614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:23.826{8223a6b9-5277-6902-2e05-000000002e00}9436C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000022615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:23.832{8223a6b9-5277-6902-2f05-000000002e00}9556C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:23.908{8223a6b9-5277-6902-3605-000000002e00}3228C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000022617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:24.623{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:24.623{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:25.815{8223a6b9-5276-6902-2c05-000000002e00}8232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:26.641{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:26.641{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:28.017{8223a6b9-527b-6902-3e05-000000002e00}640C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:28.020{8223a6b9-527b-6902-3f05-000000002e00}7732C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:28.653{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:28.653{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:29.005{8223a6b9-5277-6902-3005-000000002e00}7508C:\Windows\System32\provtool.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:30.673{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:30.673{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:31.028{8223a6b9-527b-6902-4005-000000002e00}6404C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:32.011{8223a6b9-527a-6902-3d05-000000002e00}1760C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000022631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:32.692{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:32.695{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:33.047{8223a6b9-5280-6902-4105-000000002e00}1680C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:33.050{8223a6b9-5280-6902-4205-000000002e00}13228C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000022635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:33.877{8223a6b9-5279-6902-3a05-000000002e00}3236C:\Windows\System32\Defrag.exeNT AUTHORITY\SYSTEM +534500x800000000000000022636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:33.877{8223a6b9-527a-6902-3b05-000000002e00}6988C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:34.703{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:34.703{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:36.055{8223a6b9-5280-6902-4305-000000002e00}1140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:36.728{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:36.728{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:37.829{8223a6b9-5285-6902-4405-000000002e00}6604C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:37.835{8223a6b9-5285-6902-4505-000000002e00}7596C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:38.755{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:38.755{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:40.777{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:40.777{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:40.884{8223a6b9-5285-6902-4605-000000002e00}2220C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:42.781{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:42.781{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:42.813{8223a6b9-528a-6902-4705-000000002e00}496C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:42.821{8223a6b9-528a-6902-4805-000000002e00}1032C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:44.801{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:44.801{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:45.835{8223a6b9-528a-6902-4905-000000002e00}8228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:46.821{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:46.821{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:47.801{8223a6b9-528f-6902-4a05-000000002e00}8684C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:47.804{8223a6b9-528f-6902-4b05-000000002e00}11320C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:48.855{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:48.855{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:50.813{8223a6b9-528f-6902-4c05-000000002e00}3268C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:50.862{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:50.862{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:52.812{8223a6b9-5294-6902-4d05-000000002e00}3420C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:52.818{8223a6b9-5294-6902-4e05-000000002e00}9812C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:52.893{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:52.893{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:54.919{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:54.919{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:55.813{8223a6b9-5294-6902-4f05-000000002e00}7500C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:56.944{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:56.944{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:57.798{8223a6b9-5299-6902-5405-000000002e00}7620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:57.801{8223a6b9-5299-6902-5505-000000002e00}4536C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:58.966{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:44:58.966{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:00.802{8223a6b9-5299-6902-5605-000000002e00}1996C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:00.985{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:00.985{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:02.814{8223a6b9-529e-6902-5705-000000002e00}9752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:02.822{8223a6b9-529e-6902-5805-000000002e00}8608C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:03.007{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:03.007{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:03.934{8223a6b9-5277-6902-3705-000000002e00}8948C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +10341000x800000000000000022686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:05.019{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:05.019{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:05.816{8223a6b9-529e-6902-5905-000000002e00}5328C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:07.029{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:07.029{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:07.811{8223a6b9-52a3-6902-5a05-000000002e00}5016C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:07.814{8223a6b9-52a3-6902-5b05-000000002e00}2900C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:09.040{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:09.040{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:10.816{8223a6b9-52a3-6902-5c05-000000002e00}11452C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:11.055{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:11.055{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:12.805{8223a6b9-52a8-6902-5d05-000000002e00}12416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:12.813{8223a6b9-52a8-6902-5e05-000000002e00}8448C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:13.080{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:13.080{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:15.103{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:15.103{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:15.807{8223a6b9-52a8-6902-5f05-000000002e00}3584C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:17.116{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:17.116{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:17.789{8223a6b9-52ad-6902-6005-000000002e00}12088C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:17.791{8223a6b9-52ad-6902-6105-000000002e00}8712C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:19.132{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:19.132{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:20.780{8223a6b9-52ad-6902-6205-000000002e00}3256C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:21.148{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:21.148{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:22.800{8223a6b9-52b2-6902-6305-000000002e00}1840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:22.802{8223a6b9-52b2-6902-6405-000000002e00}6180C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:23.170{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:23.170{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:24.080{8223a6b9-52b4-6902-6805-000000002e00}2528C:\Windows\System32\tasklist.exeNT AUTHORITY\SYSTEM +534500x800000000000000022719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:24.082{8223a6b9-52b4-6902-6905-000000002e00}10764C:\Windows\System32\findstr.exeNT AUTHORITY\SYSTEM +534500x800000000000000022720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:24.088{8223a6b9-52b3-6902-6605-000000002e00}7760C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000022721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:24.090{8223a6b9-52b3-6902-6705-000000002e00}6268C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:24.189{8223a6b9-5132-6902-6504-000000002e00}9820C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +10341000x800000000000000022723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:25.195{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:25.195{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:25.930{8223a6b9-52b2-6902-6505-000000002e00}3676C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:25.935{8223a6b9-5277-6902-3305-000000002e00}7056C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:26.798{8223a6b9-5277-6902-2d05-000000002e00}5980C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:27.226{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:27.226{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:27.817{8223a6b9-52b7-6902-6a05-000000002e00}3876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:27.820{8223a6b9-52b7-6902-6b05-000000002e00}8648C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:29.246{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:29.246{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:30.831{8223a6b9-52b7-6902-6c05-000000002e00}3360C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:31.267{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:31.267{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:32.818{8223a6b9-52bc-6902-6d05-000000002e00}6656C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:32.822{8223a6b9-52bc-6902-6e05-000000002e00}2816C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:33.281{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:33.281{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:35.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:35.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:35.818{8223a6b9-52bc-6902-6f05-000000002e00}13184C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:37.332{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:37.332{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:37.812{8223a6b9-52c1-6902-7005-000000002e00}6256C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:37.825{8223a6b9-52c1-6902-7105-000000002e00}7128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:39.355{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:39.355{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:40.824{8223a6b9-52c1-6902-7205-000000002e00}3772C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:41.381{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:41.381{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:42.826{8223a6b9-52c6-6902-7305-000000002e00}11912C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:42.828{8223a6b9-52c6-6902-7405-000000002e00}8116C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:43.401{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:43.401{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:45.413{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:45.413{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:45.830{8223a6b9-52c6-6902-7505-000000002e00}1136C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:47.426{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:47.426{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:47.872{8223a6b9-52cb-6902-7605-000000002e00}5344C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:47.884{8223a6b9-52cb-6902-7705-000000002e00}5748C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:49.436{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:49.436{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:50.890{8223a6b9-52cb-6902-7805-000000002e00}2140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:51.462{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:51.462{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:52.862{8223a6b9-52d0-6902-7905-000000002e00}5624C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:52.864{8223a6b9-52d0-6902-7a05-000000002e00}3580C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:53.486{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:53.486{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:54.495{8223a6b9-5296-6902-5105-000000002e00}1080C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000022774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:54.499{8223a6b9-5296-6902-5305-000000002e00}7276C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:55.495{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:55.495{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:55.862{8223a6b9-52d0-6902-7b05-000000002e00}12732C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:57.513{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:57.513{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:57.843{8223a6b9-52d5-6902-7e05-000000002e00}5360C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:57.846{8223a6b9-52d5-6902-7f05-000000002e00}6896C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:59.525{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:45:59.525{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:00.837{8223a6b9-52d5-6902-8005-000000002e00}3560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:01.535{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:01.535{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:02.849{8223a6b9-52da-6902-8105-000000002e00}2540C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:02.854{8223a6b9-52da-6902-8205-000000002e00}5472C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:03.548{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:03.548{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:05.566{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:05.566{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:05.852{8223a6b9-52da-6902-8305-000000002e00}2516C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:07.582{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:07.582{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:07.865{8223a6b9-52df-6902-8405-000000002e00}2732C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:07.871{8223a6b9-52df-6902-8505-000000002e00}12892C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:09.599{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:09.599{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:10.888{8223a6b9-52df-6902-8605-000000002e00}10456C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:11.614{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:11.614{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:12.870{8223a6b9-52e4-6902-8705-000000002e00}2396C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:12.872{8223a6b9-52e4-6902-8805-000000002e00}9612C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:13.631{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:13.631{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:15.380{8223a6b9-52d2-6902-7c05-000000002e00}8304C:\Windows\System32\Defrag.exeNT AUTHORITY\SYSTEM +534500x800000000000000022808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:15.380{8223a6b9-52d2-6902-7d05-000000002e00}2064C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:15.652{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:15.652{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:15.874{8223a6b9-52e4-6902-8905-000000002e00}496C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:17.671{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:17.671{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:17.814{8223a6b9-52e9-6902-8a05-000000002e00}5008C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:17.818{8223a6b9-52e9-6902-8b05-000000002e00}4500C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:19.687{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:19.687{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:20.820{8223a6b9-52e9-6902-8c05-000000002e00}5064C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:21.707{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:21.707{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:22.816{8223a6b9-52ee-6902-8d05-000000002e00}4428C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:22.821{8223a6b9-52ee-6902-8e05-000000002e00}12412C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:23.730{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:23.730{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:24.013{8223a6b9-52ef-6902-9105-000000002e00}13208C:\Windows\System32\DeviceCensus.exesoc101win11\Administrator +534500x800000000000000022826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:24.244{8223a6b9-5278-6902-3805-000000002e00}7880C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:25.751{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:25.751{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:25.824{8223a6b9-52ee-6902-8f05-000000002e00}856C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:25.862{8223a6b9-52ef-6902-9005-000000002e00}8236C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:27.764{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:27.764{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:27.830{8223a6b9-52f3-6902-9205-000000002e00}1996C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:27.833{8223a6b9-52f3-6902-9305-000000002e00}4724C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:29.790{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:29.790{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:30.829{8223a6b9-52f3-6902-9405-000000002e00}13200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:31.800{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:31.800{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:32.843{8223a6b9-52f8-6902-9505-000000002e00}8948C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:32.849{8223a6b9-52f8-6902-9605-000000002e00}5332C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:33.834{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:33.834{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:35.847{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:35.847{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:35.847{8223a6b9-52f8-6902-9705-000000002e00}6492C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:37.856{8223a6b9-52fd-6902-9805-000000002e00}11948C:\Windows\System32\netsh.exesoc101win11\Administrator +10341000x800000000000000022848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:37.861{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:37.861{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:37.861{8223a6b9-52fd-6902-9905-000000002e00}1076C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:39.879{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:39.879{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:40.869{8223a6b9-52fd-6902-9a05-000000002e00}12780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:41.893{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:41.893{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:42.886{8223a6b9-5302-6902-9b05-000000002e00}8448C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:42.890{8223a6b9-5302-6902-9c05-000000002e00}8240C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:43.917{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:43.917{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:45.880{8223a6b9-5302-6902-9d05-000000002e00}7784C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:45.943{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:45.943{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:47.838{8223a6b9-5307-6902-9e05-000000002e00}13272C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:47.849{8223a6b9-5307-6902-9f05-000000002e00}5552C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:47.966{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:47.966{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:49.985{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:49.985{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:50.848{8223a6b9-5307-6902-a005-000000002e00}1812C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:51.999{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:51.999{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:53.595{8223a6b9-530c-6902-a105-000000002e00}9576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:53.606{8223a6b9-530d-6902-a205-000000002e00}12096C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:54.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:54.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:56.041{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:56.041{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:56.611{8223a6b9-530d-6902-a305-000000002e00}6180C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:57.794{8223a6b9-5311-6902-a505-000000002e00}2836C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:57.804{8223a6b9-5311-6902-a605-000000002e00}7488C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:58.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:46:58.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:00.088{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:00.088{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:00.796{8223a6b9-5311-6902-a705-000000002e00}7492C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:02.106{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:02.106{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:02.822{8223a6b9-5316-6902-a805-000000002e00}8804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:02.830{8223a6b9-5316-6902-a905-000000002e00}11108C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:04.120{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:04.120{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:05.824{8223a6b9-5316-6902-aa05-000000002e00}3876C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:06.144{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:06.144{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:07.814{8223a6b9-531b-6902-ab05-000000002e00}10428C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:07.819{8223a6b9-531b-6902-ac05-000000002e00}10068C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:08.154{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:08.154{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:10.176{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:10.176{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:10.814{8223a6b9-531b-6902-ad05-000000002e00}2084C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:12.190{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:12.190{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:12.804{8223a6b9-5320-6902-ae05-000000002e00}11660C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:12.811{8223a6b9-5320-6902-af05-000000002e00}7632C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:14.204{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:14.204{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:15.806{8223a6b9-5320-6902-b005-000000002e00}1008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:16.223{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:16.223{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:17.793{8223a6b9-5325-6902-b105-000000002e00}4976C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:17.800{8223a6b9-5325-6902-b205-000000002e00}4792C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:18.249{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:18.249{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:20.264{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:20.264{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:20.805{8223a6b9-5325-6902-b305-000000002e00}2304C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:22.288{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:22.288{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:22.814{8223a6b9-532a-6902-b405-000000002e00}12056C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:22.816{8223a6b9-532a-6902-b505-000000002e00}3660C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000022922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:23.067{8223a6b9-5296-6902-5005-000000002e00}9280C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exeNT AUTHORITY\SYSTEM +534500x800000000000000022923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:23.074{8223a6b9-5296-6902-5205-000000002e00}2504C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:24.296{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:24.296{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:24.819{8223a6b9-532c-6902-b705-000000002e00}608C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000022927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:25.817{8223a6b9-532a-6902-b605-000000002e00}1124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000022928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:26.291{8223a6b9-532d-6902-b905-000000002e00}7316C:\Windows\System32\WinSAT.exeNT AUTHORITY\SYSTEM +534500x800000000000000022929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:26.291{8223a6b9-532d-6902-ba05-000000002e00}1912C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:26.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:26.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:26.311{8223a6b9-532d-6902-b805-000000002e00}1316C:\Windows\System32\rundll32.exeNT AUTHORITY\SYSTEM +534500x800000000000000022933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:27.832{8223a6b9-532f-6902-bb05-000000002e00}9688C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:27.839{8223a6b9-532f-6902-bc05-000000002e00}7788C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:28.331{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:28.331{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:30.351{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:30.351{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:30.829{8223a6b9-532f-6902-bd05-000000002e00}10436C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:32.371{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:32.371{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:32.785{8223a6b9-5334-6902-bf05-000000002e00}6912C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:32.797{8223a6b9-5334-6902-c005-000000002e00}280C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:34.392{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:34.392{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:35.793{8223a6b9-5334-6902-c105-000000002e00}7092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:36.414{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:36.414{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:37.830{8223a6b9-5339-6902-c205-000000002e00}2668C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:37.837{8223a6b9-5339-6902-c305-000000002e00}9344C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:38.434{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:38.434{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:40.452{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:40.452{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:40.837{8223a6b9-5339-6902-c405-000000002e00}7008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:42.473{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:42.473{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:42.842{8223a6b9-533e-6902-c505-000000002e00}10292C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:42.854{8223a6b9-533e-6902-c605-000000002e00}1660C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:44.493{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:44.493{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:45.858{8223a6b9-533e-6902-c705-000000002e00}11816C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:46.515{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:46.515{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:47.794{8223a6b9-5343-6902-c805-000000002e00}8540C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:47.800{8223a6b9-5343-6902-c905-000000002e00}5024C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:48.533{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:48.533{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:50.551{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:50.551{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:50.794{8223a6b9-5343-6902-ca05-000000002e00}2240C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:52.572{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:52.572{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:52.810{8223a6b9-5348-6902-cb05-000000002e00}2064C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:52.813{8223a6b9-5348-6902-cc05-000000002e00}4784C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000022976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:53.447{8223a6b9-5349-6902-cf05-000000002e00}12484C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000022977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:53.483{8223a6b9-5349-6902-ce05-000000002e00}3272C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +10341000x800000000000000022978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:54.594{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:54.594{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:55.808{8223a6b9-5348-6902-cd05-000000002e00}11208C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:56.614{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:56.614{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:57.800{8223a6b9-534d-6902-d005-000000002e00}13208C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:57.804{8223a6b9-534d-6902-d105-000000002e00}2852C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:58.633{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:47:58.633{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:00.655{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:00.655{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:00.798{8223a6b9-534d-6902-d205-000000002e00}12128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:02.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:02.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:02.799{8223a6b9-5352-6902-d305-000000002e00}1928C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000022993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:02.803{8223a6b9-5352-6902-d405-000000002e00}8236C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000022994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:04.698{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:04.698{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:05.799{8223a6b9-5352-6902-d505-000000002e00}9396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000022997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:06.720{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000022998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:06.720{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000022999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:07.794{8223a6b9-5357-6902-d605-000000002e00}13200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:07.798{8223a6b9-5357-6902-d705-000000002e00}3512C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:08.740{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:08.740{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:10.760{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:10.760{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:10.795{8223a6b9-5357-6902-d805-000000002e00}11132C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:12.778{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:12.778{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:12.810{8223a6b9-535c-6902-d905-000000002e00}11916C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:12.815{8223a6b9-535c-6902-da05-000000002e00}5052C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:14.797{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:14.797{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:15.823{8223a6b9-535c-6902-db05-000000002e00}6076C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:16.816{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:16.816{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:17.844{8223a6b9-5361-6902-dc05-000000002e00}4896C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:17.850{8223a6b9-5361-6902-dd05-000000002e00}7400C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:18.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:18.837{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:20.845{8223a6b9-5361-6902-de05-000000002e00}3584C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:20.858{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:20.858{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:22.815{8223a6b9-5366-6902-df05-000000002e00}12140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:22.822{8223a6b9-5366-6902-e005-000000002e00}7472C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:22.878{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:22.878{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:24.898{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:24.898{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:25.821{8223a6b9-5366-6902-e105-000000002e00}12276C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:26.919{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:26.919{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:27.797{8223a6b9-536b-6902-e205-000000002e00}1720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:27.808{8223a6b9-536b-6902-e305-000000002e00}10748C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:28.939{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:28.939{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:30.502{8223a6b9-5330-6902-be05-000000002e00}8664C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:30.802{8223a6b9-536b-6902-e405-000000002e00}2936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:30.961{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:30.961{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:31.779{8223a6b9-536f-6902-e605-000000002e00}7108C:\Windows\System32\SrTasks.exeNT AUTHORITY\SYSTEM +534500x800000000000000023040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:31.795{8223a6b9-536f-6902-e705-000000002e00}6268C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:32.809{8223a6b9-5370-6902-ea05-000000002e00}3392C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:32.814{8223a6b9-5370-6902-eb05-000000002e00}4352C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:32.984{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:32.984{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:33.124{8223a6b9-5370-6902-ee05-000000002e00}7924C:\Windows\System32\WinSAT.exeNT AUTHORITY\SYSTEM +534500x800000000000000023046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:33.127{8223a6b9-5370-6902-ef05-000000002e00}504C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:33.148{8223a6b9-5370-6902-ed05-000000002e00}6944C:\Windows\System32\rundll32.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:34.998{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:34.998{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:35.821{8223a6b9-5370-6902-ec05-000000002e00}5956C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:37.025{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:37.025{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:37.798{8223a6b9-5375-6902-f005-000000002e00}12756C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:37.809{8223a6b9-5375-6902-f105-000000002e00}12112C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:39.050{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:39.050{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:40.824{8223a6b9-5375-6902-f205-000000002e00}2472C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:41.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:41.067{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:42.821{8223a6b9-537a-6902-f305-000000002e00}6396C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:42.829{8223a6b9-537a-6902-f405-000000002e00}11656C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:43.091{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:43.091{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:45.119{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:45.119{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:45.841{8223a6b9-537a-6902-f505-000000002e00}7264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:47.149{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:47.149{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:47.788{8223a6b9-537f-6902-f605-000000002e00}1136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:47.800{8223a6b9-537f-6902-f705-000000002e00}10168C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:49.172{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:49.172{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:50.815{8223a6b9-537f-6902-f805-000000002e00}2020C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:51.204{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:51.204{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:52.869{8223a6b9-5384-6902-f905-000000002e00}608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:52.880{8223a6b9-5384-6902-fa05-000000002e00}7196C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:53.235{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:53.235{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:55.267{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:55.267{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:55.892{8223a6b9-5384-6902-fb05-000000002e00}10396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:57.297{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:57.297{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:57.808{8223a6b9-5389-6902-fc05-000000002e00}12308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:57.813{8223a6b9-5389-6902-fd05-000000002e00}10588C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:59.323{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:48:59.323{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:00.581{8223a6b9-5310-6902-a405-000000002e00}2720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:00.821{8223a6b9-5389-6902-fe05-000000002e00}10012C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:01.351{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:01.351{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:02.835{8223a6b9-538e-6902-ff05-000000002e00}3456C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:02.841{8223a6b9-538e-6902-0006-000000002e00}5784C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:03.379{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:03.379{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:05.409{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:05.409{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:05.859{8223a6b9-538e-6902-0106-000000002e00}11336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:07.426{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:07.426{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:07.828{8223a6b9-5393-6902-0306-000000002e00}11576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:07.833{8223a6b9-5393-6902-0406-000000002e00}2540C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:09.450{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:09.450{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:10.850{8223a6b9-5393-6902-0506-000000002e00}9316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:11.482{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:11.482{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:12.851{8223a6b9-5398-6902-0606-000000002e00}7136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:12.855{8223a6b9-5398-6902-0706-000000002e00}11460C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:13.513{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:13.513{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:15.529{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:15.529{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:15.866{8223a6b9-5398-6902-0806-000000002e00}6744C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:17.543{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:17.543{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:17.829{8223a6b9-539d-6902-0906-000000002e00}10972C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:17.837{8223a6b9-539d-6902-0a06-000000002e00}9856C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:19.554{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:19.554{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:20.182{8223a6b9-53a0-6902-0d06-000000002e00}6280C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000023123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:20.292{8223a6b9-53a0-6902-0f06-000000002e00}2588C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000023124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:20.387{8223a6b9-527a-6902-3c05-000000002e00}7636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:20.842{8223a6b9-539d-6902-0b06-000000002e00}6024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:21.207{8223a6b9-539f-6902-0c06-000000002e00}4784C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:21.568{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:21.568{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:22.818{8223a6b9-53a2-6902-1006-000000002e00}2300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:22.829{8223a6b9-53a2-6902-1106-000000002e00}2556C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:23.592{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:23.592{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:24.433{8223a6b9-53a4-6902-1806-000000002e00}2180C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000023134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:24.631{8223a6b9-53a4-6902-1906-000000002e00}1796C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:25.610{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:25.610{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:25.819{8223a6b9-53a2-6902-1206-000000002e00}7176C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:27.637{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:27.637{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:27.859{8223a6b9-53a7-6902-1a06-000000002e00}8152C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:27.862{8223a6b9-53a7-6902-1b06-000000002e00}1724C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:29.656{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:29.656{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:30.626{8223a6b9-53a9-6902-1f06-000000002e00}11916C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:30.863{8223a6b9-53a7-6902-1c06-000000002e00}5072C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:31.672{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:31.672{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:32.880{8223a6b9-53ac-6902-2106-000000002e00}9780C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:32.896{8223a6b9-53ac-6902-2206-000000002e00}4896C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:33.690{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:33.690{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:35.709{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:35.709{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:35.889{8223a6b9-53ac-6902-2306-000000002e00}7780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:37.541{8223a6b9-53aa-6902-2006-000000002e00}6076C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:37.729{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:37.729{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:37.810{8223a6b9-53b1-6902-2506-000000002e00}984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:37.824{8223a6b9-53b1-6902-2606-000000002e00}4876C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:37.825{8223a6b9-53b1-6902-2406-000000002e00}13272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:39.752{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:39.752{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:40.824{8223a6b9-53b1-6902-2706-000000002e00}10176C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:41.558{8223a6b9-53b1-6902-2806-000000002e00}6408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:41.774{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:41.774{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:42.437{8223a6b9-53b5-6902-2906-000000002e00}5004C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:42.844{8223a6b9-53b6-6902-2b06-000000002e00}8264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:42.848{8223a6b9-53b6-6902-2c06-000000002e00}10216C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:43.792{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:43.792{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:45.816{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:45.816{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:45.855{8223a6b9-53b6-6902-2d06-000000002e00}7744C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:46.376{8223a6b9-53b6-6902-2a06-000000002e00}11800C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:47.824{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:47.824{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:47.882{8223a6b9-53bb-6902-2f06-000000002e00}7332C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:47.887{8223a6b9-53bb-6902-3006-000000002e00}10428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:48.127{8223a6b9-53ba-6902-2e06-000000002e00}8252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:49.847{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:49.847{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:50.882{8223a6b9-53bb-6902-3106-000000002e00}7772C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:51.101{8223a6b9-53bc-6902-3206-000000002e00}9592C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:51.662{8223a6b9-53bf-6902-3306-000000002e00}13184C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:51.869{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:51.869{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:52.831{8223a6b9-53c0-6902-3506-000000002e00}12416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:52.835{8223a6b9-53c0-6902-3606-000000002e00}8436C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:53.888{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:53.888{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:55.884{8223a6b9-53c0-6902-3706-000000002e00}5880C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:55.900{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:55.900{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:56.528{8223a6b9-53bf-6902-3406-000000002e00}1240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:57.873{8223a6b9-53c5-6902-3906-000000002e00}4044C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:57.883{8223a6b9-53c5-6902-3a06-000000002e00}7264C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:57.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:57.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:59.939{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:49:59.939{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:00.212{8223a6b9-53a0-6902-0e06-000000002e00}10976C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000023203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:00.901{8223a6b9-53c5-6902-3b06-000000002e00}1332C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:01.332{8223a6b9-53c4-6902-3806-000000002e00}5884C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:01.961{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:01.961{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:02.887{8223a6b9-53ca-6902-3d06-000000002e00}640C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:02.895{8223a6b9-53ca-6902-3e06-000000002e00}1912C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:03.978{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:03.978{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:04.215{8223a6b9-53cc-6902-4006-000000002e00}13256C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000023212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:04.650{8223a6b9-53c9-6902-3c06-000000002e00}10728C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:04.752{8223a6b9-53cc-6902-4406-000000002e00}10012C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:05.666{8223a6b9-53cc-6902-4506-000000002e00}2504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:05.772{8223a6b9-53cd-6902-4606-000000002e00}2796C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:05.900{8223a6b9-53ca-6902-3f06-000000002e00}12732C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:05.989{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:05.989{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:06.355{8223a6b9-53cd-6902-4706-000000002e00}3092C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:07.058{8223a6b9-53ce-6902-4806-000000002e00}10380C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:07.873{8223a6b9-53cf-6902-4a06-000000002e00}7092C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:07.878{8223a6b9-53cf-6902-4b06-000000002e00}11576C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:08.004{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:08.004{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:09.997{8223a6b9-53cf-6902-4906-000000002e00}7244C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:10.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:10.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:10.303{8223a6b9-53d1-6902-4d06-000000002e00}2516C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:10.867{8223a6b9-53cf-6902-4c06-000000002e00}12384C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:12.048{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:12.048{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:12.827{8223a6b9-53d4-6902-5106-000000002e00}2484C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:12.831{8223a6b9-53d4-6902-5206-000000002e00}6280C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:13.111{8223a6b9-53d2-6902-4e06-000000002e00}12132C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:13.770{8223a6b9-53d5-6902-5406-000000002e00}5584C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:14.068{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:14.068{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:14.640{8223a6b9-53d5-6902-5506-000000002e00}4816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:14.761{8223a6b9-53d6-6902-5606-000000002e00}3216C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:15.532{8223a6b9-53d6-6902-5706-000000002e00}3064C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:15.644{8223a6b9-53d7-6902-5806-000000002e00}8200C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:15.842{8223a6b9-53d4-6902-5306-000000002e00}7564C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:16.076{8223a6b9-53d7-6902-5906-000000002e00}1044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:16.088{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:16.088{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:16.182{8223a6b9-53d8-6902-5a06-000000002e00}8152C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:16.565{8223a6b9-53d8-6902-5b06-000000002e00}2428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:16.831{8223a6b9-53d8-6902-5c06-000000002e00}3104C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:17.201{8223a6b9-53d8-6902-5d06-000000002e00}6332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:17.850{8223a6b9-53d9-6902-5f06-000000002e00}11456C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:17.854{8223a6b9-53d9-6902-6006-000000002e00}6780C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:17.860{8223a6b9-53d9-6902-5e06-000000002e00}11732C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:18.111{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:18.111{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:20.125{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:20.125{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:20.843{8223a6b9-53d9-6902-6106-000000002e00}10064C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:22.139{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:22.139{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:22.260{8223a6b9-53cc-6902-4106-000000002e00}7788C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:22.885{8223a6b9-53de-6902-6306-000000002e00}12088C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:22.889{8223a6b9-53de-6902-6406-000000002e00}12140C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:24.158{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:24.158{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:24.526{8223a6b9-53d9-6902-6206-000000002e00}9796C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:24.686{8223a6b9-53e0-6902-6606-000000002e00}11668C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:25.879{8223a6b9-53de-6902-6506-000000002e00}10188C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:26.182{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:26.182{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:27.858{8223a6b9-53e3-6902-6806-000000002e00}12720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:27.862{8223a6b9-53e3-6902-6906-000000002e00}8388C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:28.204{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:28.204{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:28.584{8223a6b9-53e0-6902-6706-000000002e00}7512C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:28.682{8223a6b9-53e4-6902-6b06-000000002e00}9820C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:29.198{8223a6b9-53e4-6902-6c06-000000002e00}11424C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:29.273{8223a6b9-53e5-6902-6d06-000000002e00}7540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:29.790{8223a6b9-53e5-6902-6e06-000000002e00}8932C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:30.230{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:30.230{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:30.303{8223a6b9-53e5-6902-6f06-000000002e00}1476C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:30.851{8223a6b9-53e3-6902-6a06-000000002e00}3384C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:31.022{8223a6b9-53e6-6902-7006-000000002e00}5636C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:31.112{8223a6b9-53e7-6902-7106-000000002e00}13296C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:31.186{8223a6b9-53e7-6902-7206-000000002e00}11076C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:31.942{8223a6b9-53e7-6902-7306-000000002e00}5288C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:32.251{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:32.251{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:32.315{8223a6b9-53e7-6902-7406-000000002e00}6140C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:32.759{8223a6b9-53e8-6902-7506-000000002e00}2892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:32.841{8223a6b9-53e8-6902-7606-000000002e00}3772C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:32.845{8223a6b9-53e8-6902-7706-000000002e00}13124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:32.905{8223a6b9-53e8-6902-7806-000000002e00}11676C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:34.135{8223a6b9-53e8-6902-7a06-000000002e00}8408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:34.263{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:34.263{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:35.095{8223a6b9-53ea-6902-7b06-000000002e00}9172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:35.238{8223a6b9-53eb-6902-7c06-000000002e00}156C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:35.414{8223a6b9-53eb-6902-7d06-000000002e00}608C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:35.603{8223a6b9-53eb-6902-7e06-000000002e00}10108C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:35.770{8223a6b9-53eb-6902-7f06-000000002e00}144C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:35.847{8223a6b9-53e8-6902-7906-000000002e00}7264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:35.937{8223a6b9-53eb-6902-8006-000000002e00}6772C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:36.111{8223a6b9-53eb-6902-8106-000000002e00}6572C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:36.273{8223a6b9-53ec-6902-8206-000000002e00}3456C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:36.286{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:36.286{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:36.446{8223a6b9-53ec-6902-8306-000000002e00}10780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:36.604{8223a6b9-53ec-6902-8406-000000002e00}11464C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:36.770{8223a6b9-53ec-6902-8506-000000002e00}9792C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:36.910{8223a6b9-53ec-6902-8606-000000002e00}2896C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.069{8223a6b9-53ec-6902-8706-000000002e00}2540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.231{8223a6b9-53ed-6902-8806-000000002e00}3612C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.400{8223a6b9-53ed-6902-8906-000000002e00}9620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.543{8223a6b9-53ed-6902-8a06-000000002e00}13128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.723{8223a6b9-53ed-6902-8b06-000000002e00}2516C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.836{8223a6b9-53ed-6902-8c06-000000002e00}3480C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.839{8223a6b9-53ed-6902-8d06-000000002e00}12384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.899{8223a6b9-53ed-6902-8e06-000000002e00}1212C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:37.988{8223a6b9-53ed-6902-9006-000000002e00}6280C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:38.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:38.307{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:38.625{8223a6b9-53ed-6902-9106-000000002e00}12132C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:39.902{8223a6b9-53ee-6902-9206-000000002e00}1336C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:40.328{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:40.328{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:40.838{8223a6b9-53ed-6902-8f06-000000002e00}6856C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:41.094{8223a6b9-53ef-6902-9306-000000002e00}8504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:41.205{8223a6b9-53f1-6902-9406-000000002e00}9816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:42.326{8223a6b9-53f1-6902-9506-000000002e00}7732C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:42.353{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:42.353{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:42.592{8223a6b9-53f2-6902-9606-000000002e00}7120C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:42.857{8223a6b9-53f2-6902-9806-000000002e00}12180C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:42.860{8223a6b9-53f2-6902-9906-000000002e00}5608C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:44.374{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:44.374{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:44.824{8223a6b9-53f2-6902-9706-000000002e00}5596C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:44.952{8223a6b9-53f4-6902-9b06-000000002e00}3104C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:45.803{8223a6b9-3e08-6902-8203-000000002e00}9372C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:45.863{8223a6b9-53f2-6902-9a06-000000002e00}4356C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:46.069{8223a6b9-53f4-6902-9c06-000000002e00}4896C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:46.383{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:46.383{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:46.430{8223a6b9-53f6-6902-9d06-000000002e00}9852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:47.544{8223a6b9-53f6-6902-9e06-000000002e00}12068C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:47.608{8223a6b9-53f7-6902-9f06-000000002e00}9400C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:47.713{8223a6b9-53f7-6902-a006-000000002e00}12484C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:47.816{8223a6b9-53f7-6902-a306-000000002e00}3556C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:47.838{8223a6b9-53f7-6902-a106-000000002e00}7788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:47.841{8223a6b9-53f7-6902-a206-000000002e00}10936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:48.153{8223a6b9-53f7-6902-a506-000000002e00}4876C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:48.243{8223a6b9-53f8-6902-a606-000000002e00}12032C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:48.408{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:48.408{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:48.850{8223a6b9-53f8-6902-a706-000000002e00}9296C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:49.099{8223a6b9-53f8-6902-a806-000000002e00}6000C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:49.553{8223a6b9-53f9-6902-a906-000000002e00}4324C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:50.431{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:50.431{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:50.844{8223a6b9-53f7-6902-a406-000000002e00}8368C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:51.231{8223a6b9-53f9-6902-aa06-000000002e00}1904C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:51.558{8223a6b9-53fb-6902-ab06-000000002e00}4592C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:51.671{8223a6b9-53fb-6902-ac06-000000002e00}1300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:52.454{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:52.454{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:52.862{8223a6b9-53fc-6902-ae06-000000002e00}8264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:52.867{8223a6b9-53fc-6902-af06-000000002e00}636C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:53.105{8223a6b9-53fb-6902-ad06-000000002e00}13216C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:53.168{8223a6b9-53fd-6902-b106-000000002e00}12756C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:53.279{8223a6b9-53fd-6902-b206-000000002e00}10040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:53.441{8223a6b9-53fd-6902-b306-000000002e00}9744C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:54.472{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:54.472{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:55.445{8223a6b9-53fd-6902-b406-000000002e00}6792C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:55.602{8223a6b9-53ff-6902-b506-000000002e00}6872C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:55.697{8223a6b9-53ff-6902-b606-000000002e00}3172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:55.842{8223a6b9-53ff-6902-b706-000000002e00}3272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:55.864{8223a6b9-53fc-6902-b006-000000002e00}12112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:55.982{8223a6b9-53ff-6902-b806-000000002e00}12764C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:56.266{8223a6b9-53ff-6902-b906-000000002e00}12040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:56.491{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:56.491{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:56.767{8223a6b9-5400-6902-ba06-000000002e00}9172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:57.079{8223a6b9-5400-6902-bb06-000000002e00}156C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:57.296{8223a6b9-5401-6902-bc06-000000002e00}608C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:57.543{8223a6b9-5401-6902-bd06-000000002e00}10108C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:57.851{8223a6b9-5401-6902-bf06-000000002e00}3660C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:57.856{8223a6b9-5401-6902-c006-000000002e00}500C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:58.048{8223a6b9-5401-6902-be06-000000002e00}144C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:58.064{8223a6b9-53a9-6902-1d06-000000002e00}8208C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000023392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:58.143{8223a6b9-5402-6902-c206-000000002e00}5784C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000023393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:58.152{8223a6b9-53a4-6902-1406-000000002e00}8292C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000023394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:58.156{8223a6b9-53a4-6902-1606-000000002e00}1996C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:58.508{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:50:58.508{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:00.128{8223a6b9-5402-6902-c306-000000002e00}1376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:00.526{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:00.526{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:00.862{8223a6b9-5401-6902-c106-000000002e00}8148C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:02.481{8223a6b9-5404-6902-c406-000000002e00}1748C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:02.543{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:02.543{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:02.828{8223a6b9-5406-6902-c606-000000002e00}11576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:02.840{8223a6b9-5406-6902-c706-000000002e00}5080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:02.943{8223a6b9-5406-6902-c506-000000002e00}10956C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:04.563{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:04.563{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:05.839{8223a6b9-5406-6902-c806-000000002e00}10296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:06.583{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:06.583{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:06.585{8223a6b9-5406-6902-c906-000000002e00}7244C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:07.128{8223a6b9-540a-6902-ca06-000000002e00}7352C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:07.784{8223a6b9-540b-6902-cb06-000000002e00}5852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:07.852{8223a6b9-540b-6902-cc06-000000002e00}4660C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:07.856{8223a6b9-540b-6902-cd06-000000002e00}2040C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:07.969{8223a6b9-540b-6902-ce06-000000002e00}6536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:08.608{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:08.608{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:10.633{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:10.633{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:10.872{8223a6b9-540b-6902-cf06-000000002e00}12824C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:12.162{8223a6b9-53d3-6902-5006-000000002e00}11816C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:12.486{8223a6b9-540b-6902-d006-000000002e00}9812C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:12.643{8223a6b9-5410-6902-d106-000000002e00}10692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:12.644{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:12.644{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:12.819{8223a6b9-5410-6902-d306-000000002e00}164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:12.826{8223a6b9-5410-6902-d406-000000002e00}13248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:13.664{8223a6b9-53d3-6902-4f06-000000002e00}11328C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:14.664{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:14.664{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:15.667{8223a6b9-5410-6902-d206-000000002e00}9876C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:15.824{8223a6b9-5410-6902-d506-000000002e00}8152C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:15.901{8223a6b9-5413-6902-d606-000000002e00}8088C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:16.684{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:16.684{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:17.808{8223a6b9-5415-6902-d806-000000002e00}10104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:17.814{8223a6b9-5415-6902-d906-000000002e00}5692C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:18.706{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:18.706{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:19.159{8223a6b9-5413-6902-d706-000000002e00}9780C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:19.437{8223a6b9-5417-6902-db06-000000002e00}2096C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:20.307{8223a6b9-538f-6902-0206-000000002e00}12852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:20.722{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:20.722{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:20.802{8223a6b9-5415-6902-da06-000000002e00}6780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:21.473{8223a6b9-5417-6902-dc06-000000002e00}8300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:21.672{8223a6b9-5419-6902-dd06-000000002e00}2592C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:22.742{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:22.742{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:22.817{8223a6b9-541a-6902-df06-000000002e00}13152C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:22.825{8223a6b9-541a-6902-e006-000000002e00}12276C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:24.765{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:24.765{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:25.507{8223a6b9-5419-6902-de06-000000002e00}6904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:25.814{8223a6b9-541a-6902-e106-000000002e00}8712C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:26.068{8223a6b9-541d-6902-e206-000000002e00}4876C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:26.784{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:26.784{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:27.818{8223a6b9-541f-6902-e406-000000002e00}12064C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:27.824{8223a6b9-541f-6902-e506-000000002e00}8664C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:28.561{8223a6b9-541e-6902-e306-000000002e00}12720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:28.800{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:28.800{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:29.251{8223a6b9-5420-6902-e706-000000002e00}8376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:30.821{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:30.821{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:30.821{8223a6b9-541f-6902-e606-000000002e00}6412C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:31.827{8223a6b9-536f-6902-e805-000000002e00}12028C:\Windows\System32\VSSVC.exeNT AUTHORITY\SYSTEM +534500x800000000000000023471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:32.655{8223a6b9-5421-6902-e806-000000002e00}2980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:32.792{8223a6b9-5424-6902-e906-000000002e00}2916C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:32.798{8223a6b9-5424-6902-ea06-000000002e00}3292C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:32.844{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:32.844{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:33.034{8223a6b9-5424-6902-eb06-000000002e00}1904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:34.865{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:34.865{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:35.265{8223a6b9-5425-6902-ed06-000000002e00}1180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:35.807{8223a6b9-5424-6902-ec06-000000002e00}3648C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:35.864{8223a6b9-5427-6902-ee06-000000002e00}11276C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:36.889{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:36.889{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:37.063{8223a6b9-5427-6902-ef06-000000002e00}6944C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:37.837{8223a6b9-5429-6902-f106-000000002e00}2164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:37.840{8223a6b9-5429-6902-f206-000000002e00}2472C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:37.874{8223a6b9-5429-6902-f006-000000002e00}12096C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:38.425{8223a6b9-5429-6902-f406-000000002e00}12892C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:38.907{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:38.907{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:39.539{8223a6b9-542a-6902-f506-000000002e00}8384C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:40.640{8223a6b9-542b-6902-f606-000000002e00}6872C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:40.831{8223a6b9-5429-6902-f306-000000002e00}6120C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:40.926{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:40.926{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:42.212{8223a6b9-542c-6902-f706-000000002e00}9604C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:42.797{8223a6b9-542e-6902-f906-000000002e00}8424C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:42.800{8223a6b9-542e-6902-fa06-000000002e00}7196C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:42.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:42.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:44.961{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:44.961{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:45.810{8223a6b9-542e-6902-fb06-000000002e00}648C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:46.247{8223a6b9-542e-6902-f806-000000002e00}5788C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:46.392{8223a6b9-5432-6902-fc06-000000002e00}12460C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:46.870{8223a6b9-5432-6902-fd06-000000002e00}8884C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:46.981{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:46.981{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:47.055{8223a6b9-5432-6902-fe06-000000002e00}8548C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:47.808{8223a6b9-5433-6902-0007-000000002e00}10432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:47.811{8223a6b9-5433-6902-0107-000000002e00}9732C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:47.952{8223a6b9-5433-6902-ff06-000000002e00}8740C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:49.002{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:49.002{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:49.018{8223a6b9-5433-6902-0307-000000002e00}3092C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:50.230{8223a6b9-5435-6902-0407-000000002e00}9940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:50.391{8223a6b9-5436-6902-0507-000000002e00}9056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:50.811{8223a6b9-5433-6902-0207-000000002e00}6532C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:51.027{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:51.027{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:51.035{8223a6b9-5436-6902-0607-000000002e00}10712C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:52.188{8223a6b9-5437-6902-0707-000000002e00}8996C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:52.827{8223a6b9-5438-6902-0907-000000002e00}2852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:52.829{8223a6b9-5438-6902-0a07-000000002e00}2944C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:53.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:53.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:53.397{8223a6b9-5438-6902-0807-000000002e00}4792C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:53.576{8223a6b9-5439-6902-0c07-000000002e00}5752C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:54.815{8223a6b9-5439-6902-0d07-000000002e00}7636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:54.917{8223a6b9-543a-6902-0e07-000000002e00}6280C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:55.070{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:55.070{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:55.500{8223a6b9-543a-6902-0f07-000000002e00}728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:55.579{8223a6b9-543b-6902-1007-000000002e00}1896C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:55.833{8223a6b9-5438-6902-0b07-000000002e00}9564C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:55.993{8223a6b9-543b-6902-1107-000000002e00}2760C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:56.199{8223a6b9-543b-6902-1207-000000002e00}7940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:56.599{8223a6b9-543c-6902-1307-000000002e00}968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:57.074{8223a6b9-543c-6902-1407-000000002e00}11048C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:57.089{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:57.089{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:57.810{8223a6b9-543d-6902-1607-000000002e00}7032C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:57.815{8223a6b9-543d-6902-1707-000000002e00}13248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:58.409{8223a6b9-543d-6902-1507-000000002e00}7148C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:58.539{8223a6b9-543e-6902-1907-000000002e00}7564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:59.110{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:59.110{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:51:59.573{8223a6b9-543e-6902-1a07-000000002e00}8196C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:00.009{8223a6b9-543f-6902-1b07-000000002e00}784C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:00.782{8223a6b9-5440-6902-1c07-000000002e00}11452C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:00.823{8223a6b9-543d-6902-1807-000000002e00}12924C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:00.881{8223a6b9-5440-6902-1d07-000000002e00}4896C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:01.120{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:01.120{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:01.270{8223a6b9-5440-6902-1e07-000000002e00}9720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:02.245{8223a6b9-5441-6902-1f07-000000002e00}9780C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:02.589{8223a6b9-5442-6902-2007-000000002e00}6812C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:02.696{8223a6b9-5442-6902-2107-000000002e00}13228C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:02.809{8223a6b9-5442-6902-2207-000000002e00}11140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:02.811{8223a6b9-5442-6902-2307-000000002e00}12056C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:03.138{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:03.138{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:03.884{8223a6b9-5442-6902-2407-000000002e00}2536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:04.075{8223a6b9-5443-6902-2607-000000002e00}10504C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:05.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:05.155{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:05.813{8223a6b9-5442-6902-2507-000000002e00}5316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:05.966{8223a6b9-5444-6902-2707-000000002e00}12940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:06.077{8223a6b9-5445-6902-2807-000000002e00}2696C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:07.172{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:07.172{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:07.855{8223a6b9-5447-6902-2a07-000000002e00}6432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:07.859{8223a6b9-5447-6902-2b07-000000002e00}10148C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:07.956{8223a6b9-5446-6902-2907-000000002e00}8712C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:08.103{8223a6b9-5447-6902-2d07-000000002e00}5776C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:08.729{8223a6b9-5448-6902-2e07-000000002e00}3852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:08.871{8223a6b9-5448-6902-2f07-000000002e00}9900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:09.188{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:09.188{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:09.511{8223a6b9-5448-6902-3007-000000002e00}11080C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:09.629{8223a6b9-5449-6902-3107-000000002e00}6788C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:09.968{8223a6b9-5449-6902-3207-000000002e00}4740C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:10.069{8223a6b9-5449-6902-3307-000000002e00}9304C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:10.367{8223a6b9-544a-6902-3407-000000002e00}3224C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:10.780{8223a6b9-544a-6902-3507-000000002e00}8576C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:10.875{8223a6b9-5447-6902-2c07-000000002e00}6000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:11.210{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:11.210{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:11.258{8223a6b9-544a-6902-3607-000000002e00}8636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:11.373{8223a6b9-544b-6902-3707-000000002e00}1008C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:11.610{8223a6b9-544b-6902-3807-000000002e00}9968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:11.719{8223a6b9-544b-6902-3907-000000002e00}5968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:11.911{8223a6b9-53cc-6902-4306-000000002e00}9236C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000023594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:11.921{8223a6b9-53cc-6902-4206-000000002e00}1584C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000023595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:12.839{8223a6b9-544c-6902-3b07-000000002e00}5332C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:12.844{8223a6b9-544c-6902-3c07-000000002e00}6740C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:13.235{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:13.235{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:15.256{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:15.256{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:15.852{8223a6b9-544c-6902-3d07-000000002e00}6112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:16.274{8223a6b9-544b-6902-3a07-000000002e00}12892C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:16.466{8223a6b9-5450-6902-3e07-000000002e00}10096C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:17.282{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:17.282{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:17.836{8223a6b9-5451-6902-4007-000000002e00}2092C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:17.842{8223a6b9-5451-6902-4107-000000002e00}7860C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:19.299{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:19.299{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:19.442{8223a6b9-5450-6902-3f07-000000002e00}9676C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:19.537{8223a6b9-5453-6902-4307-000000002e00}6636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:19.986{8223a6b9-5453-6902-4407-000000002e00}10108C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:20.096{8223a6b9-5453-6902-4507-000000002e00}10012C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:20.493{8223a6b9-5454-6902-4607-000000002e00}3456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:20.650{8223a6b9-5454-6902-4707-000000002e00}10432C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:20.845{8223a6b9-5451-6902-4207-000000002e00}10776C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:21.165{8223a6b9-5454-6902-4807-000000002e00}8112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:21.280{8223a6b9-5455-6902-4907-000000002e00}13016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:21.319{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:21.319{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:21.359{8223a6b9-5455-6902-4a07-000000002e00}2284C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:21.781{8223a6b9-5455-6902-4b07-000000002e00}12724C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:21.918{8223a6b9-5455-6902-4c07-000000002e00}7316C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:22.055{8223a6b9-5455-6902-4f07-000000002e00}3264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:22.057{8223a6b9-5455-6902-4e07-000000002e00}1620C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000023626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:22.211{8223a6b9-5455-6902-4d07-000000002e00}1244C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:22.622{8223a6b9-5456-6902-5107-000000002e00}13116C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:22.822{8223a6b9-5456-6902-5307-000000002e00}5588C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:22.825{8223a6b9-5456-6902-5407-000000002e00}2704C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:23.059{8223a6b9-5456-6902-5207-000000002e00}6252C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:23.243{8223a6b9-5457-6902-5607-000000002e00}3248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:23.337{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:23.337{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:23.480{8223a6b9-5457-6902-5707-000000002e00}12640C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:23.670{8223a6b9-5457-6902-5807-000000002e00}5716C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:24.003{8223a6b9-5457-6902-5907-000000002e00}7816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:24.181{8223a6b9-5458-6902-5a07-000000002e00}8128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:24.457{8223a6b9-5458-6902-5b07-000000002e00}10812C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:24.548{8223a6b9-5458-6902-5c07-000000002e00}6308C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:24.657{8223a6b9-5458-6902-5d07-000000002e00}12380C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:24.769{8223a6b9-5458-6902-5e07-000000002e00}8240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:25.184{8223a6b9-5458-6902-5f07-000000002e00}3604C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:25.360{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:25.360{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:25.375{8223a6b9-5459-6902-6007-000000002e00}5956C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:25.821{8223a6b9-5456-6902-5507-000000002e00}980C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:25.885{8223a6b9-5459-6902-6107-000000002e00}496C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:26.059{8223a6b9-5459-6902-6207-000000002e00}11456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:26.364{8223a6b9-545a-6902-6307-000000002e00}9720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:26.490{8223a6b9-545a-6902-6407-000000002e00}4180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:26.856{8223a6b9-545a-6902-6507-000000002e00}6988C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:26.984{8223a6b9-545a-6902-6607-000000002e00}3560C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:27.246{8223a6b9-545a-6902-6707-000000002e00}3268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:27.380{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:27.380{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:27.758{8223a6b9-545b-6902-6807-000000002e00}1768C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:27.811{8223a6b9-545b-6902-6907-000000002e00}12068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:27.815{8223a6b9-545b-6902-6a07-000000002e00}6832C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:28.147{8223a6b9-545b-6902-6b07-000000002e00}10084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:28.353{8223a6b9-545c-6902-6d07-000000002e00}11056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:28.728{8223a6b9-545c-6902-6e07-000000002e00}6808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:28.887{8223a6b9-545c-6902-6f07-000000002e00}12904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:29.396{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:29.396{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:29.651{8223a6b9-545c-6902-7007-000000002e00}8220C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:29.795{8223a6b9-545d-6902-7107-000000002e00}5004C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:29.952{8223a6b9-545d-6902-7207-000000002e00}3380C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:30.116{8223a6b9-545d-6902-7307-000000002e00}6412C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:30.335{8223a6b9-545e-6902-7407-000000002e00}6284C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:30.818{8223a6b9-545e-6902-7507-000000002e00}9632C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:30.818{8223a6b9-545b-6902-6c07-000000002e00}2960C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:31.417{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:31.417{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:31.483{8223a6b9-3855-6902-9401-000000002e00}11580C:\Windows\System32\mmc.exesoc101win11\Administrator +534500x800000000000000023675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:31.782{8223a6b9-545e-6902-7607-000000002e00}3740C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:32.113{8223a6b9-545f-6902-7707-000000002e00}8664C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:32.305{8223a6b9-5460-6902-7807-000000002e00}5584C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:32.385{8223a6b9-5460-6902-7907-000000002e00}6556C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:32.544{8223a6b9-5460-6902-7a07-000000002e00}12096C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:32.799{8223a6b9-5460-6902-7c07-000000002e00}10100C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:32.813{8223a6b9-5460-6902-7d07-000000002e00}9236C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:32.846{8223a6b9-5460-6902-7b07-000000002e00}11656C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:33.374{8223a6b9-5460-6902-7f07-000000002e00}8432C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:33.435{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:33.435{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:33.915{8223a6b9-5461-6902-8007-000000002e00}12376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:34.641{8223a6b9-5461-6902-8107-000000002e00}8276C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:34.831{8223a6b9-5462-6902-8207-000000002e00}6416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:34.973{8223a6b9-5462-6902-8307-000000002e00}8368C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:35.148{8223a6b9-5462-6902-8407-000000002e00}11508C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:35.312{8223a6b9-5463-6902-8507-000000002e00}552C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:35.450{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:35.450{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:35.482{8223a6b9-5463-6902-8607-000000002e00}6240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:35.657{8223a6b9-5463-6902-8707-000000002e00}6636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:35.803{8223a6b9-5460-6902-7e07-000000002e00}6400C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:35.844{8223a6b9-5463-6902-8807-000000002e00}5896C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:36.008{8223a6b9-5463-6902-8907-000000002e00}10012C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:36.201{8223a6b9-5464-6902-8a07-000000002e00}5056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:36.373{8223a6b9-5464-6902-8b07-000000002e00}12232C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:36.548{8223a6b9-5464-6902-8c07-000000002e00}13060C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:36.737{8223a6b9-5464-6902-8d07-000000002e00}8112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:36.930{8223a6b9-5464-6902-8e07-000000002e00}3656C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.099{8223a6b9-5464-6902-8f07-000000002e00}13016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.265{8223a6b9-5465-6902-9007-000000002e00}9332C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.440{8223a6b9-5465-6902-9107-000000002e00}12724C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.472{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.472{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.641{8223a6b9-5465-6902-9207-000000002e00}9300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.800{8223a6b9-5465-6902-9407-000000002e00}1244C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.802{8223a6b9-5465-6902-9507-000000002e00}9680C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.828{8223a6b9-5465-6902-9307-000000002e00}11300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:37.924{8223a6b9-5465-6902-9707-000000002e00}10292C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:38.235{8223a6b9-5465-6902-9807-000000002e00}728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:38.410{8223a6b9-5466-6902-9907-000000002e00}4916C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:39.313{8223a6b9-5466-6902-9a07-000000002e00}9688C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:39.490{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:39.490{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:39.789{8223a6b9-5467-6902-9b07-000000002e00}8948C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:40.817{8223a6b9-5465-6902-9607-000000002e00}12884C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:41.155{8223a6b9-5468-6902-9e07-000000002e00}2520C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +10341000x800000000000000023722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:41.503{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:41.503{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:41.615{8223a6b9-5467-6902-9c07-000000002e00}4352C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:41.681{8223a6b9-5469-6902-9f07-000000002e00}10752C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:42.557{8223a6b9-5469-6902-a007-000000002e00}8936C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:43.077{8223a6b9-546a-6902-a307-000000002e00}11140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:43.086{8223a6b9-546a-6902-a407-000000002e00}9476C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:43.117{8223a6b9-546a-6902-a207-000000002e00}5136C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:43.522{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:43.522{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:44.023{8223a6b9-546b-6902-a707-000000002e00}10084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:44.159{8223a6b9-546c-6902-a807-000000002e00}8388C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:44.993{8223a6b9-546c-6902-a907-000000002e00}10148C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:45.130{8223a6b9-546c-6902-aa07-000000002e00}9280C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:45.525{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:45.525{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:46.077{8223a6b9-546a-6902-a507-000000002e00}6832C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:46.827{8223a6b9-546d-6902-ab07-000000002e00}10736C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:46.970{8223a6b9-546e-6902-b007-000000002e00}7924C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:47.551{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:47.551{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:48.668{8223a6b9-546a-6902-a107-000000002e00}7028C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000023744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:48.678{8223a6b9-546f-6902-b307-000000002e00}11280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:48.735{8223a6b9-546f-6902-b407-000000002e00}2132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:49.094{8223a6b9-5470-6902-b607-000000002e00}12944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:49.101{8223a6b9-5470-6902-b707-000000002e00}2928C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:49.147{8223a6b9-546e-6902-b107-000000002e00}10420C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:50.095{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:50.095{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:51.512{8223a6b9-5472-6902-bc07-000000002e00}8884C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000023752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:51.630{8223a6b9-5473-6902-bd07-000000002e00}10308C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:52.555{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:52.555{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:52.698{8223a6b9-5470-6902-b507-000000002e00}1136C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:53.161{8223a6b9-5474-6902-be07-000000002e00}2440C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:53.183{8223a6b9-5474-6902-bf07-000000002e00}8304C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:53.416{8223a6b9-5475-6902-c207-000000002e00}8900C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:53.433{8223a6b9-5475-6902-c307-000000002e00}5980C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:53.666{8223a6b9-5471-6902-b807-000000002e00}7196C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:54.463{8223a6b9-5476-6902-c707-000000002e00}5144C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000023762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:54.466{8223a6b9-5476-6902-c507-000000002e00}3768C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000023763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:54.466{8223a6b9-5476-6902-c607-000000002e00}12724C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:54.570{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:54.570{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:54.581{8223a6b9-5476-6902-ca07-000000002e00}11600C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000023767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:54.584{8223a6b9-5476-6902-c807-000000002e00}6536C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000023768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:54.586{8223a6b9-5476-6902-c907-000000002e00}3420C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.236{8223a6b9-5475-6902-c407-000000002e00}9672C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.378{8223a6b9-5477-6902-cb07-000000002e00}1156C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.480{8223a6b9-5477-6902-cc07-000000002e00}8892C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.588{8223a6b9-5477-6902-cd07-000000002e00}13112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.770{8223a6b9-5477-6902-d207-000000002e00}4588C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000023774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.774{8223a6b9-5477-6902-d107-000000002e00}10760C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000023775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.778{8223a6b9-5477-6902-cf07-000000002e00}5964C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000023776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.780{8223a6b9-5477-6902-d007-000000002e00}5068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:55.993{8223a6b9-5477-6902-ce07-000000002e00}4660C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:56.137{8223a6b9-5478-6902-d307-000000002e00}6288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:56.407{8223a6b9-5475-6902-c107-000000002e00}8112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:56.586{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:56.586{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:56.586{8223a6b9-5478-6902-d407-000000002e00}3568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:56.686{8223a6b9-5478-6902-d507-000000002e00}5904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:56.990{8223a6b9-5478-6902-d607-000000002e00}2520C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:57.149{8223a6b9-5478-6902-d707-000000002e00}1596C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:57.271{8223a6b9-5479-6902-d807-000000002e00}12652C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:57.390{8223a6b9-5479-6902-d907-000000002e00}12076C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:57.821{8223a6b9-5479-6902-db07-000000002e00}11080C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:57.824{8223a6b9-5479-6902-dc07-000000002e00}12088C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:58.040{8223a6b9-5479-6902-da07-000000002e00}3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:58.614{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:58.614{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:59.162{8223a6b9-547a-6902-de07-000000002e00}6808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:59.520{8223a6b9-547b-6902-df07-000000002e00}12064C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:59.860{8223a6b9-547b-6902-e007-000000002e00}11320C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:52:59.966{8223a6b9-547b-6902-e107-000000002e00}12268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:00.305{8223a6b9-547b-6902-e207-000000002e00}7488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:00.413{8223a6b9-547c-6902-e307-000000002e00}8376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:00.622{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:00.622{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:00.633{8223a6b9-547c-6902-e407-000000002e00}5900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:00.767{8223a6b9-547c-6902-e507-000000002e00}6108C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:00.821{8223a6b9-5479-6902-dd07-000000002e00}9752C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:01.101{8223a6b9-547c-6902-e607-000000002e00}7028C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000023805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:01.118{8223a6b9-53a9-6902-1e06-000000002e00}10412C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000023806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:01.195{8223a6b9-547d-6902-e707-000000002e00}2304C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000023807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:01.204{8223a6b9-53a4-6902-1506-000000002e00}4724C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000023808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:01.206{8223a6b9-53a4-6902-1706-000000002e00}7396C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:01.212{8223a6b9-53a3-6902-1306-000000002e00}3196C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:02.648{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:02.648{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:02.859{8223a6b9-547e-6902-e807-000000002e00}4356C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:02.871{8223a6b9-547e-6902-e907-000000002e00}12944C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:04.657{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:04.657{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:05.882{8223a6b9-547e-6902-ea07-000000002e00}5584C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:06.670{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:06.670{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:07.835{8223a6b9-5483-6902-eb07-000000002e00}11332C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:07.841{8223a6b9-5483-6902-ec07-000000002e00}12232C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:08.695{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:08.695{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:10.700{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:10.700{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:10.845{8223a6b9-5483-6902-ed07-000000002e00}3676C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:12.727{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:12.727{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:12.854{8223a6b9-5488-6902-ee07-000000002e00}9040C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:12.857{8223a6b9-5488-6902-ef07-000000002e00}2092C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:14.743{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:14.743{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:15.862{8223a6b9-5488-6902-f007-000000002e00}3264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:16.763{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:16.763{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:17.818{8223a6b9-548d-6902-f107-000000002e00}13036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:17.826{8223a6b9-548d-6902-f207-000000002e00}2704C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:18.784{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:18.784{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:20.812{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:20.812{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:20.844{8223a6b9-548d-6902-f307-000000002e00}11300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:22.843{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:22.843{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:22.847{8223a6b9-5492-6902-f407-000000002e00}13112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:22.852{8223a6b9-5492-6902-f507-000000002e00}9856C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:24.871{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:24.871{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:25.867{8223a6b9-5492-6902-f607-000000002e00}12640C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:26.886{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:26.886{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:27.802{8223a6b9-5497-6902-f707-000000002e00}4660C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:27.815{8223a6b9-5497-6902-f807-000000002e00}3132C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:28.913{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:28.913{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:30.833{8223a6b9-5497-6902-f907-000000002e00}8344C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:30.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:30.945{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:32.800{8223a6b9-549c-6902-fa07-000000002e00}3604C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:32.806{8223a6b9-549c-6902-fb07-000000002e00}452C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:32.970{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:32.970{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:35.001{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:35.001{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:35.820{8223a6b9-549c-6902-fc07-000000002e00}4004C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:36.680{8223a6b9-54a0-6902-ff07-000000002e00}496C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000023866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:36.684{8223a6b9-54a0-6902-fd07-000000002e00}1596C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000023867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:36.684{8223a6b9-54a0-6902-fe07-000000002e00}11064C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:37.027{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:37.027{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:37.879{8223a6b9-54a1-6902-0208-000000002e00}11080C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:37.883{8223a6b9-54a1-6902-0308-000000002e00}8352C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:39.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:39.045{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:40.890{8223a6b9-54a1-6902-0408-000000002e00}4032C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:41.069{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:41.069{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:41.864{8223a6b9-54a0-6902-0008-000000002e00}4200C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000023878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:42.813{8223a6b9-54a6-6902-0608-000000002e00}2984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:42.820{8223a6b9-54a6-6902-0708-000000002e00}5004C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:43.096{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:43.096{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:45.126{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:45.126{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:45.836{8223a6b9-54a6-6902-0808-000000002e00}7632C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:47.153{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:47.153{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:47.808{8223a6b9-54ab-6902-0908-000000002e00}10736C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:47.815{8223a6b9-54ab-6902-0a08-000000002e00}8664C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:49.174{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:49.174{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:50.814{8223a6b9-54ab-6902-0b08-000000002e00}1572C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:51.200{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:51.200{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:52.825{8223a6b9-54b0-6902-0c08-000000002e00}544C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:52.832{8223a6b9-54b0-6902-0d08-000000002e00}1736C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:53.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:53.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:53.821{8223a6b9-54b1-6902-0f08-000000002e00}6256C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +10341000x800000000000000023899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:55.256{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:55.256{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:55.845{8223a6b9-54b0-6902-0e08-000000002e00}10412C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:57.280{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:57.280{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:57.825{8223a6b9-54b5-6902-1008-000000002e00}1836C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:57.829{8223a6b9-54b5-6902-1108-000000002e00}5928C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:59.309{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:53:59.309{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:00.888{8223a6b9-54b5-6902-1208-000000002e00}4888C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:01.325{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:01.325{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:02.832{8223a6b9-54ba-6902-1308-000000002e00}488C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:02.847{8223a6b9-54ba-6902-1408-000000002e00}4572C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:03.345{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:03.345{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:05.374{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:05.374{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:05.898{8223a6b9-54ba-6902-1508-000000002e00}5784C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:07.405{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:07.405{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:07.789{8223a6b9-54bf-6902-1608-000000002e00}5676C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:07.799{8223a6b9-54bf-6902-1708-000000002e00}12856C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:09.428{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:09.428{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:10.793{8223a6b9-54bf-6902-1808-000000002e00}120C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:11.446{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:11.446{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:12.860{8223a6b9-54c4-6902-1908-000000002e00}6120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:12.872{8223a6b9-54c4-6902-1a08-000000002e00}3288C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:13.471{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:13.471{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:15.499{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:15.499{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:15.884{8223a6b9-54c4-6902-1b08-000000002e00}3180C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:17.521{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:17.521{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:17.839{8223a6b9-54c9-6902-1c08-000000002e00}9892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:17.844{8223a6b9-54c9-6902-1d08-000000002e00}8540C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:19.549{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:19.549{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:20.852{8223a6b9-54c9-6902-1e08-000000002e00}1896C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:21.577{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:21.577{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:22.831{8223a6b9-54ce-6902-1f08-000000002e00}13036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:22.840{8223a6b9-54ce-6902-2008-000000002e00}9672C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:23.606{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:23.606{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:24.963{8223a6b9-5278-6902-3905-000000002e00}7496C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:25.628{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:25.628{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:25.852{8223a6b9-54ce-6902-2108-000000002e00}2464C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:27.656{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:27.656{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:27.862{8223a6b9-54d3-6902-2208-000000002e00}5964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:27.868{8223a6b9-54d3-6902-2308-000000002e00}7132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:29.277{8223a6b9-536c-6902-e505-000000002e00}12908C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:29.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:29.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:30.881{8223a6b9-54d3-6902-2408-000000002e00}7920C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:31.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:31.701{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:31.838{8223a6b9-536f-6902-e905-000000002e00}3708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000023962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:32.843{8223a6b9-54d8-6902-2508-000000002e00}8948C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:32.859{8223a6b9-54d8-6902-2608-000000002e00}11108C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000023964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:33.728{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:33.728{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:35.759{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:35.759{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:35.868{8223a6b9-54d8-6902-2708-000000002e00}12260C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:37.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:37.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:37.831{8223a6b9-54dd-6902-2808-000000002e00}3568C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:37.836{8223a6b9-54dd-6902-2908-000000002e00}2516C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:39.639{8223a6b9-54df-6902-2e08-000000002e00}4032C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000023974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:39.726{8223a6b9-54df-6902-2b08-000000002e00}12132C:\Windows\System32\UsoClient.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:39.813{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:39.813{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:40.839{8223a6b9-54dd-6902-2a08-000000002e00}9260C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:41.843{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:41.843{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:42.851{8223a6b9-54e2-6902-3008-000000002e00}5024C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:42.855{8223a6b9-54e2-6902-3108-000000002e00}12268C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:43.350{8223a6b9-54a1-6902-0108-000000002e00}13196C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:43.859{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:43.859{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:45.843{8223a6b9-54e2-6902-3208-000000002e00}5852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:45.876{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:45.876{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:46.723{8223a6b9-54e6-6902-3308-000000002e00}11224C:\Users\research\AppData\Local\Programs\cursor\Cursor.exesoc101win11\Administrator +10341000x800000000000000023989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:47.889{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:47.889{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:47.889{8223a6b9-54e7-6902-3408-000000002e00}3252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000023992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:47.893{8223a6b9-54e7-6902-3508-000000002e00}8212C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000023993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:49.492{8223a6b9-5474-6902-c007-000000002e00}3092C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:49.904{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:49.904{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:50.899{8223a6b9-54e7-6902-3608-000000002e00}11280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000023997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:51.922{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000023998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:51.922{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000023999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:52.835{8223a6b9-54ec-6902-3708-000000002e00}5968C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:52.848{8223a6b9-54ec-6902-3808-000000002e00}9596C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:53.939{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:53.939{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:55.843{8223a6b9-54ec-6902-3908-000000002e00}1336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:55.952{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:55.952{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:57.829{8223a6b9-54f1-6902-3a08-000000002e00}4888C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:57.833{8223a6b9-54f1-6902-3b08-000000002e00}10164C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:57.969{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:57.969{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:59.988{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:54:59.988{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:00.824{8223a6b9-54f1-6902-3c08-000000002e00}8884C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:02.005{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:02.005{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:02.885{8223a6b9-54f6-6902-3d08-000000002e00}12484C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:02.888{8223a6b9-54f6-6902-3e08-000000002e00}4340C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:04.021{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:04.021{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:05.875{8223a6b9-54f6-6902-3f08-000000002e00}8252C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:06.037{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:06.037{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:07.871{8223a6b9-54fb-6902-4008-000000002e00}6572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:07.879{8223a6b9-54fb-6902-4108-000000002e00}4568C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:08.052{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:08.052{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:10.070{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:10.070{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:10.919{8223a6b9-54fb-6902-4208-000000002e00}6736C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:12.092{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:12.092{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:12.817{8223a6b9-5500-6902-4308-000000002e00}160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:12.829{8223a6b9-5500-6902-4408-000000002e00}12232C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:14.107{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:14.107{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:15.836{8223a6b9-5500-6902-4508-000000002e00}2876C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:16.126{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:16.126{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:17.821{8223a6b9-5505-6902-4608-000000002e00}2400C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:17.832{8223a6b9-5505-6902-4708-000000002e00}2896C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:18.143{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:18.143{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:19.649{8223a6b9-54df-6902-2f08-000000002e00}2536C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +10341000x800000000000000024043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:20.162{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:20.162{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:20.837{8223a6b9-5505-6902-4808-000000002e00}8C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:22.178{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:22.178{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:22.846{8223a6b9-550a-6902-4908-000000002e00}2452C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:22.856{8223a6b9-550a-6902-4a08-000000002e00}7788C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:24.191{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:24.191{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:25.859{8223a6b9-550a-6902-4b08-000000002e00}12040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:26.207{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:26.207{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:27.841{8223a6b9-550f-6902-4c08-000000002e00}4500C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:27.846{8223a6b9-550f-6902-4d08-000000002e00}12412C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:28.221{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:28.221{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:30.238{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:30.238{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:30.846{8223a6b9-550f-6902-4e08-000000002e00}592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:32.251{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:32.251{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:32.829{8223a6b9-5514-6902-4f08-000000002e00}7804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:32.843{8223a6b9-5514-6902-5008-000000002e00}5316C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:34.267{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:34.267{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:35.833{8223a6b9-5514-6902-5108-000000002e00}7384C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:36.280{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:36.280{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:37.830{8223a6b9-5519-6902-5208-000000002e00}884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:37.838{8223a6b9-5519-6902-5308-000000002e00}11816C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:38.293{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:38.293{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:39.859{8223a6b9-54df-6902-2d08-000000002e00}10812C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:40.309{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:40.309{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:40.840{8223a6b9-5519-6902-5408-000000002e00}8096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:41.286{8223a6b9-54df-6902-2c08-000000002e00}7624C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:42.327{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:42.327{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:42.843{8223a6b9-551e-6902-5508-000000002e00}4588C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:42.856{8223a6b9-551e-6902-5608-000000002e00}9856C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:44.344{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:44.344{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:45.850{8223a6b9-551e-6902-5708-000000002e00}5068C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:46.359{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:46.359{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:47.842{8223a6b9-5523-6902-5808-000000002e00}8948C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:47.845{8223a6b9-5523-6902-5908-000000002e00}12972C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:48.370{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:48.370{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:50.387{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:50.387{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:50.836{8223a6b9-5523-6902-5a08-000000002e00}5864C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:52.407{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:52.407{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:52.809{8223a6b9-5528-6902-5b08-000000002e00}2520C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:52.822{8223a6b9-5528-6902-5c08-000000002e00}4876C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:54.430{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:54.430{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:55.872{8223a6b9-5528-6902-5d08-000000002e00}5828C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:56.458{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:56.458{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:57.814{8223a6b9-552d-6902-5e08-000000002e00}7056C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:57.820{8223a6b9-552d-6902-5f08-000000002e00}9280C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:58.477{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:55:58.477{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:00.500{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:00.500{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:00.869{8223a6b9-552d-6902-6008-000000002e00}2180C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:02.525{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:02.525{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:02.858{8223a6b9-5532-6902-6108-000000002e00}1032C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:02.867{8223a6b9-5532-6902-6208-000000002e00}10336C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:04.543{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:04.543{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:05.906{8223a6b9-5532-6902-6308-000000002e00}11600C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:06.572{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:06.572{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:07.868{8223a6b9-5537-6902-6408-000000002e00}12132C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:07.874{8223a6b9-5537-6902-6508-000000002e00}7492C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:08.593{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:08.593{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:10.622{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:10.622{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:10.926{8223a6b9-5537-6902-6608-000000002e00}6872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:12.652{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:12.652{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:12.828{8223a6b9-553c-6902-6708-000000002e00}8392C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:12.841{8223a6b9-553c-6902-6808-000000002e00}6124C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:14.672{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:14.672{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:15.842{8223a6b9-553c-6902-6908-000000002e00}9828C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:16.691{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:16.691{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:17.869{8223a6b9-5541-6902-6a08-000000002e00}7308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:17.874{8223a6b9-5541-6902-6b08-000000002e00}3092C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:18.710{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:18.710{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:20.735{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:20.735{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:20.878{8223a6b9-5541-6902-6c08-000000002e00}4540C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:22.761{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:22.761{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:22.800{8223a6b9-5546-6902-6d08-000000002e00}3000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:22.806{8223a6b9-5546-6902-6e08-000000002e00}1444C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:24.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:24.783{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:25.811{8223a6b9-5546-6902-6f08-000000002e00}8080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:26.808{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:26.808{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:27.814{8223a6b9-554b-6902-7008-000000002e00}7316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:27.822{8223a6b9-554b-6902-7108-000000002e00}11348C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:28.828{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:28.828{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:30.825{8223a6b9-554b-6902-7208-000000002e00}10108C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:30.854{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:30.854{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:32.810{8223a6b9-5550-6902-7308-000000002e00}3512C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:32.819{8223a6b9-5550-6902-7408-000000002e00}128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:32.875{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:32.875{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:34.899{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:34.899{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:35.834{8223a6b9-5550-6902-7508-000000002e00}3172C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:36.925{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:36.925{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:37.791{8223a6b9-5555-6902-7608-000000002e00}4568C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:37.803{8223a6b9-5555-6902-7708-000000002e00}8128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:38.951{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:38.951{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:40.804{8223a6b9-5555-6902-7808-000000002e00}8196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:40.818{8223a6b9-5468-6902-9d07-000000002e00}7564C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:40.976{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:40.976{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:42.810{8223a6b9-555a-6902-7908-000000002e00}4816C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:42.814{8223a6b9-555a-6902-7a08-000000002e00}3768C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:43.002{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:43.002{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:45.027{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:45.027{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:45.816{8223a6b9-555a-6902-7b08-000000002e00}5588C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:47.051{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:47.051{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:47.855{8223a6b9-555f-6902-7c08-000000002e00}3156C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:47.868{8223a6b9-555f-6902-7d08-000000002e00}9372C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:49.073{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:49.073{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:50.871{8223a6b9-555f-6902-7e08-000000002e00}6440C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:51.097{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:51.097{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:52.906{8223a6b9-5564-6902-7f08-000000002e00}9300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:52.909{8223a6b9-5564-6902-8008-000000002e00}6964C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:53.118{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:53.118{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:55.141{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:55.141{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:55.928{8223a6b9-5564-6902-8108-000000002e00}4712C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:57.163{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:57.163{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:57.803{8223a6b9-5569-6902-8208-000000002e00}12040C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:57.811{8223a6b9-5569-6902-8308-000000002e00}12248C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:59.187{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:56:59.187{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:00.822{8223a6b9-5569-6902-8408-000000002e00}7196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:01.210{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:01.210{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:01.899{8223a6b9-546a-6902-a607-000000002e00}1364C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:02.812{8223a6b9-556e-6902-8508-000000002e00}10028C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:02.815{8223a6b9-556e-6902-8608-000000002e00}6604C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:03.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:03.227{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:05.252{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:05.252{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:05.824{8223a6b9-556e-6902-8708-000000002e00}6292C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:07.275{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:07.275{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:07.794{8223a6b9-5573-6902-8808-000000002e00}1576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:07.800{8223a6b9-5573-6902-8908-000000002e00}1596C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:09.292{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:09.292{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:10.809{8223a6b9-5573-6902-8a08-000000002e00}884C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:11.321{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:11.321{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:12.789{8223a6b9-5578-6902-8b08-000000002e00}5136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:12.802{8223a6b9-5578-6902-8c08-000000002e00}12768C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:13.352{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:13.352{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:15.375{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:15.375{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:15.843{8223a6b9-5578-6902-8d08-000000002e00}12908C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:17.399{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:17.399{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:17.806{8223a6b9-557d-6902-8e08-000000002e00}3384C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:17.812{8223a6b9-557d-6902-8f08-000000002e00}5504C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:19.423{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:19.423{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:20.865{8223a6b9-557d-6902-9008-000000002e00}3248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:21.435{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:21.435{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:22.803{8223a6b9-5582-6902-9108-000000002e00}9628C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:22.807{8223a6b9-5582-6902-9208-000000002e00}10856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:23.366{8223a6b9-5456-6902-5007-000000002e00}8372C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +10341000x800000000000000024245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:23.461{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:23.461{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:25.483{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:25.485{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:25.817{8223a6b9-5582-6902-9308-000000002e00}6108C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:27.509{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:27.509{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:27.852{8223a6b9-5587-6902-9408-000000002e00}1080C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:27.857{8223a6b9-5587-6902-9508-000000002e00}4604C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:29.529{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:29.529{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:30.858{8223a6b9-5587-6902-9608-000000002e00}2516C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:31.552{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:31.552{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:32.874{8223a6b9-558c-6902-9708-000000002e00}8388C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:32.879{8223a6b9-558c-6902-9808-000000002e00}8936C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:33.575{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:33.575{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:35.596{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:35.596{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:35.871{8223a6b9-558c-6902-9908-000000002e00}7056C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:37.619{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:37.619{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:37.854{8223a6b9-5591-6902-9a08-000000002e00}984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:37.869{8223a6b9-5591-6902-9b08-000000002e00}11080C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:39.635{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:39.635{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:40.856{8223a6b9-5591-6902-9c08-000000002e00}6536C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:41.660{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:41.660{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:42.827{8223a6b9-5596-6902-9d08-000000002e00}8432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:42.843{8223a6b9-5596-6902-9e08-000000002e00}1844C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:43.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:43.678{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:45.697{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:45.697{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:45.857{8223a6b9-5596-6902-9f08-000000002e00}5920C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:46.181{8223a6b9-5256-6902-1605-000000002e00}12820C:\Windows\System32\smartscreen.exesoc101win11\Administrator +10341000x800000000000000024283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:47.719{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:47.719{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:47.819{8223a6b9-559b-6902-a108-000000002e00}13240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:47.831{8223a6b9-559b-6902-a208-000000002e00}11656C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:48.446{8223a6b9-559b-6902-a008-000000002e00}11700C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:49.736{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:49.736{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:50.828{8223a6b9-559b-6902-a308-000000002e00}5572C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:51.757{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:51.757{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:52.795{8223a6b9-55a0-6902-a408-000000002e00}7576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:52.800{8223a6b9-55a0-6902-a508-000000002e00}2928C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:53.780{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:53.780{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:55.794{8223a6b9-55a0-6902-a608-000000002e00}1724C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:55.803{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:55.803{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:57.825{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:57.825{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:57.825{8223a6b9-55a5-6902-a708-000000002e00}13196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:57.837{8223a6b9-55a5-6902-a808-000000002e00}8552C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:59.840{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:57:59.840{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:00.851{8223a6b9-55a5-6902-a908-000000002e00}5128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:01.866{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:01.866{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:02.830{8223a6b9-55aa-6902-aa08-000000002e00}2224C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:02.837{8223a6b9-55aa-6902-ab08-000000002e00}10308C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:03.898{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:03.898{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:05.852{8223a6b9-55aa-6902-ac08-000000002e00}12980C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:05.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:05.921{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:06.274{8223a6b9-55ae-6902-af08-000000002e00}4916C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:07.814{8223a6b9-55af-6902-b108-000000002e00}7564C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:07.818{8223a6b9-55af-6902-b208-000000002e00}8152C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:07.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:07.935{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:09.953{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:09.953{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:10.822{8223a6b9-55af-6902-b308-000000002e00}5832C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:11.981{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:11.981{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:12.807{8223a6b9-55b4-6902-b408-000000002e00}4456C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:12.812{8223a6b9-55b4-6902-b508-000000002e00}3008C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:14.010{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:14.010{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:15.829{8223a6b9-55b4-6902-b608-000000002e00}9476C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:16.038{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:16.038{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:17.804{8223a6b9-55b9-6902-b708-000000002e00}2452C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:17.812{8223a6b9-55b9-6902-b808-000000002e00}7788C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:18.062{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:18.062{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:20.089{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:20.089{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:20.814{8223a6b9-55b9-6902-b908-000000002e00}10280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:22.105{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:22.105{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:22.795{8223a6b9-55be-6902-ba08-000000002e00}10168C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:22.807{8223a6b9-55be-6902-bb08-000000002e00}9040C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:24.131{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:24.131{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:25.814{8223a6b9-55be-6902-bc08-000000002e00}4512C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:26.152{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:26.152{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:27.878{8223a6b9-55c3-6902-bd08-000000002e00}8540C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:27.889{8223a6b9-55c3-6902-be08-000000002e00}5316C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:28.173{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:28.173{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:30.196{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:30.196{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:30.900{8223a6b9-55c3-6902-bf08-000000002e00}6604C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:32.215{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:32.215{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:32.881{8223a6b9-55c8-6902-c008-000000002e00}7632C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:32.887{8223a6b9-55c8-6902-c108-000000002e00}1964C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:34.241{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:34.241{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:35.886{8223a6b9-55c8-6902-c208-000000002e00}11944C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:36.267{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:36.267{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:37.809{8223a6b9-55cd-6902-c308-000000002e00}13112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:37.812{8223a6b9-55cd-6902-c408-000000002e00}7508C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:38.294{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:38.294{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:40.313{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:40.313{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:40.824{8223a6b9-55cd-6902-c508-000000002e00}5080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:42.339{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:42.339{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:42.467{8223a6b9-54a6-6902-0508-000000002e00}3940C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:42.834{8223a6b9-55d2-6902-c608-000000002e00}6732C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:42.838{8223a6b9-55d2-6902-c708-000000002e00}6140C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:44.368{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:44.368{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:45.838{8223a6b9-55d2-6902-c808-000000002e00}1204C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:46.283{8223a6b9-55ae-6902-b008-000000002e00}8608C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +10341000x800000000000000024381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:46.394{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:46.394{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:47.821{8223a6b9-55d7-6902-c908-000000002e00}5048C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:47.824{8223a6b9-55d7-6902-ca08-000000002e00}4896C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:48.411{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:48.411{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:50.439{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:50.439{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:50.831{8223a6b9-55d7-6902-cb08-000000002e00}9336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:52.466{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:52.466{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:52.843{8223a6b9-55dc-6902-cc08-000000002e00}11916C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:52.848{8223a6b9-55dc-6902-cd08-000000002e00}12128C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:54.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:54.497{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:55.853{8223a6b9-55dc-6902-ce08-000000002e00}11308C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:56.526{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:56.526{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:57.797{8223a6b9-55e1-6902-cf08-000000002e00}608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:57.809{8223a6b9-55e1-6902-d008-000000002e00}11048C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:58.547{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:58:58.547{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:00.571{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:00.573{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:00.820{8223a6b9-55e1-6902-d108-000000002e00}6688C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:02.590{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:02.590{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:02.797{8223a6b9-55e6-6902-d208-000000002e00}4452C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:02.800{8223a6b9-55e6-6902-d308-000000002e00}2304C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:04.617{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:04.617{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:05.791{8223a6b9-55e6-6902-d408-000000002e00}7384C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:06.472{8223a6b9-55ad-6902-ae08-000000002e00}3512C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:06.643{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:06.643{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:07.828{8223a6b9-55eb-6902-d508-000000002e00}588C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:07.841{8223a6b9-55eb-6902-d608-000000002e00}160C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:07.924{8223a6b9-55ad-6902-ad08-000000002e00}924C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:08.666{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:08.666{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:10.682{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:10.682{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:10.854{8223a6b9-55eb-6902-d708-000000002e00}8004C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:12.707{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:12.707{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:12.882{8223a6b9-55f0-6902-d808-000000002e00}5920C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:12.885{8223a6b9-55f0-6902-d908-000000002e00}11484C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:14.733{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:14.733{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:15.447{8223a6b9-55f3-6902-db08-000000002e00}11700C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:15.447{8223a6b9-55f3-6902-dc08-000000002e00}7856C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:15.886{8223a6b9-55f0-6902-da08-000000002e00}11336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:16.749{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:16.749{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:17.962{8223a6b9-55f5-6902-dd08-000000002e00}10412C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:17.966{8223a6b9-55f5-6902-de08-000000002e00}3196C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:18.762{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:18.762{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:20.781{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:20.781{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:20.965{8223a6b9-55f5-6902-df08-000000002e00}8424C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:22.798{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:22.798{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:22.847{8223a6b9-55fa-6902-e008-000000002e00}6920C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:22.851{8223a6b9-55fa-6902-e108-000000002e00}10956C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:24.819{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:24.819{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:25.863{8223a6b9-55fa-6902-e208-000000002e00}2844C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:26.827{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:26.827{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:27.954{8223a6b9-55ff-6902-e308-000000002e00}8300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:27.958{8223a6b9-55ff-6902-e408-000000002e00}9424C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:28.844{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:28.844{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:30.850{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:30.850{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:30.964{8223a6b9-55ff-6902-e508-000000002e00}6356C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:32.801{8223a6b9-5604-6902-e608-000000002e00}11932C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:32.807{8223a6b9-5604-6902-e708-000000002e00}6024C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:32.862{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:32.862{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:34.876{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:34.876{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:35.821{8223a6b9-5604-6902-e808-000000002e00}11300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:36.893{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:36.893{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:37.875{8223a6b9-5609-6902-eb08-000000002e00}8152C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:37.878{8223a6b9-5609-6902-ec08-000000002e00}7656C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:38.909{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:38.909{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:40.876{8223a6b9-5609-6902-ed08-000000002e00}1656C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:40.924{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:40.924{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:42.825{8223a6b9-560e-6902-ee08-000000002e00}12240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:42.838{8223a6b9-560e-6902-ef08-000000002e00}3100C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:42.940{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:42.940{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:44.966{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:44.966{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:45.848{8223a6b9-560e-6902-f008-000000002e00}3872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:46.995{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:46.995{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:47.836{8223a6b9-5613-6902-f108-000000002e00}9620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:47.841{8223a6b9-5613-6902-f208-000000002e00}11912C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:49.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:49.022{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +16341600x800000000000000024487Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 17:59:49.778C:\Users\research\Desktop\systernals\sysmon-local-llms-enhanced.xmlSHA256=9DAF6F6A17579C45B008B67678DC34835B9AD59013753DE70D928E674EC3C876 +534500x800000000000000024488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:49.782{8223a6b9-5615-6902-f408-000000002e00}10168C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +534500x800000000000000024489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:50.907{8223a6b9-5613-6902-f308-000000002e00}5924C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:51.053{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:51.053{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:52.818{8223a6b9-5618-6902-f508-000000002e00}8264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:52.822{8223a6b9-5618-6902-f608-000000002e00}2544C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:53.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:53.077{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:55.096{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:55.096{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:55.821{8223a6b9-5618-6902-f708-000000002e00}3144C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:57.107{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:57.107{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:57.849{8223a6b9-561d-6902-f808-000000002e00}10036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:57.854{8223a6b9-561d-6902-f908-000000002e00}9240C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:59.122{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 17:59:59.122{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:00.420{8223a6b9-3829-6902-7401-000000002e00}2052C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:00.869{8223a6b9-561d-6902-fa08-000000002e00}3200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:01.141{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:01.141{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:02.858{8223a6b9-5622-6902-fb08-000000002e00}7924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:02.874{8223a6b9-5622-6902-fc08-000000002e00}3064C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:03.163{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:03.163{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:05.189{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:05.189{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:05.867{8223a6b9-5622-6902-fd08-000000002e00}6308C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:07.216{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:07.216{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:07.807{8223a6b9-5627-6902-0109-000000002e00}11328C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:07.812{8223a6b9-5627-6902-0209-000000002e00}8344C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:09.243{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:09.243{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:10.809{8223a6b9-5627-6902-0309-000000002e00}7028C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:11.259{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:11.259{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:12.815{8223a6b9-562c-6902-0409-000000002e00}12268C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:12.817{8223a6b9-562c-6902-0509-000000002e00}12804C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:13.283{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:13.283{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:15.309{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1410C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+b6c6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+536e|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187C921)|UNKNOWN(00007FF68187BC75)|UNKNOWN(00007FF68187AB1A)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+447bcbe|UNKNOWN(00007FF68187B4A9)|UNKNOWN(00007FF681879151)|UNKNOWN(00007FF681877B83)|UNKNOWN(00007FF68187D4BA)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:15.309{8223a6b9-3827-6902-6d01-000000002e00}1070010704C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1400C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4799|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\lmstudiocore.dll+4a53|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+44cc|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+68f2|\\?\C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\liblmstudio\cpu\liblmstudio_bindings.node+6648|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+539704|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a3938|UNKNOWN(00007FF68187CEF3)|UNKNOWN(00007FF68187BF96)|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43e42ae|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+44c6c6a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43d1f08|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+439e67f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c3afa4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2881|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+fc2a7e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3c4c849|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f402|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+47f17d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+513f41|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e4360|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24e0cf6soc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:15.821{8223a6b9-562c-6902-0609-000000002e00}7968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.357{8223a6b9-3826-6902-6a01-000000002e00}11052C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.368{8223a6b9-3826-6902-6901-000000002e00}10680C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.372{8223a6b9-3827-6902-6f01-000000002e00}5180C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.374{8223a6b9-3827-6902-6c01-000000002e00}11000C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.409{8223a6b9-3827-6902-6b01-000000002e00}10992C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.423{8223a6b9-3827-6902-6d01-000000002e00}10700C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.425{8223a6b9-382b-6902-7901-000000002e00}3788C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.427{8223a6b9-382e-6902-8801-000000002e00}6032C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:16.427{8223a6b9-3829-6902-7301-000000002e00}6324C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:17.798{8223a6b9-5631-6902-0709-000000002e00}13260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:17.806{8223a6b9-5631-6902-0809-000000002e00}7056C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:20.803{8223a6b9-5631-6902-0909-000000002e00}3912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:20.958{8223a6b9-5623-6902-ff08-000000002e00}8576C:\Windows\System32\Taskmgr.exesoc101win11\Administrator +534500x800000000000000024545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:22.811{8223a6b9-5636-6902-0a09-000000002e00}7940C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:22.814{8223a6b9-5636-6902-0b09-000000002e00}3272C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:25.816{8223a6b9-5636-6902-0c09-000000002e00}3512C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:28.047{8223a6b9-563b-6902-0e09-000000002e00}5756C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:28.050{8223a6b9-563b-6902-0f09-000000002e00}2020C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:31.059{8223a6b9-563b-6902-1009-000000002e00}12748C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:32.812{8223a6b9-5640-6902-1109-000000002e00}1728C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:32.817{8223a6b9-5640-6902-1209-000000002e00}10944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:34.824{8223a6b9-391d-6902-b601-000000002e00}2820C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:34.844{8223a6b9-391c-6902-ab01-000000002e00}1232C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000024555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:34.931{8223a6b9-391d-6902-b401-000000002e00}9588C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:34.945{8223a6b9-391d-6902-b301-000000002e00}12984C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:34.947{8223a6b9-391d-6902-b501-000000002e00}12184C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:34.996{8223a6b9-391d-6902-b101-000000002e00}8416C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:35.023{8223a6b9-391d-6902-b201-000000002e00}10232C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:35.823{8223a6b9-5640-6902-1309-000000002e00}10192C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:39.026{8223a6b9-391d-6902-b701-000000002e00}9176C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000024562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:39.038{8223a6b9-391d-6902-b801-000000002e00}4856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:41.901{8223a6b9-563b-6902-0d09-000000002e00}5792C:\Windows\System32\Taskmgr.exesoc101win11\Administrator +534500x800000000000000024564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:43.319{8223a6b9-5608-6902-ea08-000000002e00}4000C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:44.304{8223a6b9-564c-6902-1409-000000002e00}10308C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:49.889{8223a6b9-5608-6902-e908-000000002e00}2324C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:51.887{8223a6b9-564e-6902-1509-000000002e00}6944C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:00:59.481{8223a6b9-5656-6902-1609-000000002e00}1292C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:01:24.839{8223a6b9-5003-6902-9603-000000002e00}4744C:\Windows\System32\SppExtComObj.ExeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000024570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:01:24.856{8223a6b9-3e09-6902-8503-000000002e00}1236C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000024571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:01:37.325{8223a6b9-5681-6902-2009-000000002e00}8276C:\Windows\System32\wermgr.exesoc101win11\Administrator +534500x800000000000000024572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:01:37.381{8223a6b9-5681-6902-2109-000000002e00}980C:\Windows\System32\wermgr.exesoc101win11\Administrator +534500x800000000000000024573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:01:54.982{8223a6b9-5656-6902-1b09-000000002e00}1964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +10341000x800000000000000024574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:09.753{8223a6b9-56a1-6902-2309-000000002e00}634410076C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a1-6902-2409-000000002e00}4600C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+20a92ce|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+20a855e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e8f950|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e90228|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1e90518|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24c2c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24dd52|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24da30|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24d535|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+24d3e4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a37f4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+43a19b5soc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.288{8223a6b9-56a1-6902-2309-000000002e00}634410332C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2509-000000002e00}6972C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c93|C:\WINDOWS\System32\ADVAPI32.dll+30a20|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a9c5cc|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+257b199|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+257b677|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223d8bf|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+26cbe2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d1bd2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d1cb6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+31024b8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.300{8223a6b9-56a1-6902-2309-000000002e00}63441192C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2609-000000002e00}3428C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.335{8223a6b9-56a1-6902-2309-000000002e00}63441192C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2709-000000002e00}8308C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.365{8223a6b9-56a1-6902-2409-000000002e00}46003088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2509-000000002e00}6972C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.388{8223a6b9-56a1-6902-2409-000000002e00}460010388C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2609-000000002e00}3428C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.430{8223a6b9-56a1-6902-2309-000000002e00}634410076C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2509-000000002e00}6972C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x101451C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba7ca|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+15708d8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1570d05|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2622cba|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462a1ac|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462b8c7|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46300c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3a59ef5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+463715c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46eac03|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45ca04d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebcb4d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+252a2de|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ef0e8f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153ade2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153c961|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153818f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84e6cb|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84f88fsoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.677{8223a6b9-56a1-6902-2309-000000002e00}63441192C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2809-000000002e00}1812C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.709{8223a6b9-56a1-6902-2409-000000002e00}46003088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2809-000000002e00}1812C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.872{8223a6b9-56a1-6902-2409-000000002e00}4600452C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2809-000000002e00}1812C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1010C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba83a|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+250f117|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3100a52|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7e46e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+7c59c60|C:\WINDOWS\SYSTEM32\ntdll.dll+7f238|C:\WINDOWS\SYSTEM32\ntdll.dll+7dc31|C:\WINDOWS\SYSTEM32\ntdll.dll+927b9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.898{8223a6b9-56a2-6902-2809-000000002e00}1812C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +10341000x800000000000000024585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.921{8223a6b9-56a1-6902-2309-000000002e00}63441192C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2909-000000002e00}7980C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:10.945{8223a6b9-56a1-6902-2409-000000002e00}460010388C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a2-6902-2909-000000002e00}7980C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:12.695{8223a6b9-56a3-6902-2a09-000000002e00}3560C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000024588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:12.695{8223a6b9-56a3-6902-2b09-000000002e00}10176C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:12.715{8223a6b9-56a1-6902-2309-000000002e00}63441192C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a4-6902-2c09-000000002e00}2736C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:12.747{8223a6b9-56a1-6902-2409-000000002e00}46003088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a4-6902-2c09-000000002e00}2736C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:13.084{8223a6b9-56a1-6902-2309-000000002e00}63441192C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a5-6902-2d09-000000002e00}10064C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:13.162{8223a6b9-56a1-6902-2409-000000002e00}460010388C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a5-6902-2d09-000000002e00}10064C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:15.203{8223a6b9-56a6-6902-2e09-000000002e00}3336C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exesoc101win11\Administrator +534500x800000000000000024594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:15.205{8223a6b9-56a6-6902-2f09-000000002e00}11796C:\Windows\System32\conhost.exesoc101win11\Administrator +10341000x800000000000000024595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:15.310{8223a6b9-56a1-6902-2309-000000002e00}63441192C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a7-6902-3009-000000002e00}12740C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:15.425{8223a6b9-56a1-6902-2409-000000002e00}46003088C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-56a7-6902-3009-000000002e00}12740C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000024597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:15.712{8223a6b9-56a1-6902-2309-000000002e00}6344C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\.internal\conversation-config.json2025-10-29 13:25:59.931soc101win11\Administrator +534500x800000000000000024598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:15.988{8223a6b9-56a7-6902-3509-000000002e00}1112C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000024599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:15.991{8223a6b9-56a7-6902-3609-000000002e00}4732C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000024600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.028{8223a6b9-56a7-6902-3209-000000002e00}6216C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000024601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.028{8223a6b9-56a7-6902-3109-000000002e00}11524C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\app-harmony-win-x86@5\Scripts\python.exesoc101win11\Administrator +534500x800000000000000024602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.053{8223a6b9-56a7-6902-3309-000000002e00}10244C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.063{8223a6b9-56a7-6902-3409-000000002e00}8164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.184{8223a6b9-56a8-6902-3809-000000002e00}12848C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000024605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.189{8223a6b9-56a8-6902-3a09-000000002e00}7064C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.201{8223a6b9-56a8-6902-3709-000000002e00}11984C:\Users\Administrator\.lmstudio\extensions\backends\vendor\_amphibian\cpython3.11-win-x86@4\python.exesoc101win11\Administrator +534500x800000000000000024607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.203{8223a6b9-56a8-6902-3909-000000002e00}11980C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.834{8223a6b9-56a8-6902-3c09-000000002e00}7536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.834{8223a6b9-56a8-6902-3b09-000000002e00}6052C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000024610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.840{8223a6b9-56a8-6902-4109-000000002e00}9880C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000024611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.848{8223a6b9-56a8-6902-3d09-000000002e00}1300C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:16.850{8223a6b9-56a8-6902-3e09-000000002e00}4044C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:17.044{8223a6b9-56a8-6902-4009-000000002e00}12744C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:17.044{8223a6b9-56a8-6902-3f09-000000002e00}4136C:\Users\Administrator\AppData\Local\Programs\LM Studio\resources\app\.webpack\bin\node.exesoc101win11\Administrator +534500x800000000000000024615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:17.050{8223a6b9-56a8-6902-4409-000000002e00}7008C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000024616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:17.053{8223a6b9-56a8-6902-4209-000000002e00}2536C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:17.058{8223a6b9-56a8-6902-4309-000000002e00}8096C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:48.609{8223a6b9-5680-6902-1f09-000000002e00}7132C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +23542300x800000000000000024619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:56.886{8223a6b9-56a1-6902-2309-000000002e00}6344soc101win11\AdministratorC:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exeC:\Users\Administrator\.lmstudio\models\lmstudio-community\DeepSeek-R1-0528-Qwen3-8B-GGUF\DeepSeek-R1-0528-Qwen3-8B-Q4_K_M.ggufSHA256=713D3A7A93F306763A6DE2B5E9F9350E3AEEE3BBFE8C3EE0066B61939FEAA332falsefalse - insufficient disk space +534500x800000000000000024620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:02:59.374{8223a6b9-56a5-6902-2d09-000000002e00}10064C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:03:37.257{8223a6b9-56f9-6902-4509-000000002e00}7648C:\Windows\System32\rundll32.exesoc101win11\Administrator +534500x800000000000000024622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:03:42.543{8223a6b9-56f9-6902-4609-000000002e00}6240C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:00.713{8223a6b9-5709-6902-4709-000000002e00}1336C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:01.127{8223a6b9-5710-6902-4909-000000002e00}3648C:\Windows\System32\UsoClient.exeNT AUTHORITY\SYSTEM +534500x800000000000000024625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:01.143{8223a6b9-5711-6902-4c09-000000002e00}4568C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:03.866{8223a6b9-5713-6902-5009-000000002e00}3816C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +534500x800000000000000024627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:04.464{8223a6b9-5039-6902-be03-000000002e00}4548C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000024628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:09.389{8223a6b9-5712-6902-4f09-000000002e00}12156C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:09.389{8223a6b9-5712-6902-4e09-000000002e00}3372C:\Windows\System32\dllhost.exesoc101win11\Administrator +10341000x800000000000000024630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:10.301{8223a6b9-56a1-6902-2309-000000002e00}63441192C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-571a-6902-5309-000000002e00}10204C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebbf1b|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebb631|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+223c547|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+ed98b4|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+199fb3e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+157238e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a867f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+487d41e|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4a4f355|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3102558|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eb4c28|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:10.332{8223a6b9-56a1-6902-2409-000000002e00}460010388C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-571a-6902-5309-000000002e00}10204C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x1f3fffC:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7d46c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2a7cec9|C:\WINDOWS\System32\KERNEL32.DLL+2e8d7|C:\WINDOWS\SYSTEM32\ntdll.dll+3c34csoc101win11\Administratorsoc101win11\Administrator +10341000x800000000000000024632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:10.364{8223a6b9-56a1-6902-2309-000000002e00}634410076C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe{8223a6b9-571a-6902-5309-000000002e00}10204C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe0x101451C:\WINDOWS\SYSTEM32\ntdll.dll+162d74|C:\WINDOWS\System32\KERNELBASE.dll+c54f6|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1eba7ca|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+15708d8|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1570d05|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+2622cba|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462a1ac|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+462b8c7|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+4710875|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46300c2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+3a59ef5|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+463715c|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45d67fd|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+46eac03|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+45ca04d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ebcb4d|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+252a2de|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+1ef0e8f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153ade2|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153c961|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+153818f|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84e6cb|C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exe+84f88fsoc101win11\Administratorsoc101win11\Administrator +534500x800000000000000024633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:10.380{8223a6b9-571a-6902-5309-000000002e00}10204C:\Users\Administrator\AppData\Local\Programs\LM Studio\LM Studio.exesoc101win11\Administrator +534500x800000000000000024634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:16.440{8223a6b9-5715-6902-5209-000000002e00}8320C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:41.167{8223a6b9-5711-6902-4d09-000000002e00}976C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000024636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:45.793{8223a6b9-5737-6902-5409-000000002e00}10968C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:04:47.505{8223a6b9-5738-6902-5509-000000002e00}8544C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:05:01.315{8223a6b9-5710-6902-4b09-000000002e00}1448C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:05:05.001{8223a6b9-5710-6902-4a09-000000002e00}6816C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000024640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:05:23.276{8223a6b9-5657-6902-1c09-000000002e00}6488C:\Windows\System32\Dism\DismHost.exesoc101win11\Administrator +534500x800000000000000024641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:05:23.325{8223a6b9-37fd-6902-3d01-000000002e00}7524C:\Windows\ImmersiveControlPanel\SystemSettings.exesoc101win11\Administrator +534500x800000000000000024642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:05:35.755{8223a6b9-576a-6902-5809-000000002e00}6416C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:05:36.094{8223a6b9-576a-6902-5609-000000002e00}8232C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:05:43.945{8223a6b9-5777-6902-5a09-000000002e00}13116C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000024645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:05.392{8223a6b9-569d-6902-2209-000000002e00}10508C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:13.409{8223a6b9-578c-6902-5d09-000000002e00}10760C:\Program Files (x86)\AOMEI Partition Assistant\UninstallFB.exesoc101win11\Administrator +534500x800000000000000024647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:15.181{8223a6b9-5797-6902-5f09-000000002e00}3032C:\Program Files (x86)\AOMEI Partition Assistant\loaddrv.exesoc101win11\Administrator +534500x800000000000000024648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:15.255{8223a6b9-5797-6902-6009-000000002e00}2820C:\Program Files (x86)\AOMEI Partition Assistant\ddm\loaddrv.exesoc101win11\Administrator +534500x800000000000000024649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:15.362{8223a6b9-5797-6902-6109-000000002e00}11308C:\Windows\SysWOW64\cmd.exesoc101win11\Administrator +534500x800000000000000024650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:15.366{8223a6b9-5797-6902-6209-000000002e00}4468C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:16.173{8223a6b9-5795-6902-5e09-000000002e00}8296C:\Users\ADMINI~1\AppData\Local\Temp\is-CRR11.tmp\UninstallFB.exesoc101win11\Administrator +534500x800000000000000024652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:17.062{8223a6b9-5789-6902-5b09-000000002e00}4744C:\Program Files (x86)\AOMEI Partition Assistant\unins000.exesoc101win11\Administrator +534500x800000000000000024653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:19.630{8223a6b9-579b-6902-6409-000000002e00}11232C:\Users\ADMINI~1\AppData\Local\Temp\is-CRR11.tmp\ga4.exesoc101win11\Administrator +534500x800000000000000024654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:19.697{8223a6b9-579b-6902-6509-000000002e00}2248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:19.937{8223a6b9-579b-6902-6609-000000002e00}9412C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:19.998{8223a6b9-579b-6902-6709-000000002e00}784C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:21.358{8223a6b9-579c-6902-6909-000000002e00}6224C:\Users\ADMINI~1\AppData\Local\Temp\is-CRR11.tmp\aman.exesoc101win11\Administrator +534500x800000000000000024658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:21.365{8223a6b9-579c-6902-6d09-000000002e00}8244C:\Users\ADMINI~1\AppData\Local\Temp\is-CRR11.tmp\amanhlp.exesoc101win11\Administrator +534500x800000000000000024659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:21.368{8223a6b9-579c-6902-6b09-000000002e00}2816C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:21.431{8223a6b9-578a-6902-5c09-000000002e00}6280C:\Users\ADMINI~1\AppData\Local\Temp\_iu14D2N.tmpsoc101win11\Administrator +11241100x800000000000000024661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:21.791{8223a6b9-37ad-6902-b600-000000002e00}8068C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exeC:\Users\Administrator\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\start2.bin2025-09-03 13:55:02.761soc101win11\Administrator +534500x800000000000000024662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.207{8223a6b9-579c-6902-6e09-000000002e00}10260C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.207{8223a6b9-37c5-6902-f000-000000002e00}12016C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.219{8223a6b9-37c4-6902-ec00-000000002e00}11760C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.333{8223a6b9-579c-6902-6a09-000000002e00}9848C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.361{8223a6b9-579c-6902-6c09-000000002e00}604C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.367{8223a6b9-37c3-6902-e300-000000002e00}10600C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.369{8223a6b9-579c-6902-6809-000000002e00}10948C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.380{8223a6b9-37c3-6902-e400-000000002e00}10556C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.384{8223a6b9-37c3-6902-e100-000000002e00}10560C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.443{8223a6b9-37c3-6902-df00-000000002e00}11092C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.476{8223a6b9-37c3-6902-e000-000000002e00}11124C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.853{8223a6b9-579e-6902-7109-000000002e00}3196C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\elevation_service.exeNT AUTHORITY\SYSTEM +534500x800000000000000024674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:22.930{8223a6b9-579e-6902-7509-000000002e00}10484C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000024675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:23.065{8223a6b9-579e-6902-7609-000000002e00}5016C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:23.157{8223a6b9-579f-6902-7909-000000002e00}9344C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:33.461{8223a6b9-579e-6902-7709-000000002e00}6432C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000024678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:38.141{8223a6b9-576b-6902-5909-000000002e00}2980C:\Windows\System32\Dism\DismHost.exesoc101win11\Administrator +534500x800000000000000024679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:38.201{8223a6b9-576a-6902-5709-000000002e00}12972C:\Windows\ImmersiveControlPanel\SystemSettings.exesoc101win11\Administrator +534500x800000000000000024680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:42.926{8223a6b9-57b2-6902-7c09-000000002e00}7304C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:44.910{8223a6b9-57ae-6902-7a09-000000002e00}11700C:\Windows\System32\sdbinst.exeNT AUTHORITY\SYSTEM +534500x800000000000000024682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:44.922{8223a6b9-57ae-6902-7b09-000000002e00}3872C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:50.163{8223a6b9-57b9-6902-8609-000000002e00}2592C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:52.618{8223a6b9-57bc-6902-8c09-000000002e00}11768C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:52.623{8223a6b9-57bc-6902-8a09-000000002e00}11856C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:06:52.624{8223a6b9-57bc-6902-8b09-000000002e00}11860C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:02.415{8223a6b9-57c5-6902-9009-000000002e00}11364C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:03.088{8223a6b9-579e-6902-7809-000000002e00}11892C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000024689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:05.144{8223a6b9-57c8-6902-9309-000000002e00}10564C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000024690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:05.150{8223a6b9-57c8-6902-9209-000000002e00}10560C:\Windows\System32\conhost.exesoc101win11\Administrator +22542200x800000000000000024691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:07.148{8223a6b9-57c8-6902-9109-000000002e00}11244gpt4all.io0::ffff:104.26.1.159;::ffff:172.67.71.169;::ffff:104.26.0.159;C:\Users\Administrator\Downloads\gpt4all-installer-win64.exesoc101win11\Administrator +534500x800000000000000024692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:13.196{8223a6b9-57b3-6902-7f09-000000002e00}8620C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:17.143{8223a6b9-57b2-6902-7e09-000000002e00}2584C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:22.579{8223a6b9-57b3-6902-8009-000000002e00}588C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:23.781{8223a6b9-57db-6902-9709-000000002e00}3832C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:29.348{8223a6b9-57c3-6902-8d09-000000002e00}1216C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:30.285{8223a6b9-57bc-6902-8909-000000002e00}10996C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:31.618{8223a6b9-57b9-6902-8409-000000002e00}5648C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:31.668{8223a6b9-57b6-6902-8209-000000002e00}8256C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:07:34.115{8223a6b9-57b9-6902-8709-000000002e00}10764C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:08:00.245{8223a6b9-57ba-6902-8809-000000002e00}8112C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:08:02.385{8223a6b9-5656-6902-1809-000000002e00}648C:\Windows\System32\VSSVC.exeNT AUTHORITY\SYSTEM +11241100x800000000000000024703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:08:17.512{8223a6b9-57c8-6902-9109-000000002e00}11244C:\Users\Administrator\Downloads\gpt4all-installer-win64.exeC:\Users\Administrator\gpt4all\resources\nomic-embed-text-v1.5.f16.gguf2025-10-29 18:08:17.512soc101win11\Administrator +22542200x800000000000000024704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:08:16.908{8223a6b9-57c8-6902-9109-000000002e00}11244gpt4all.io0::ffff:104.26.0.159;::ffff:104.26.1.159;::ffff:172.67.71.169;C:\Users\Administrator\Downloads\gpt4all-installer-win64.exesoc101win11\Administrator +534500x800000000000000024705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:08:22.805{8223a6b9-5816-6902-9b09-000000002e00}8084C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +254200x800000000000000024706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:08:34.308{8223a6b9-57c8-6902-9109-000000002e00}11244C:\Users\Administrator\Downloads\gpt4all-installer-win64.exeC:\Users\Administrator\gpt4all\resources\nomic-embed-text-v1.5.f16.gguf2025-10-29 18:08:17.0002025-10-29 18:08:17.512soc101win11\Administrator +534500x800000000000000024707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:08:51.713{8223a6b9-582e-6902-9d09-000000002e00}6116C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:09:52.219{8223a6b9-57b9-6902-8509-000000002e00}3004C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:09:52.816{8223a6b9-5852-6902-9e09-000000002e00}7320C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:10:17.110{8223a6b9-57c8-6902-9109-000000002e00}11244C:\Users\Administrator\Downloads\gpt4all-installer-win64.exesoc101win11\Administrator +534500x800000000000000024711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:10:21.629{8223a6b9-588b-6902-a309-000000002e00}3880C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:10:23.230{8223a6b9-588d-6902-a409-000000002e00}10816C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +22542200x800000000000000024713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:10:39.883{8223a6b9-588e-6902-a609-000000002e00}1032gpt4all.io0::ffff:172.67.71.169;::ffff:104.26.0.159;::ffff:104.26.1.159;C:\Users\Administrator\gpt4all\bin\chat.exesoc101win11\Administrator +22542200x800000000000000024714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:10:40.041{8223a6b9-588e-6902-a609-000000002e00}1032raw.githubusercontent.com0::ffff:185.199.111.133;::ffff:185.199.110.133;::ffff:185.199.109.133;::ffff:185.199.108.133;C:\Users\Administrator\gpt4all\bin\chat.exesoc101win11\Administrator +22542200x800000000000000024715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:10:49.475{8223a6b9-588e-6902-a609-000000002e00}1032api.gpt4all.io0type: 5 gpt4all-datalake-load-balancer-2692535.us-east-1.elb.amazonaws.com;::ffff:3.211.237.11;C:\Users\Administrator\gpt4all\bin\chat.exesoc101win11\Administrator +11241100x800000000000000024716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:11:00.821{8223a6b9-588e-6902-a609-000000002e00}1032C:\Users\Administrator\gpt4all\bin\chat.exeC:\Users\Administrator\AppData\Local\nomic.ai\GPT4All\incomplete-qwen2.5-coder-7b-instruct-q4_0.gguf2025-10-29 18:11:00.820soc101win11\Administrator +22542200x800000000000000024717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:11:00.883{8223a6b9-588e-6902-a609-000000002e00}1032huggingface.co0::ffff:3.166.152.105;::ffff:3.166.152.65;::ffff:3.166.152.110;::ffff:3.166.152.44;C:\Users\Administrator\gpt4all\bin\chat.exesoc101win11\Administrator +534500x800000000000000024718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:11:02.415{8223a6b9-5656-6902-1a09-000000002e00}10644C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +22542200x800000000000000024719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:11:01.247{8223a6b9-588e-6902-a609-000000002e00}1032cas-bridge.xethub.hf.co0::ffff:18.173.166.82;::ffff:18.173.166.5;::ffff:18.173.166.85;::ffff:18.173.166.74;C:\Users\Administrator\gpt4all\bin\chat.exesoc101win11\Administrator +534500x800000000000000024720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:11:02.816{8223a6b9-58b5-6902-a709-000000002e00}11636C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000024721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:11:18.967{8223a6b9-5799-6902-6309-000000002e00}12156C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:12:43.395{8223a6b9-582e-6902-9c09-000000002e00}11924C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:12:43.412{8223a6b9-5812-6902-9809-000000002e00}1140C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:12:43.416{8223a6b9-5812-6902-9a09-000000002e00}11324C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:12:43.416{8223a6b9-5812-6902-9909-000000002e00}2260C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:12:45.771{8223a6b9-57da-6902-9609-000000002e00}7440C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000024727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:12:47.463{8223a6b9-57c3-6902-8f09-000000002e00}11180C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:13:30.275{8223a6b9-57b5-6902-8109-000000002e00}12260C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:13:56.067{8223a6b9-570c-6902-4809-000000002e00}11804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:14:19.059{8223a6b9-588b-6902-a209-000000002e00}2596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:14:40.304{8223a6b9-5657-6902-1e09-000000002e00}2624C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000024732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:14:40.312{8223a6b9-5657-6902-1d09-000000002e00}5292C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000024733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:15:23.333{8223a6b9-5623-6902-fe08-000000002e00}5852C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000024734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:15:55.202{8223a6b9-5656-6902-1909-000000002e00}12248C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000024735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:16:19.996{8223a6b9-59f1-6902-a809-000000002e00}4020C:\Windows\System32\CompatTelRunner.exeNT AUTHORITY\SYSTEM +534500x800000000000000024736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:16:19.997{8223a6b9-59f1-6902-a909-000000002e00}11652C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:16:52.545{8223a6b9-57b7-6902-8309-000000002e00}280C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:16:53.307{8223a6b9-59f7-6902-aa09-000000002e00}2148C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:17:03.790{8223a6b9-5623-6902-0009-000000002e00}10256C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:19:34.776{8223a6b9-5a9a-6902-ac09-000000002e00}7028C:\Windows\System32\dmclient.exeNT AUTHORITY\SYSTEM +534500x800000000000000024741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:19:34.952{8223a6b9-5a9a-6902-ad09-000000002e00}12712C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:19:56.905{8223a6b9-57c3-6902-8e09-000000002e00}6688C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:20:16.708{8223a6b9-5ae0-6902-ae09-000000002e00}12984C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000024744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:21:48.331{8223a6b9-5873-6902-a009-000000002e00}10724C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:21:48.983{8223a6b9-588e-6902-a609-000000002e00}1032C:\Users\Administrator\gpt4all\bin\chat.exesoc101win11\Administrator +534500x800000000000000024746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:22:19.030{8223a6b9-5b5a-6902-b809-000000002e00}12112C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:22:24.253{8223a6b9-5b5a-6902-b709-000000002e00}8360C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:22:59.047{8223a6b9-5b5a-6902-b909-000000002e00}3196C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000024749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:23:19.271{8223a6b9-5b5a-6902-b609-000000002e00}2092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:23:20.615{8223a6b9-5b5a-6902-b509-000000002e00}12720C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000024751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:23:49.355{8223a6b9-5bb5-6902-bb09-000000002e00}8456C:\Users\Administrator\Downloads\llama-b6872-bin-win-cpu-x64\llama-run.exesoc101win11\Administrator +534500x800000000000000024752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:23:58.588{8223a6b9-5bbd-6902-bc09-000000002e00}2304C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000024753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:24:28.005{8223a6b9-5bbd-6902-bd09-000000002e00}1820C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000024754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:24:50.352{8223a6b9-5b4c-6902-b209-000000002e00}884C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:25:16.773{8223a6b9-5ae0-6902-af09-000000002e00}584C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:26:58.229{8223a6b9-5b45-6902-b109-000000002e00}11612C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000024757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:27:18.643{8223a6b9-5b5a-6902-b409-000000002e00}9044C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:28:27.659{8223a6b9-5c8f-6902-be09-000000002e00}2596C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exesoc101win11\Administrator +534500x800000000000000024759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:28:27.771{8223a6b9-5c8f-6902-c009-000000002e00}10260C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exesoc101win11\Administrator +534500x800000000000000024760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:28:29.834{8223a6b9-5b98-6902-ba09-000000002e00}11824C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:29:03.110{8223a6b9-5a95-6902-ab09-000000002e00}788C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:32:13.263{8223a6b9-5dad-6902-c309-000000002e00}5508C:\Program Files\Git\mingw64\bin\git.exesoc101win11\Administrator +534500x800000000000000024763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:32:13.268{8223a6b9-5dad-6902-c109-000000002e00}11240C:\Program Files\Git\cmd\git.exesoc101win11\Administrator +534500x800000000000000024764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:32:13.270{8223a6b9-5dad-6902-c209-000000002e00}11516C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:32:27.516{8223a6b9-5c8f-6902-bf09-000000002e00}3560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +16341600x800000000000000024766Microsoft-Windows-Sysmon/Operationalsoc101win112025-10-29 18:33:00.231C:\Users\research\Desktop\systernals\sysmon-local-llms-all.xmlSHA256=459C27461769E9048E2FE4C6632E2C761F2FC5D4ED5E22CBC52A2B58C0A47B29 +534500x800000000000000024767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:33:00.235{8223a6b9-5ddc-6902-c709-000000002e00}10876C:\Users\research\Desktop\systernals\Sysmon64.exesoc101win11\Administrator +534500x800000000000000024768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:34:43.629{8223a6b9-5dad-6902-c509-000000002e00}12800C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:34:52.211{8223a6b9-5dad-6902-c409-000000002e00}4016C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:36:19.825{8223a6b9-5ea3-6902-cc09-000000002e00}8228C:\Users\Administrator\Downloads\llama-b6872-bin-win-cpu-x64\llama-run.exesoc101win11\Administrator +534500x800000000000000024771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:36:53.928{8223a6b9-5ec5-6902-d009-000000002e00}12848C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:37:29.803{8223a6b9-5dbb-6902-c609-000000002e00}7108C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:37:30.606{8223a6b9-5eea-6902-d109-000000002e00}2292C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:37:30.606{8223a6b9-5eea-6902-d209-000000002e00}7588C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:38:12.888{8223a6b9-5f14-6902-d409-000000002e00}10724C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:38:12.891{8223a6b9-5f14-6902-d509-000000002e00}120C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:39:24.860{8223a6b9-5f5a-6902-d809-000000002e00}12308C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:39:33.892{8223a6b9-5f5d-6902-dc09-000000002e00}13188C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:39:33.892{8223a6b9-5f61-6902-dd09-000000002e00}1724C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:40:47.154{8223a6b9-5ebf-6902-cd09-000000002e00}4012C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:40:59.619{8223a6b9-5fba-6902-e309-000000002e00}6560C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:10.745{8223a6b9-5fc5-6902-e809-000000002e00}2840C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:12.353{8223a6b9-5fc8-6902-e909-000000002e00}13040C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:12.378{8223a6b9-5fc8-6902-ea09-000000002e00}7316C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:14.046{8223a6b9-5fc9-6902-eb09-000000002e00}10764C:\Users\ADMINI~1\AppData\Local\Temp\_MEI129762\simpleclinfo.exesoc101win11\Administrator +534500x800000000000000024786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:14.148{8223a6b9-5fca-6902-ec09-000000002e00}12004C:\Users\ADMINI~1\AppData\Local\Temp\_MEI129762\simplecpuinfo.exesoc101win11\Administrator +534500x800000000000000024787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:23.160{8223a6b9-5fd3-6902-ed09-000000002e00}1068C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:23.160{8223a6b9-5fd3-6902-ee09-000000002e00}3604C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +22542200x800000000000000024789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:43.032{8223a6b9-5fc5-6902-e709-000000002e00}6740huggingface.co0::ffff:3.166.152.110;::ffff:3.166.152.65;::ffff:3.166.152.44;::ffff:3.166.152.105;C:\Users\Administrator\Downloads\koboldcpp-nocuda.exesoc101win11\Administrator +22542200x800000000000000024790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:45.851{8223a6b9-3793-6902-6100-000000002e00}4440huggingface.co03.166.152.110;3.166.152.65;3.166.152.44;3.166.152.105;C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +22542200x800000000000000024791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:45.853{8223a6b9-3793-6902-6100-000000002e00}4440raw.githubusercontent.com9701-C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +22542200x800000000000000024792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:45.856{8223a6b9-3793-6902-6100-000000002e00}4440release-assets.githubusercontent.com9701-C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +22542200x800000000000000024793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:45.856{8223a6b9-3793-6902-6100-000000002e00}4440api.gpt4all.io9701-C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +22542200x800000000000000024794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:45.862{8223a6b9-3793-6902-6100-000000002e00}4440gpt4all.io9701-C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +22542200x800000000000000024795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:45.865{8223a6b9-3793-6902-6100-000000002e00}4440cas-bridge.xethub.hf.co9701-C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +22542200x800000000000000024796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:41:45.870{8223a6b9-3793-6902-6100-000000002e00}4440ollama.com9701-C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exeNT AUTHORITY\SYSTEM +534500x800000000000000024797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:10.017{8223a6b9-5fc5-6902-e709-000000002e00}6740C:\Users\Administrator\Downloads\koboldcpp-nocuda.exesoc101win11\Administrator +534500x800000000000000024798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:10.529{8223a6b9-5fc1-6902-e409-000000002e00}12976C:\Users\Administrator\Downloads\koboldcpp-nocuda.exesoc101win11\Administrator +534500x800000000000000024799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:10.533{8223a6b9-5fc2-6902-e609-000000002e00}10620C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000024800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:10.537{8223a6b9-5fc2-6902-e509-000000002e00}7520C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:12.391{8223a6b9-5f78-6902-e009-000000002e00}2248C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:22.520{8223a6b9-600b-6902-ef09-000000002e00}11160C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:26.004{8223a6b9-6011-6902-f409-000000002e00}620C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000024804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:36.145{8223a6b9-6012-6902-f509-000000002e00}5116C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000024805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:45.382{8223a6b9-5fa0-6902-e209-000000002e00}5284C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:57.825{8223a6b9-6030-6902-f809-000000002e00}6440C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:42:58.987{8223a6b9-5f05-6902-d309-000000002e00}1236C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:43:03.529{8223a6b9-6037-6902-fa09-000000002e00}12004C:\Users\Administrator\Downloads\imyfone-nut-studio_setup.exesoc101win11\Administrator +534500x800000000000000024809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:43:09.831{8223a6b9-6011-6902-f309-000000002e00}8516C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:43:57.767{8223a6b9-606d-6902-ff09-000000002e00}2248C:\Windows\SysWOW64\taskkill.exesoc101win11\Administrator +534500x800000000000000024811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:43:57.771{8223a6b9-606d-6902-fd09-000000002e00}11804C:\Windows\SysWOW64\cmd.exesoc101win11\Administrator +534500x800000000000000024812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:43:57.775{8223a6b9-606d-6902-fe09-000000002e00}732C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:43:57.932{8223a6b9-606d-6902-020a-000000002e00}10916C:\Windows\SysWOW64\taskkill.exesoc101win11\Administrator +534500x800000000000000024814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:43:57.936{8223a6b9-606d-6902-000a-000000002e00}9336C:\Windows\SysWOW64\cmd.exesoc101win11\Administrator +534500x800000000000000024815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:43:57.940{8223a6b9-606d-6902-010a-000000002e00}2416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:44:03.180{8223a6b9-5e1b-6902-ca09-000000002e00}6432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:44:44.025{8223a6b9-5f64-6902-df09-000000002e00}12940C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000024818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:44:44.187{8223a6b9-602f-6902-f609-000000002e00}8208C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:10.933{8223a6b9-606c-6902-fc09-000000002e00}280C:\Users\ADMINI~1\AppData\Local\Temp\is-P1VPE.tmp\imyfone-download.tmpsoc101win11\Administrator +534500x800000000000000024820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:10.941{8223a6b9-606b-6902-fb09-000000002e00}6116C:\Program Files (x86)\imyfone_down\imyfone-nut-studio_setup\imyfone-download.exesoc101win11\Administrator +534500x800000000000000024821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:12.606{8223a6b9-60b8-6902-030a-000000002e00}5844C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:12.658{8223a6b9-60b8-6902-040a-000000002e00}4524C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:14.405{8223a6b9-602f-6902-f709-000000002e00}7556C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:15.393{8223a6b9-60bb-6902-080a-000000002e00}3180C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +534500x800000000000000024825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:19.043{8223a6b9-6036-6902-f909-000000002e00}8872C:\Users\Administrator\Downloads\imyfone-nut-studio_setup.exesoc101win11\Administrator +534500x800000000000000024826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:26.196{8223a6b9-60bb-6902-090a-000000002e00}11008C:\Program Files (x86)\Microsoft\Edge\Application\141.0.3537.99\identity_helper.exesoc101win11\Administrator +11241100x800000000000000024827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:29.077{8223a6b9-37ad-6902-b600-000000002e00}8068C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exeC:\Users\Administrator\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\start2.bin2025-09-03 13:55:02.761soc101win11\Administrator +534500x800000000000000024828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:34.582{8223a6b9-60ce-6902-120a-000000002e00}9256C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:34.584{8223a6b9-60ce-6902-130a-000000002e00}5104C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:42.392{8223a6b9-60d6-6902-140a-000000002e00}11036C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:42.394{8223a6b9-60d6-6902-150a-000000002e00}788C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:51.548{8223a6b9-60df-6902-1b0a-000000002e00}11692C:\Windows\System32\reg.exesoc101win11\Administrator +534500x800000000000000024833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:51.555{8223a6b9-60df-6902-190a-000000002e00}6608C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:51.563{8223a6b9-60df-6902-1a0a-000000002e00}13076C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:45:52.083{8223a6b9-60de-6902-170a-000000002e00}8296C:\Program Files (x86)\iMyFone\iMyFone Nut Studio\appAutoUpdate.exesoc101win11\Administrator +534500x800000000000000024836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:46:48.883{8223a6b9-6118-6902-1e0a-000000002e00}6100C:\Program Files (x86)\iMyFone\iMyFone Nut Studio\CefViewWing.exesoc101win11\Administrator +534500x800000000000000024837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:46:50.198{8223a6b9-611a-6902-1f0a-000000002e00}10772C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:46:50.201{8223a6b9-611a-6902-200a-000000002e00}9436C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:46:50.725{8223a6b9-60c4-6902-0c0a-000000002e00}856C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000024840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:46:57.939{8223a6b9-60b9-6902-060a-000000002e00}11876C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:48:48.685{8223a6b9-6100-6902-1d0a-000000002e00}4700C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:48:59.306{8223a6b9-5f53-6902-d709-000000002e00}4748C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:04.850{8223a6b9-61a0-6902-260a-000000002e00}10092C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:04.930{8223a6b9-61a0-6902-230a-000000002e00}10180C:\Windows\System32\UsoClient.exeNT AUTHORITY\SYSTEM +534500x800000000000000024845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:08.132{8223a6b9-61a3-6902-2b0a-000000002e00}13016C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +534500x800000000000000024846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:08.718{8223a6b9-5714-6902-5109-000000002e00}6612C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000024847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:25.651{8223a6b9-5f5c-6902-da09-000000002e00}10308C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:28.041{8223a6b9-5f5a-6902-d909-000000002e00}5980C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:35.384{8223a6b9-61a1-6902-280a-000000002e00}10836C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000024850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:44.871{8223a6b9-61a0-6902-270a-000000002e00}10856C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000024851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:49:53.183{8223a6b9-5f5c-6902-db09-000000002e00}13248C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:50:05.914{8223a6b9-61a0-6902-250a-000000002e00}5964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:50:09.251{8223a6b9-61a0-6902-240a-000000002e00}10504C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000024854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:50:19.839{8223a6b9-5ec2-6902-ce09-000000002e00}2704C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000024855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:51:07.263{8223a6b9-61a2-6902-2a0a-000000002e00}6904C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000024856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:51:07.267{8223a6b9-61a2-6902-290a-000000002e00}7744C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000024857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:51:22.261{8223a6b9-613a-6902-210a-000000002e00}9248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:52:20.441{8223a6b9-5f61-6902-de09-000000002e00}12848C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:52:24.670{8223a6b9-600e-6902-f009-000000002e00}11508C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:53:16.965{8223a6b9-5ec2-6902-cf09-000000002e00}10720C:\Windows\System32\mmc.exesoc101win11\Administrator +534500x800000000000000024861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:53:18.546{8223a6b9-629e-6902-300a-000000002e00}6864C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:53:53.907{8223a6b9-62a3-6902-310a-000000002e00}3612C:\Windows\System32\DataExchangeHost.exesoc101win11\Administrator +534500x800000000000000024863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:54:51.783{8223a6b9-6240-6902-2e0a-000000002e00}1448C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000024864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:56:21.188{8223a6b9-6355-6902-350a-000000002e00}7236C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:57:01.495{8223a6b9-6355-6902-360a-000000002e00}9304C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000024866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:57:09.538{8223a6b9-6385-6902-3c0a-000000002e00}8448C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:57:09.558{8223a6b9-6385-6902-3d0a-000000002e00}12380C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:57:10.469{8223a6b9-6386-6902-3e0a-000000002e00}11324C:\Users\ADMINI~1\AppData\Local\Temp\_MEI105322\simpleclinfo.exesoc101win11\Administrator +534500x800000000000000024869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:57:10.565{8223a6b9-6386-6902-3f0a-000000002e00}1140C:\Users\ADMINI~1\AppData\Local\Temp\_MEI105322\simplecpuinfo.exesoc101win11\Administrator +534500x800000000000000024870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:59:03.294{8223a6b9-619f-6902-220a-000000002e00}1916C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:59:04.016{8223a6b9-6380-6902-370a-000000002e00}1220C:\Windows\System32\dllhost.exesoc101win11\Administrator +534500x800000000000000024872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:59:41.320{8223a6b9-6383-6902-3b0a-000000002e00}10284C:\Users\Administrator\Downloads\koboldcpp-nocuda.exesoc101win11\Administrator +534500x800000000000000024873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:59:41.918{8223a6b9-6380-6902-380a-000000002e00}10532C:\Users\Administrator\Downloads\koboldcpp-nocuda.exesoc101win11\Administrator +534500x800000000000000024874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:59:41.924{8223a6b9-6380-6902-3a0a-000000002e00}2372C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.23.12811.0_x64__8wekyb3d8bbwe\OpenConsole.exesoc101win11\Administrator +534500x800000000000000024875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:59:41.928{8223a6b9-6380-6902-390a-000000002e00}7288C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:59:56.888{8223a6b9-60ba-6902-070a-000000002e00}13160C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 18:59:56.926{8223a6b9-60b8-6902-050a-000000002e00}156C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:00:01.426{8223a6b9-6431-6902-440a-000000002e00}5868C:\Windows\System32\wsqmcons.exeNT AUTHORITY\SYSTEM +534500x800000000000000024879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:00:24.848{8223a6b9-629e-6902-2f0a-000000002e00}2912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:00:40.279{8223a6b9-643a-6902-460a-000000002e00}11908C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:01:03.674{8223a6b9-646f-6902-470a-000000002e00}5576C:\Windows\System32\curl.exesoc101win11\Administrator +534500x800000000000000024882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:01:26.461{8223a6b9-6486-6902-490a-000000002e00}3828C:\Windows\System32\cmd.exesoc101win11\Administrator +534500x800000000000000024883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:02:05.694{8223a6b9-62a6-6902-320a-000000002e00}1068C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000024884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:02:09.284{8223a6b9-64ae-6902-4b0a-000000002e00}7628C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:03:15.730{8223a6b9-64f1-6902-4f0a-000000002e00}3596C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:03:24.432{8223a6b9-64f8-6902-520a-000000002e00}11168C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:03:41.054{8223a6b9-650c-6902-560a-000000002e00}4900C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:03:47.727{8223a6b9-61f2-6902-2d0a-000000002e00}10924C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +11241100x800000000000000024889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:03:58.364{8223a6b9-651c-6902-580a-000000002e00}9848C:\Users\Administrator\Downloads\Jan_0.7.2_x64-setup.exeC:\Users\Administrator\AppData\Local\Programs\Jan\resources\pre-install\janhq-conversational-extension-1.0.0.tgz2025-10-29 19:03:58.364soc101win11\Administrator +534500x800000000000000024890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:04.308{8223a6b9-651c-6902-580a-000000002e00}9848C:\Users\Administrator\Downloads\Jan_0.7.2_x64-setup.exesoc101win11\Administrator +11241100x800000000000000024891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:05.241{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\extensions\@janhq\assistant-extension\node_modules\@janhq\core\dist\browser\extensions\conversational.js2025-10-29 19:04:05.241soc101win11\Administrator +11241100x800000000000000024892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:05.975{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\extensions\@janhq\assistant-extension\node_modules\rxjs\tsconfig.json2025-10-29 19:04:05.975soc101win11\Administrator +11241100x800000000000000024893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:06.157{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\extensions\@janhq\assistant-extension\node_modules\@janhq\core\dist\browser\extensions\conversational.js.map2025-10-29 19:04:06.157soc101win11\Administrator +11241100x800000000000000024894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:10.924{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\extensions\@janhq\assistant-extension\node_modules\@janhq\core\dist\types\browser\extensions\conversational.d.ts2025-10-29 19:04:10.924soc101win11\Administrator +11241100x800000000000000024895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:12.640{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\extensions\@janhq\conversational-extension2025-10-29 19:04:12.640soc101win11\Administrator +11241100x800000000000000024896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:12.640{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\extensions\@janhq\conversational-extension\dist2025-10-29 19:04:12.640soc101win11\Administrator +11241100x800000000000000024897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:12.642{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\extensions\@janhq\conversational-extension\dist\index.js2025-10-29 19:04:12.640soc101win11\Administrator +11241100x800000000000000024898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:12.644{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\extensions\@janhq\conversational-extension\package.json2025-10-29 19:04:12.642soc101win11\Administrator +11241100x800000000000000024899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:16.226{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\jan.exeC:\Users\Administrator\AppData\Roaming\Jan\data\mcp_config.json2025-10-29 19:04:16.226soc101win11\Administrator +22542200x800000000000000024900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:16.825{8223a6b9-6524-6902-5a0a-000000002e00}10652release-assets.githubusercontent.com0::ffff:185.199.108.133;::ffff:185.199.111.133;::ffff:185.199.109.133;::ffff:185.199.110.133;C:\Users\Administrator\AppData\Local\Programs\Jan\Jan.exesoc101win11\Administrator +22542200x800000000000000024901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:21.814{8223a6b9-6524-6902-5a0a-000000002e00}10652release-assets.githubusercontent.com0::ffff:185.199.110.133;::ffff:185.199.108.133;::ffff:185.199.111.133;::ffff:185.199.109.133;C:\Users\Administrator\AppData\Local\Programs\Jan\Jan.exesoc101win11\Administrator +534500x800000000000000024902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:39.685{8223a6b9-6524-6902-5a0a-000000002e00}10652C:\Users\Administrator\AppData\Local\Programs\Jan\Jan.exesoc101win11\Administrator +534500x800000000000000024903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:39.693{8223a6b9-6524-6902-600a-000000002e00}6968C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:39.739{8223a6b9-6524-6902-5e0a-000000002e00}9604C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:39.756{8223a6b9-6524-6902-5f0a-000000002e00}544C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:39.764{8223a6b9-6524-6902-5d0a-000000002e00}8228C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:39.804{8223a6b9-6524-6902-5b0a-000000002e00}3280C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:39.828{8223a6b9-6524-6902-5c0a-000000002e00}1840C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:40.613{8223a6b9-6547-6902-620a-000000002e00}7016C:\Users\Administrator\AppData\Local\Programs\Jan\uninstall.exesoc101win11\Administrator +11241100x800000000000000024910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:41.959{8223a6b9-6546-6902-610a-000000002e00}4840C:\Users\Administrator\Downloads\Jan_0.7.2_x64-setup.exeC:\Users\Administrator\AppData\Local\Programs\Jan\resources\pre-install\janhq-conversational-extension-1.0.0.tgz2025-10-29 19:04:41.959soc101win11\Administrator +11241100x800000000000000024911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:43.603{8223a6b9-37ad-6902-b600-000000002e00}8068C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exeC:\Users\Administrator\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\start2.bin2025-09-03 13:55:02.761soc101win11\Administrator +534500x800000000000000024912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:48.516{8223a6b9-6546-6902-610a-000000002e00}4840C:\Users\Administrator\Downloads\Jan_0.7.2_x64-setup.exesoc101win11\Administrator +11241100x800000000000000024913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:52.091{8223a6b9-37ad-6902-b600-000000002e00}8068C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exeC:\Users\Administrator\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\start2.bin2025-09-03 13:55:02.761soc101win11\Administrator +22542200x800000000000000024914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:52.009{8223a6b9-6550-6902-630a-000000002e00}12092release-assets.githubusercontent.com0::ffff:185.199.110.133;::ffff:185.199.109.133;::ffff:185.199.111.133;::ffff:185.199.108.133;C:\Users\Administrator\AppData\Local\Programs\Jan\Jan.exesoc101win11\Administrator +534500x800000000000000024915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:04:57.375{8223a6b9-6436-6902-450a-000000002e00}7320C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000024916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:05:11.626{8223a6b9-64fb-6902-530a-000000002e00}3464C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:05:48.994{8223a6b9-658c-6902-6b0a-000000002e00}7708C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000024918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:05:51.335{8223a6b9-658c-6902-6a0a-000000002e00}3400C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000024919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:01.680{8223a6b9-6599-6902-6f0a-000000002e00}9932C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:16.853{8223a6b9-3793-6902-6000-000000002e00}4432C:\Program Files (x86)\ossec-agent\wazuh-agent.exeNT AUTHORITY\SYSTEM +534500x800000000000000024921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:18.212{8223a6b9-65aa-6902-710a-000000002e00}2076C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:20.703{8223a6b9-658d-6902-6e0a-000000002e00}7648C:\Windows\System32\sppsvc.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000024923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:29.022{8223a6b9-658c-6902-6c0a-000000002e00}7536C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000024924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:38.794{8223a6b9-65be-6902-720a-000000002e00}11564C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:45.288{8223a6b9-65c5-6902-730a-000000002e00}13264C:\Windows\System32\sdbinst.exeNT AUTHORITY\SYSTEM +534500x800000000000000024926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:45.288{8223a6b9-65c5-6902-740a-000000002e00}2224C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:47.525{8223a6b9-64fc-6902-540a-000000002e00}6328C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:06:48.954{8223a6b9-65c8-6902-750a-000000002e00}11320C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:07:03.480{8223a6b9-65d7-6902-760a-000000002e00}10616C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:07:32.449{8223a6b9-65f4-6902-770a-000000002e00}10200C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:07:33.718{8223a6b9-65f4-6902-780a-000000002e00}12824C:\Windows\System32\appidpolicyconverter.exeNT AUTHORITY\SYSTEM +534500x800000000000000024932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:07:33.718{8223a6b9-65f4-6902-790a-000000002e00}7480C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:08:05.428{8223a6b9-6615-6902-7a0a-000000002e00}6252C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:08:42.555{8223a6b9-663a-6902-7c0a-000000002e00}9908C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:09:23.855{8223a6b9-6663-6902-7d0a-000000002e00}9248C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:09:58.555{8223a6b9-642a-6902-400a-000000002e00}8392C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:10:02.428{8223a6b9-642d-6902-430a-000000002e00}12924C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:10:09.277{8223a6b9-6691-6902-7e0a-000000002e00}10004C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:10:52.086{8223a6b9-661d-6902-7b0a-000000002e00}3892C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000024940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:11:08.529{8223a6b9-659e-6902-700a-000000002e00}1128C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:11:13.045{8223a6b9-66d0-6902-800a-000000002e00}12924C:\Windows\System32\rundll32.exeNT AUTHORITY\SYSTEM +534500x800000000000000024942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:11:13.125{8223a6b9-66d1-6902-810a-000000002e00}9404C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:11:13.127{8223a6b9-66d1-6902-820a-000000002e00}5048C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000024944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:09.284{8223a6b9-658d-6902-6d0a-000000002e00}11936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:10.833{8223a6b9-64b1-6902-4c0a-000000002e00}8244C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:33.217{8223a6b9-60c3-6902-0b0a-000000002e00}9176C:\Program Files (x86)\iMyFone\iMyFone Nut Studio\CefViewWing.exesoc101win11\Administrator +534500x800000000000000024947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:33.525{8223a6b9-6721-6902-890a-000000002e00}4976C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:33.543{8223a6b9-6721-6902-8a0a-000000002e00}10692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:33.652{8223a6b9-6720-6902-870a-000000002e00}4052C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000024950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:33.729{8223a6b9-6721-6902-8d0a-000000002e00}4384C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:33.733{8223a6b9-6721-6902-8e0a-000000002e00}5608C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000024952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:34.243{8223a6b9-6722-6902-940a-000000002e00}13348C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Users\Administrator\AppData\Local\Programs\Ollama\soc101win11\Administrator{8223a6b9-37aa-6902-91ea-090000000000}0x9ea911HighSHA256=A9F9F07C38F90275DE99D3C28B105D7EA18DAD02D024D32D8A919E372363E9EF{8223a6b9-6721-6902-880a-000000002e00}10804C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe" soc101win11\Administrator +22542200x800000000000000024953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:33.275{8223a6b9-6721-6902-880a-000000002e00}10804ollama.com0::ffff:34.36.133.15;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000024954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:36.755{8223a6b9-6721-6902-8c0a-000000002e00}12848C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:38.472{8223a6b9-6726-6902-970a-000000002e00}13784C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:38.476{8223a6b9-6726-6902-980a-000000002e00}13792C:\Windows\System32\conhost.exesoc101win11\Administrator +22542200x800000000000000024957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:37.934{8223a6b9-6721-6902-880a-000000002e00}10804release-assets.githubusercontent.com0::ffff:185.199.109.133;::ffff:185.199.111.133;::ffff:185.199.110.133;::ffff:185.199.108.133;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000024958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:41.535{8223a6b9-6726-6902-990a-000000002e00}13968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:41.907{8223a6b9-6722-6902-940a-000000002e00}13348C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000024960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:45.468{8223a6b9-6721-6902-880a-000000002e00}10804C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000024961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:45.501{8223a6b9-6722-6902-950a-000000002e00}13440C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:45.537{8223a6b9-6722-6902-960a-000000002e00}13452C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:45.598{8223a6b9-6722-6902-920a-000000002e00}5880C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:45.612{8223a6b9-6722-6902-930a-000000002e00}5608C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:45.614{8223a6b9-6722-6902-910a-000000002e00}10912C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:45.649{8223a6b9-6722-6902-8f0a-000000002e00}8352C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:45.665{8223a6b9-6722-6902-900a-000000002e00}11260C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exesoc101win11\Administrator +534500x800000000000000024968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:48.254{8223a6b9-6730-6902-9d0a-000000002e00}5840C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000024969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:48.254{8223a6b9-6730-6902-9e0a-000000002e00}9412C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:48.755{8223a6b9-6730-6902-9f0a-000000002e00}13856C:\Windows\System32\taskkill.exesoc101win11\Administrator +534500x800000000000000024971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:48.771{8223a6b9-6730-6902-a00a-000000002e00}13848C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:51.767{8223a6b9-66d1-6902-830a-000000002e00}9568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:12:53.352{8223a6b9-66d0-6902-7f0a-000000002e00}7132C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000024974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:13:03.877{8223a6b9-64ab-6902-4a0a-000000002e00}11652C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:13:14.148{8223a6b9-64b2-6902-4d0a-000000002e00}12920C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:13:20.979{8223a6b9-64f3-6902-500a-000000002e00}7228C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000024977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:03.391{8223a6b9-6523-6902-590a-000000002e00}13188C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000024978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:18.847{8223a6b9-672d-6902-9c0a-000000002e00}13692C:\Users\ADMINI~1\AppData\Local\Temp\is-2EOGC.tmp\OllamaSetup.tmpsoc101win11\Administrator +534500x800000000000000024979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:18.868{8223a6b9-672a-6902-9b0a-000000002e00}14224C:\Users\Administrator\AppData\Local\Ollama\OllamaSetup.exesoc101win11\Administrator +534500x800000000000000024980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:19.795{8223a6b9-678b-6902-a40a-000000002e00}14104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:19.800{8223a6b9-678b-6902-a50a-000000002e00}14196C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000024982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:20.035{8223a6b9-678b-6902-a70a-000000002e00}6760C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000024983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:20.040{8223a6b9-678b-6902-a80a-000000002e00}6988C:\Windows\System32\conhost.exesoc101win11\Administrator +154100x800000000000000024984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:20.564{8223a6b9-678c-6902-a90a-000000002e00}4436C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe serveC:\Windows\System32\soc101win11\Administrator{8223a6b9-37aa-6902-91ea-090000000000}0x9ea911HighSHA256=389601FADDB2A3C085814975DD87423D2B9A30EB43A89C1A906EB452E816CF4C{8223a6b9-678b-6902-a30a-000000002e00}2832C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exe"soc101win11\Administrator +154100x800000000000000024985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:20.737{8223a6b9-678c-6902-ab0a-000000002e00}3400C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe runner --ollama-engine --port 31735C:\Windows\System32\soc101win11\Administrator{8223a6b9-37aa-6902-91ea-090000000000}0x9ea911HighSHA256=389601FADDB2A3C085814975DD87423D2B9A30EB43A89C1A906EB452E816CF4C{8223a6b9-678c-6902-a90a-000000002e00}4436C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe servesoc101win11\Administrator +10341000x800000000000000024986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:20.739{8223a6b9-678c-6902-a90a-000000002e00}443610220C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe{8223a6b9-678c-6902-ab0a-000000002e00}3400C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7f349|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7d68d|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7d703soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000024987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:20.784{8223a6b9-678c-6902-ab0a-000000002e00}3400C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\ADMINI~1\AppData\Local\Temp\3599824448.bin2025-10-29 19:14:20.784soc101win11\Administrator +22542200x800000000000000024988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:19.432{8223a6b9-678b-6902-a30a-000000002e00}2832ollama.com0::ffff:34.36.133.15;C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama app.exesoc101win11\Administrator +534500x800000000000000024989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:21.672{8223a6b9-678d-6902-ad0a-000000002e00}1568C:\Windows\System32\WerFault.exeNT AUTHORITY\SYSTEM +534500x800000000000000024990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:21.740{8223a6b9-678d-6902-ae0a-000000002e00}7260C:\Windows\System32\WerFault.exesoc101win11\Administrator +534500x800000000000000024991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:21.745{8223a6b9-678c-6902-ab0a-000000002e00}3400C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +154100x800000000000000024992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:21.774{8223a6b9-678d-6902-af0a-000000002e00}2600C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe runner --ollama-engine --port 31744C:\Windows\System32\soc101win11\Administrator{8223a6b9-37aa-6902-91ea-090000000000}0x9ea911HighSHA256=389601FADDB2A3C085814975DD87423D2B9A30EB43A89C1A906EB452E816CF4C{8223a6b9-678c-6902-a90a-000000002e00}4436C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe servesoc101win11\Administrator +10341000x800000000000000024993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:21.776{8223a6b9-678c-6902-a90a-000000002e00}443613836C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe{8223a6b9-678d-6902-af0a-000000002e00}2600C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7f349|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7d68d|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7d703soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000024994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:21.819{8223a6b9-678d-6902-af0a-000000002e00}2600C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\ADMINI~1\AppData\Local\Temp\487262793.bin2025-10-29 19:14:21.819soc101win11\Administrator +534500x800000000000000024995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:22.075{8223a6b9-678d-6902-af0a-000000002e00}2600C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +154100x800000000000000024996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:22.076{8223a6b9-678e-6902-b00a-000000002e00}6200C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe-----C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe runner --ollama-engine --port 31749C:\Windows\System32\soc101win11\Administrator{8223a6b9-37aa-6902-91ea-090000000000}0x9ea911HighSHA256=389601FADDB2A3C085814975DD87423D2B9A30EB43A89C1A906EB452E816CF4C{8223a6b9-678c-6902-a90a-000000002e00}4436C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe servesoc101win11\Administrator +10341000x800000000000000024997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:22.078{8223a6b9-678c-6902-a90a-000000002e00}44369304C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe{8223a6b9-678e-6902-b00a-000000002e00}6200C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe0x1fffffC:\WINDOWS\SYSTEM32\ntdll.dll+1642c4|C:\WINDOWS\System32\KERNELBASE.dll+fc4da|C:\WINDOWS\System32\KERNELBASE.dll+f9c16|C:\WINDOWS\System32\KERNEL32.DLL+3c6d4|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7f349|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7d68d|C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exe+7d703soc101win11\Administratorsoc101win11\Administrator +11241100x800000000000000024998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:22.121{8223a6b9-678e-6902-b00a-000000002e00}6200C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exeC:\Users\ADMINI~1\AppData\Local\Temp\452365104.bin2025-10-29 19:14:22.120soc101win11\Administrator +534500x800000000000000024999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:22.299{8223a6b9-678e-6902-b00a-000000002e00}6200C:\Users\Administrator\AppData\Local\Programs\Ollama\ollama.exesoc101win11\Administrator +534500x800000000000000025000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:23.056{8223a6b9-678b-6902-a60a-000000002e00}13896C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:24.735{8223a6b9-6790-6902-b10a-000000002e00}11828C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:24.750{8223a6b9-6790-6902-b20a-000000002e00}5296C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:27.765{8223a6b9-6790-6902-b30a-000000002e00}13328C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:29.793{8223a6b9-6795-6902-b40a-000000002e00}13444C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:29.801{8223a6b9-6795-6902-b50a-000000002e00}2080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:32.823{8223a6b9-6795-6902-b60a-000000002e00}13532C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:34.720{8223a6b9-679a-6902-b70a-000000002e00}2068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:34.726{8223a6b9-679a-6902-b80a-000000002e00}6180C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:37.747{8223a6b9-679a-6902-b90a-000000002e00}14292C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:39.811{8223a6b9-679f-6902-ba0a-000000002e00}13408C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:39.823{8223a6b9-679f-6902-bb0a-000000002e00}13400C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:42.815{8223a6b9-679f-6902-bc0a-000000002e00}4904C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:44.719{8223a6b9-67a4-6902-bd0a-000000002e00}8136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:44.724{8223a6b9-67a4-6902-be0a-000000002e00}8244C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:47.746{8223a6b9-67a4-6902-bf0a-000000002e00}13032C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:49.732{8223a6b9-67a9-6902-c00a-000000002e00}12200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:49.737{8223a6b9-67a9-6902-c10a-000000002e00}12880C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:52.743{8223a6b9-67a9-6902-c20a-000000002e00}12652C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:54.744{8223a6b9-67ae-6902-c30a-000000002e00}6672C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:54.751{8223a6b9-67ae-6902-c40a-000000002e00}11084C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:57.751{8223a6b9-67ae-6902-c50a-000000002e00}14228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:59.740{8223a6b9-67b3-6902-c60a-000000002e00}14112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:14:59.745{8223a6b9-67b3-6902-c70a-000000002e00}11116C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:02.765{8223a6b9-67b3-6902-c80a-000000002e00}6760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:04.743{8223a6b9-67b8-6902-c90a-000000002e00}10472C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:04.746{8223a6b9-67b8-6902-ca0a-000000002e00}13120C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:07.793{8223a6b9-67b8-6902-cb0a-000000002e00}9596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:09.724{8223a6b9-67bd-6902-cc0a-000000002e00}5324C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:09.732{8223a6b9-67bd-6902-cd0a-000000002e00}2600C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:12.802{8223a6b9-67bd-6902-ce0a-000000002e00}5068C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:14.771{8223a6b9-67c2-6902-cf0a-000000002e00}5476C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:14.776{8223a6b9-67c2-6902-d00a-000000002e00}2840C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:17.832{8223a6b9-67c2-6902-d10a-000000002e00}8140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:19.718{8223a6b9-67c7-6902-d20a-000000002e00}2060C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:19.729{8223a6b9-67c7-6902-d30a-000000002e00}7480C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:22.745{8223a6b9-67c7-6902-d40a-000000002e00}14244C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:24.742{8223a6b9-67cc-6902-d50a-000000002e00}6180C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:24.751{8223a6b9-67cc-6902-d60a-000000002e00}14100C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:27.766{8223a6b9-67cc-6902-d70a-000000002e00}10000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:29.806{8223a6b9-67d1-6902-d80a-000000002e00}14092C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:29.809{8223a6b9-67d1-6902-d90a-000000002e00}9588C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:32.826{8223a6b9-67d1-6902-da0a-000000002e00}14316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:34.779{8223a6b9-67d6-6902-db0a-000000002e00}6952C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:34.786{8223a6b9-67d6-6902-dc0a-000000002e00}1232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:37.794{8223a6b9-67d6-6902-dd0a-000000002e00}13400C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:39.719{8223a6b9-67db-6902-de0a-000000002e00}13756C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:39.724{8223a6b9-67db-6902-df0a-000000002e00}11516C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:42.739{8223a6b9-67db-6902-e00a-000000002e00}2228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:44.732{8223a6b9-67e0-6902-e10a-000000002e00}12752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:44.739{8223a6b9-67e0-6902-e20a-000000002e00}10184C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:47.744{8223a6b9-67e0-6902-e30a-000000002e00}12000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:49.715{8223a6b9-67e5-6902-e40a-000000002e00}4012C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:49.723{8223a6b9-67e5-6902-e50a-000000002e00}10560C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:52.742{8223a6b9-67e5-6902-e60a-000000002e00}14096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:54.880{8223a6b9-67ea-6902-e70a-000000002e00}10232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:54.888{8223a6b9-67ea-6902-e80a-000000002e00}14016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:57.885{8223a6b9-67ea-6902-e90a-000000002e00}13536C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:59.730{8223a6b9-67ef-6902-ea0a-000000002e00}14196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:15:59.737{8223a6b9-67ef-6902-eb0a-000000002e00}10544C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:02.749{8223a6b9-67ef-6902-ec0a-000000002e00}11116C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:04.739{8223a6b9-67f4-6902-ed0a-000000002e00}7880C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:04.743{8223a6b9-67f4-6902-ee0a-000000002e00}1600C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:07.763{8223a6b9-67f4-6902-ef0a-000000002e00}4200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:09.736{8223a6b9-67f9-6902-f00a-000000002e00}13600C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:09.743{8223a6b9-67f9-6902-f10a-000000002e00}11320C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:12.812{8223a6b9-67f9-6902-f20a-000000002e00}14068C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:14.780{8223a6b9-67fe-6902-f30a-000000002e00}6036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:14.784{8223a6b9-67fe-6902-f40a-000000002e00}13704C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:17.841{8223a6b9-67fe-6902-f50a-000000002e00}1800C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:19.748{8223a6b9-6803-6902-f60a-000000002e00}13528C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:19.762{8223a6b9-6803-6902-f70a-000000002e00}6832C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:21.593{8223a6b9-678d-6902-ac0a-000000002e00}13840C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:22.777{8223a6b9-6803-6902-f80a-000000002e00}14296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:24.761{8223a6b9-6808-6902-f90a-000000002e00}9776C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:24.765{8223a6b9-6808-6902-fa0a-000000002e00}10900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:27.773{8223a6b9-6808-6902-fb0a-000000002e00}11260C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:29.024{8223a6b9-671d-6902-860a-000000002e00}1140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:29.754{8223a6b9-680d-6902-fc0a-000000002e00}14292C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:29.762{8223a6b9-680d-6902-fd0a-000000002e00}6944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:32.778{8223a6b9-680d-6902-fe0a-000000002e00}13728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:34.884{8223a6b9-6812-6902-ff0a-000000002e00}13940C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:34.894{8223a6b9-6812-6902-000b-000000002e00}3780C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:37.906{8223a6b9-6812-6902-010b-000000002e00}5484C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:39.724{8223a6b9-6817-6902-020b-000000002e00}11876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:39.728{8223a6b9-6817-6902-030b-000000002e00}10692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:42.743{8223a6b9-6817-6902-040b-000000002e00}9248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:44.789{8223a6b9-681c-6902-050b-000000002e00}2160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:44.793{8223a6b9-681c-6902-060b-000000002e00}7708C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:47.794{8223a6b9-681c-6902-070b-000000002e00}13436C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:49.961{8223a6b9-6821-6902-080b-000000002e00}2808C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:49.966{8223a6b9-6821-6902-090b-000000002e00}10088C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:52.974{8223a6b9-6821-6902-0a0b-000000002e00}10560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:54.832{8223a6b9-6826-6902-0b0b-000000002e00}13716C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:54.837{8223a6b9-6826-6902-0c0b-000000002e00}13440C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:57.862{8223a6b9-6826-6902-0d0b-000000002e00}1732C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:59.753{8223a6b9-682b-6902-0e0b-000000002e00}11212C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:16:59.765{8223a6b9-682b-6902-0f0b-000000002e00}14020C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:02.779{8223a6b9-682b-6902-100b-000000002e00}10164C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:04.814{8223a6b9-6830-6902-110b-000000002e00}8228C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:04.824{8223a6b9-6830-6902-120b-000000002e00}10536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:07.816{8223a6b9-6830-6902-130b-000000002e00}13156C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:09.836{8223a6b9-6835-6902-140b-000000002e00}6032C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:09.844{8223a6b9-6835-6902-150b-000000002e00}13600C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:12.866{8223a6b9-6835-6902-160b-000000002e00}13336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:14.727{8223a6b9-683a-6902-170b-000000002e00}6788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:14.730{8223a6b9-683a-6902-180b-000000002e00}1112C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:17.758{8223a6b9-683a-6902-190b-000000002e00}11904C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:19.736{8223a6b9-683f-6902-1a0b-000000002e00}10368C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:19.742{8223a6b9-683f-6902-1b0b-000000002e00}8512C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:22.750{8223a6b9-683f-6902-1c0b-000000002e00}10836C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:24.718{8223a6b9-6844-6902-1d0b-000000002e00}14244C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:24.724{8223a6b9-6844-6902-1e0b-000000002e00}9300C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:27.726{8223a6b9-6844-6902-1f0b-000000002e00}584C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:29.768{8223a6b9-6849-6902-200b-000000002e00}11524C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:29.772{8223a6b9-6849-6902-210b-000000002e00}13580C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:32.776{8223a6b9-6849-6902-220b-000000002e00}4072C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:33.736{8223a6b9-651b-6902-570a-000000002e00}10516C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000025118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:34.731{8223a6b9-684e-6902-230b-000000002e00}13964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:34.737{8223a6b9-684e-6902-240b-000000002e00}6944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:37.806{8223a6b9-684e-6902-250b-000000002e00}13728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:39.804{8223a6b9-6853-6902-260b-000000002e00}10140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:39.810{8223a6b9-6853-6902-270b-000000002e00}3140C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:42.877{8223a6b9-6853-6902-280b-000000002e00}13632C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:44.774{8223a6b9-6858-6902-290b-000000002e00}10592C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:44.779{8223a6b9-6858-6902-2a0b-000000002e00}14000C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:47.777{8223a6b9-6858-6902-2b0b-000000002e00}13388C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:49.719{8223a6b9-685d-6902-2c0b-000000002e00}3672C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:49.725{8223a6b9-685d-6902-2d0b-000000002e00}6284C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:49.767{8223a6b9-6726-6902-9a0a-000000002e00}13992C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000025130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:52.742{8223a6b9-685d-6902-2e0b-000000002e00}13116C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:54.773{8223a6b9-6862-6902-2f0b-000000002e00}14232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:54.781{8223a6b9-6862-6902-300b-000000002e00}2948C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:57.796{8223a6b9-6862-6902-310b-000000002e00}7984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:59.751{8223a6b9-6867-6902-320b-000000002e00}8232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:17:59.754{8223a6b9-6867-6902-330b-000000002e00}12304C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:02.764{8223a6b9-6867-6902-340b-000000002e00}12784C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:04.740{8223a6b9-686c-6902-350b-000000002e00}14112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:04.745{8223a6b9-686c-6902-360b-000000002e00}10708C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:07.742{8223a6b9-686c-6902-370b-000000002e00}10772C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:09.760{8223a6b9-6871-6902-380b-000000002e00}11320C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:09.766{8223a6b9-6871-6902-390b-000000002e00}3400C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:12.786{8223a6b9-6871-6902-3a0b-000000002e00}13396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:14.725{8223a6b9-6876-6902-3b0b-000000002e00}14288C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:14.734{8223a6b9-6876-6902-3c0b-000000002e00}13688C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:17.734{8223a6b9-6876-6902-3d0b-000000002e00}11144C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:19.743{8223a6b9-687b-6902-3e0b-000000002e00}8544C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:19.754{8223a6b9-687b-6902-3f0b-000000002e00}6832C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:22.806{8223a6b9-687b-6902-400b-000000002e00}7460C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:24.760{8223a6b9-6880-6902-410b-000000002e00}3200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:24.764{8223a6b9-6880-6902-420b-000000002e00}7472C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:27.816{8223a6b9-6880-6902-430b-000000002e00}6200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:29.733{8223a6b9-6885-6902-440b-000000002e00}13916C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:29.739{8223a6b9-6885-6902-450b-000000002e00}11968C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:32.744{8223a6b9-6885-6902-460b-000000002e00}6088C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:34.738{8223a6b9-688a-6902-480b-000000002e00}10140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:34.743{8223a6b9-688a-6902-490b-000000002e00}13904C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:37.755{8223a6b9-688a-6902-4a0b-000000002e00}9960C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:39.756{8223a6b9-688f-6902-4b0b-000000002e00}5136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:39.764{8223a6b9-688f-6902-4c0b-000000002e00}2092C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:42.777{8223a6b9-688f-6902-4d0b-000000002e00}5104C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:44.738{8223a6b9-6894-6902-4e0b-000000002e00}2132C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:44.746{8223a6b9-6894-6902-4f0b-000000002e00}8148C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:47.758{8223a6b9-6894-6902-500b-000000002e00}13432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:49.760{8223a6b9-6899-6902-510b-000000002e00}12820C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:49.773{8223a6b9-6899-6902-520b-000000002e00}6860C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:52.798{8223a6b9-6899-6902-530b-000000002e00}10560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:54.729{8223a6b9-689e-6902-540b-000000002e00}2260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:54.737{8223a6b9-689e-6902-550b-000000002e00}7984C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:57.742{8223a6b9-689e-6902-560b-000000002e00}3128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:59.751{8223a6b9-68a3-6902-570b-000000002e00}2760C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:18:59.756{8223a6b9-68a3-6902-580b-000000002e00}13372C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:02.781{8223a6b9-68a3-6902-590b-000000002e00}6760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:04.730{8223a6b9-68a8-6902-5b0b-000000002e00}12652C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:04.743{8223a6b9-68a8-6902-5c0b-000000002e00}13264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:07.749{8223a6b9-68a8-6902-5d0b-000000002e00}12924C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:09.753{8223a6b9-68ad-6902-5e0b-000000002e00}13176C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:09.760{8223a6b9-68ad-6902-5f0b-000000002e00}1592C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:12.771{8223a6b9-68ad-6902-600b-000000002e00}9908C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:14.758{8223a6b9-68b2-6902-610b-000000002e00}10500C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:14.767{8223a6b9-68b2-6902-620b-000000002e00}11144C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:17.817{8223a6b9-68b2-6902-630b-000000002e00}9296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:19.726{8223a6b9-68b7-6902-640b-000000002e00}3180C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:19.729{8223a6b9-68b7-6902-650b-000000002e00}4716C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:22.735{8223a6b9-68b7-6902-660b-000000002e00}1780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:24.753{8223a6b9-68bc-6902-670b-000000002e00}14072C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:24.758{8223a6b9-68bc-6902-680b-000000002e00}11588C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:27.769{8223a6b9-68bc-6902-690b-000000002e00}10756C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:29.782{8223a6b9-68c1-6902-6a0b-000000002e00}4904C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:29.788{8223a6b9-68c1-6902-6b0b-000000002e00}936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:32.794{8223a6b9-68c1-6902-6c0b-000000002e00}11740C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:34.738{8223a6b9-68c6-6902-6d0b-000000002e00}12720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:34.743{8223a6b9-68c6-6902-6e0b-000000002e00}11876C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:37.750{8223a6b9-68c6-6902-6f0b-000000002e00}7436C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:39.766{8223a6b9-68cb-6902-700b-000000002e00}11132C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:39.774{8223a6b9-68cb-6902-710b-000000002e00}13428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:42.789{8223a6b9-68cb-6902-720b-000000002e00}12948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:44.817{8223a6b9-68d0-6902-750b-000000002e00}14228C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:44.822{8223a6b9-68d0-6902-760b-000000002e00}1584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:47.840{8223a6b9-68d0-6902-770b-000000002e00}10544C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:49.824{8223a6b9-68d5-6902-780b-000000002e00}7332C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:49.832{8223a6b9-68d5-6902-790b-000000002e00}3372C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:52.845{8223a6b9-68d5-6902-7a0b-000000002e00}3892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:54.849{8223a6b9-68da-6902-7b0b-000000002e00}6252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:54.856{8223a6b9-68da-6902-7c0b-000000002e00}10396C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:57.863{8223a6b9-68da-6902-7d0b-000000002e00}11016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:59.703{8223a6b9-68df-6902-7e0b-000000002e00}12016C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:19:59.723{8223a6b9-68df-6902-7f0b-000000002e00}13936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:02.707{8223a6b9-68df-6902-800b-000000002e00}10500C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:04.769{8223a6b9-68e4-6902-810b-000000002e00}14036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:04.773{8223a6b9-68e4-6902-820b-000000002e00}1940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:07.780{8223a6b9-68e4-6902-830b-000000002e00}12876C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:09.730{8223a6b9-68e9-6902-840b-000000002e00}4784C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:09.737{8223a6b9-68e9-6902-850b-000000002e00}10900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:12.779{8223a6b9-68e9-6902-860b-000000002e00}10844C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:14.709{8223a6b9-68ee-6902-870b-000000002e00}8352C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:14.727{8223a6b9-68ee-6902-880b-000000002e00}4520C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:16.768{8223a6b9-68f0-6902-8a0b-000000002e00}13412C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000025218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:17.726{8223a6b9-68ee-6902-890b-000000002e00}3780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:19.718{8223a6b9-68f3-6902-8b0b-000000002e00}13316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:19.737{8223a6b9-68f3-6902-8c0b-000000002e00}11744C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:22.745{8223a6b9-68f3-6902-8d0b-000000002e00}7524C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:24.822{8223a6b9-68f8-6902-8e0b-000000002e00}14192C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:24.827{8223a6b9-68f8-6902-8f0b-000000002e00}2132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:27.839{8223a6b9-68f8-6902-900b-000000002e00}9024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:29.717{8223a6b9-68fd-6902-910b-000000002e00}5956C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:29.735{8223a6b9-68fd-6902-920b-000000002e00}14208C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:32.751{8223a6b9-68fd-6902-930b-000000002e00}3752C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:34.753{8223a6b9-6902-6902-940b-000000002e00}12304C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:34.757{8223a6b9-6902-6902-950b-000000002e00}3128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:37.755{8223a6b9-6902-6902-960b-000000002e00}11616C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:39.739{8223a6b9-6907-6902-970b-000000002e00}9564C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:39.742{8223a6b9-6907-6902-980b-000000002e00}4800C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:42.751{8223a6b9-6907-6902-990b-000000002e00}11900C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:43.913{8223a6b9-68cd-6902-730b-000000002e00}5836C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:44.749{8223a6b9-690c-6902-9a0b-000000002e00}6252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:44.758{8223a6b9-690c-6902-9b0b-000000002e00}5652C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:47.773{8223a6b9-690c-6902-9c0b-000000002e00}13092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:49.987{8223a6b9-6911-6902-9f0b-000000002e00}3120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:49.991{8223a6b9-6911-6902-a00b-000000002e00}14272C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:52.993{8223a6b9-6911-6902-a10b-000000002e00}13364C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:54.770{8223a6b9-6916-6902-a20b-000000002e00}7236C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:54.773{8223a6b9-6916-6902-a30b-000000002e00}584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:57.779{8223a6b9-6916-6902-a40b-000000002e00}11664C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:59.779{8223a6b9-691b-6902-a50b-000000002e00}13688C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:20:59.786{8223a6b9-691b-6902-a60b-000000002e00}6836C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:02.791{8223a6b9-691b-6902-a70b-000000002e00}13860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:04.775{8223a6b9-6920-6902-a80b-000000002e00}10140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:04.781{8223a6b9-6920-6902-a90b-000000002e00}4084C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:07.784{8223a6b9-6920-6902-aa0b-000000002e00}4428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:09.758{8223a6b9-6925-6902-ae0b-000000002e00}1964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:09.764{8223a6b9-6925-6902-af0b-000000002e00}13428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:12.778{8223a6b9-6925-6902-b00b-000000002e00}13916C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:14.757{8223a6b9-692a-6902-b10b-000000002e00}11000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:14.762{8223a6b9-692a-6902-b20b-000000002e00}3056C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:17.772{8223a6b9-692a-6902-b30b-000000002e00}13224C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:19.811{8223a6b9-692f-6902-b40b-000000002e00}5480C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:19.817{8223a6b9-692f-6902-b50b-000000002e00}11116C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:22.847{8223a6b9-692f-6902-b60b-000000002e00}13756C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:24.848{8223a6b9-6934-6902-b90b-000000002e00}1552C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:24.857{8223a6b9-6934-6902-ba0b-000000002e00}10468C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:27.565{8223a6b9-6936-6902-be0b-000000002e00}10000C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:27.874{8223a6b9-6934-6902-bc0b-000000002e00}12784C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:30.338{8223a6b9-6939-6902-c10b-000000002e00}6508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:30.346{8223a6b9-6939-6902-c20b-000000002e00}13664C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:33.358{8223a6b9-693a-6902-c30b-000000002e00}14252C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:35.223{8223a6b9-693e-6902-c40b-000000002e00}9692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:35.230{8223a6b9-693e-6902-c50b-000000002e00}3780C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:37.959{8223a6b9-6939-6902-c00b-000000002e00}5628C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:38.234{8223a6b9-693f-6902-c60b-000000002e00}7708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:39.804{8223a6b9-6943-6902-ce0b-000000002e00}10560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:39.808{8223a6b9-6943-6902-cf0b-000000002e00}13896C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:42.826{8223a6b9-6943-6902-d00b-000000002e00}13408C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:44.795{8223a6b9-6948-6902-d10b-000000002e00}10548C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:44.800{8223a6b9-6948-6902-d20b-000000002e00}3752C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:47.814{8223a6b9-6948-6902-d30b-000000002e00}13500C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:49.916{8223a6b9-694d-6902-d40b-000000002e00}13708C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:49.922{8223a6b9-694d-6902-d50b-000000002e00}7536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:52.941{8223a6b9-694d-6902-d60b-000000002e00}13704C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:54.804{8223a6b9-6952-6902-d70b-000000002e00}10772C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:54.809{8223a6b9-6952-6902-d80b-000000002e00}11092C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:57.823{8223a6b9-6952-6902-d90b-000000002e00}10472C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:59.776{8223a6b9-6957-6902-da0b-000000002e00}12944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:21:59.781{8223a6b9-6957-6902-db0b-000000002e00}5676C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:02.785{8223a6b9-6957-6902-dc0b-000000002e00}6200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:04.779{8223a6b9-695c-6902-dd0b-000000002e00}13416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:04.784{8223a6b9-695c-6902-de0b-000000002e00}14080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:07.797{8223a6b9-695c-6902-df0b-000000002e00}10036C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:09.665{8223a6b9-6925-6902-ab0b-000000002e00}13316C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000025289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:09.756{8223a6b9-6961-6902-e00b-000000002e00}8140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:09.760{8223a6b9-6961-6902-e10b-000000002e00}12920C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:12.772{8223a6b9-6961-6902-e20b-000000002e00}8948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:14.739{8223a6b9-6966-6902-e30b-000000002e00}10908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:14.742{8223a6b9-6966-6902-e40b-000000002e00}12160C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:17.754{8223a6b9-6966-6902-e50b-000000002e00}584C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:19.748{8223a6b9-696b-6902-e60b-000000002e00}10772C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:19.753{8223a6b9-696b-6902-e70b-000000002e00}10636C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:22.809{8223a6b9-696b-6902-e80b-000000002e00}4520C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:24.754{8223a6b9-6970-6902-e90b-000000002e00}9884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:24.758{8223a6b9-6970-6902-ea0b-000000002e00}1804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:27.783{8223a6b9-6970-6902-eb0b-000000002e00}4428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:29.738{8223a6b9-6975-6902-ec0b-000000002e00}13616C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:29.744{8223a6b9-6975-6902-ed0b-000000002e00}13880C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:32.748{8223a6b9-6975-6902-ee0b-000000002e00}11144C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:34.811{8223a6b9-697a-6902-ef0b-000000002e00}9248C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:34.815{8223a6b9-697a-6902-f00b-000000002e00}13540C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:37.833{8223a6b9-697a-6902-f10b-000000002e00}7636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:39.668{8223a6b9-6925-6902-ad0b-000000002e00}4728C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000025308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:39.750{8223a6b9-697f-6902-f20b-000000002e00}14324C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:39.757{8223a6b9-697f-6902-f30b-000000002e00}924C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:42.764{8223a6b9-697f-6902-f40b-000000002e00}11016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:44.774{8223a6b9-6984-6902-f60b-000000002e00}3664C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:44.778{8223a6b9-6984-6902-f70b-000000002e00}3892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:47.784{8223a6b9-6984-6902-f80b-000000002e00}9852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:49.757{8223a6b9-6989-6902-f90b-000000002e00}9940C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:49.764{8223a6b9-6989-6902-fa0b-000000002e00}9884C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:52.763{8223a6b9-6989-6902-fb0b-000000002e00}8644C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:54.743{8223a6b9-698e-6902-fc0b-000000002e00}1860C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:54.746{8223a6b9-698e-6902-fd0b-000000002e00}14132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:57.766{8223a6b9-698e-6902-fe0b-000000002e00}3140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:59.743{8223a6b9-6993-6902-ff0b-000000002e00}7524C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:22:59.747{8223a6b9-6993-6902-000c-000000002e00}8140C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:02.161{8223a6b9-6941-6902-c80b-000000002e00}13556C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:02.205{8223a6b9-6934-6902-b80b-000000002e00}10800C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:02.763{8223a6b9-6993-6902-010c-000000002e00}2060C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:04.991{8223a6b9-6998-6902-030c-000000002e00}11216C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:04.998{8223a6b9-6998-6902-040c-000000002e00}10384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:08.012{8223a6b9-6998-6902-050c-000000002e00}12776C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:09.820{8223a6b9-699d-6902-060c-000000002e00}12720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:09.825{8223a6b9-699d-6902-070c-000000002e00}12408C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:12.861{8223a6b9-699d-6902-080c-000000002e00}1804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:14.784{8223a6b9-69a2-6902-0b0c-000000002e00}13448C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:14.801{8223a6b9-69a2-6902-0c0c-000000002e00}856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:17.810{8223a6b9-69a2-6902-0d0c-000000002e00}14084C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:19.836{8223a6b9-69a7-6902-0e0c-000000002e00}13424C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:19.840{8223a6b9-69a7-6902-0f0c-000000002e00}3000C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:22.856{8223a6b9-69a7-6902-100c-000000002e00}13564C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:24.709{8223a6b9-69ac-6902-110c-000000002e00}6560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:24.726{8223a6b9-69ac-6902-120c-000000002e00}12880C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:27.763{8223a6b9-69ac-6902-130c-000000002e00}3596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:29.762{8223a6b9-69b1-6902-140c-000000002e00}13860C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:29.766{8223a6b9-69b1-6902-150c-000000002e00}14052C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:32.787{8223a6b9-69b1-6902-160c-000000002e00}12408C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:34.776{8223a6b9-69b6-6902-170c-000000002e00}9788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:34.786{8223a6b9-69b6-6902-180c-000000002e00}5328C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:34.997{8223a6b9-69a0-6902-090c-000000002e00}13696C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:37.840{8223a6b9-69b6-6902-190c-000000002e00}8936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:39.052{8223a6b9-6996-6902-020c-000000002e00}14192C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:39.879{8223a6b9-69bb-6902-1b0c-000000002e00}1552C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:39.889{8223a6b9-69bb-6902-1c0c-000000002e00}13448C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:42.946{8223a6b9-69bb-6902-1d0c-000000002e00}13340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:44.773{8223a6b9-69c0-6902-1e0c-000000002e00}13988C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:44.780{8223a6b9-69c0-6902-1f0c-000000002e00}5964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:47.787{8223a6b9-69c0-6902-200c-000000002e00}8140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:49.785{8223a6b9-69c5-6902-210c-000000002e00}1080C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:49.790{8223a6b9-69c5-6902-220c-000000002e00}13884C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:50.573{8223a6b9-69bb-6902-1a0c-000000002e00}2360C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:52.804{8223a6b9-69c5-6902-230c-000000002e00}1112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:54.753{8223a6b9-69ca-6902-240c-000000002e00}14160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:54.758{8223a6b9-69ca-6902-250c-000000002e00}5000C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:57.773{8223a6b9-69ca-6902-260c-000000002e00}9788C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:59.846{8223a6b9-69cf-6902-270c-000000002e00}12904C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:23:59.850{8223a6b9-69cf-6902-280c-000000002e00}13224C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:02.866{8223a6b9-69cf-6902-290c-000000002e00}13852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:04.771{8223a6b9-69d4-6902-2a0c-000000002e00}14280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:04.776{8223a6b9-69d4-6902-2b0c-000000002e00}8392C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:07.782{8223a6b9-69d4-6902-2c0c-000000002e00}4728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:09.746{8223a6b9-69d9-6902-2d0c-000000002e00}10380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:09.750{8223a6b9-69d9-6902-2e0c-000000002e00}1552C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:12.749{8223a6b9-69d9-6902-2f0c-000000002e00}11780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:14.731{8223a6b9-69de-6902-300c-000000002e00}5300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:14.736{8223a6b9-69de-6902-310c-000000002e00}1720C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:17.747{8223a6b9-69de-6902-320c-000000002e00}3420C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:19.982{8223a6b9-69e3-6902-330c-000000002e00}14072C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:19.985{8223a6b9-69e3-6902-340c-000000002e00}1240C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:23.000{8223a6b9-69e3-6902-350c-000000002e00}1232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:24.784{8223a6b9-69e8-6902-360c-000000002e00}2172C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:24.789{8223a6b9-69e8-6902-370c-000000002e00}11084C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:27.808{8223a6b9-69e8-6902-380c-000000002e00}840C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:29.786{8223a6b9-69ed-6902-3a0c-000000002e00}1140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:29.791{8223a6b9-69ed-6902-3b0c-000000002e00}392C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:32.797{8223a6b9-69ed-6902-3c0c-000000002e00}5544C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:34.983{8223a6b9-69f2-6902-3d0c-000000002e00}14280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:34.989{8223a6b9-69f2-6902-3e0c-000000002e00}4012C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:37.993{8223a6b9-69f2-6902-3f0c-000000002e00}8244C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:39.809{8223a6b9-69f7-6902-400c-000000002e00}2228C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:39.813{8223a6b9-69f7-6902-410c-000000002e00}11116C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:40.077{8223a6b9-69e9-6902-390c-000000002e00}3720C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:42.828{8223a6b9-69f7-6902-420c-000000002e00}2280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:43.941{8223a6b9-6910-6902-9e0b-000000002e00}6004C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:43.941{8223a6b9-690d-6902-9d0b-000000002e00}14276C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:44.746{8223a6b9-69fc-6902-430c-000000002e00}5300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:44.754{8223a6b9-69fc-6902-440c-000000002e00}1572C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:47.761{8223a6b9-69fc-6902-450c-000000002e00}7708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:49.760{8223a6b9-6a01-6902-460c-000000002e00}14072C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:49.763{8223a6b9-6a01-6902-470c-000000002e00}5868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:51.255{8223a6b9-6981-6902-f50b-000000002e00}13916C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000025397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:52.790{8223a6b9-6a01-6902-480c-000000002e00}3248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:54.754{8223a6b9-6a06-6902-4a0c-000000002e00}13420C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:54.758{8223a6b9-6a06-6902-4b0c-000000002e00}13372C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:57.782{8223a6b9-6a06-6902-4c0c-000000002e00}12904C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:58.283{8223a6b9-6889-6902-470b-000000002e00}13684C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:59.742{8223a6b9-6a0b-6902-4d0c-000000002e00}4540C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:24:59.761{8223a6b9-6a0b-6902-4e0c-000000002e00}8128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:02.778{8223a6b9-6a0b-6902-4f0c-000000002e00}5296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:04.771{8223a6b9-6a10-6902-500c-000000002e00}6968C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:04.778{8223a6b9-6a10-6902-510c-000000002e00}4728C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:07.778{8223a6b9-6a10-6902-520c-000000002e00}1492C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:09.727{8223a6b9-6a15-6902-530c-000000002e00}14264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:09.746{8223a6b9-6a15-6902-540c-000000002e00}4536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:12.807{8223a6b9-6a15-6902-550c-000000002e00}6920C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:14.739{8223a6b9-6a1a-6902-560c-000000002e00}9776C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:14.747{8223a6b9-6a1a-6902-570c-000000002e00}6952C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:17.739{8223a6b9-6a1a-6902-580c-000000002e00}3000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:19.772{8223a6b9-6a1f-6902-590c-000000002e00}13396C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:19.776{8223a6b9-6a1f-6902-5a0c-000000002e00}10812C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:22.801{8223a6b9-6a1f-6902-5b0c-000000002e00}1572C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:24.762{8223a6b9-6a24-6902-5c0c-000000002e00}12968C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:24.765{8223a6b9-6a24-6902-5d0c-000000002e00}3480C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:26.733{8223a6b9-6942-6902-ca0b-000000002e00}4700C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:27.793{8223a6b9-6a24-6902-5e0c-000000002e00}12932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:29.513{8223a6b9-6a05-6902-490c-000000002e00}8264C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:29.950{8223a6b9-6a29-6902-5f0c-000000002e00}13884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:29.955{8223a6b9-6a29-6902-600c-000000002e00}13376C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:32.973{8223a6b9-6a29-6902-610c-000000002e00}1140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:34.851{8223a6b9-6a2e-6902-620c-000000002e00}13684C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:34.855{8223a6b9-6a2e-6902-630c-000000002e00}2900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:37.869{8223a6b9-6a2e-6902-640c-000000002e00}14272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:39.768{8223a6b9-6a33-6902-650c-000000002e00}12924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:39.775{8223a6b9-6a33-6902-660c-000000002e00}13656C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:42.794{8223a6b9-6a33-6902-670c-000000002e00}14008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:44.732{8223a6b9-6a38-6902-680c-000000002e00}14252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:44.738{8223a6b9-6a38-6902-690c-000000002e00}8352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:47.743{8223a6b9-6a38-6902-6a0c-000000002e00}14084C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:49.821{8223a6b9-6a3d-6902-6b0c-000000002e00}13576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:49.834{8223a6b9-6a3d-6902-6c0c-000000002e00}9692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:52.848{8223a6b9-6a3d-6902-6d0c-000000002e00}9412C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:54.805{8223a6b9-6a42-6902-6e0c-000000002e00}3420C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:54.809{8223a6b9-6a42-6902-6f0c-000000002e00}13700C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:57.838{8223a6b9-6a42-6902-700c-000000002e00}13460C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:59.730{8223a6b9-6a47-6902-710c-000000002e00}14212C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:25:59.738{8223a6b9-6a47-6902-720c-000000002e00}14000C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:02.753{8223a6b9-6a47-6902-730c-000000002e00}5964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:04.722{8223a6b9-6a4c-6902-740c-000000002e00}14240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:04.736{8223a6b9-6a4c-6902-750c-000000002e00}13812C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:07.756{8223a6b9-6a4c-6902-760c-000000002e00}9432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:09.779{8223a6b9-6a51-6902-770c-000000002e00}11124C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:09.787{8223a6b9-6a51-6902-780c-000000002e00}4308C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:12.844{8223a6b9-6a51-6902-790c-000000002e00}8264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:14.733{8223a6b9-6a56-6902-7a0c-000000002e00}8948C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:14.739{8223a6b9-6a56-6902-7b0c-000000002e00}10908C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:17.764{8223a6b9-6a56-6902-7c0c-000000002e00}1804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:19.746{8223a6b9-6a5b-6902-7d0c-000000002e00}840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:19.765{8223a6b9-6a5b-6902-7e0c-000000002e00}4728C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:22.786{8223a6b9-6a5b-6902-7f0c-000000002e00}3180C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:24.778{8223a6b9-6a60-6902-800c-000000002e00}10620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:24.792{8223a6b9-6a60-6902-810c-000000002e00}1112C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:27.780{8223a6b9-6a60-6902-820c-000000002e00}13588C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:29.800{8223a6b9-6a65-6902-830c-000000002e00}5436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:29.810{8223a6b9-6a65-6902-840c-000000002e00}12776C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:32.814{8223a6b9-6a65-6902-850c-000000002e00}8252C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:34.756{8223a6b9-6a6a-6902-860c-000000002e00}11016C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:34.761{8223a6b9-6a6a-6902-870c-000000002e00}13692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:37.774{8223a6b9-6a6a-6902-880c-000000002e00}7520C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:39.729{8223a6b9-6a6f-6902-890c-000000002e00}13844C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:39.733{8223a6b9-6a6f-6902-8a0c-000000002e00}10812C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:42.757{8223a6b9-6a6f-6902-8b0c-000000002e00}13532C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:44.819{8223a6b9-6a74-6902-8d0c-000000002e00}12304C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:44.822{8223a6b9-6a74-6902-8e0c-000000002e00}13764C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:47.834{8223a6b9-6a74-6902-8f0c-000000002e00}9432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:49.729{8223a6b9-6a79-6902-900c-000000002e00}9788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:49.732{8223a6b9-6a79-6902-910c-000000002e00}13804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:52.750{8223a6b9-6a79-6902-920c-000000002e00}7316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:54.736{8223a6b9-6a7e-6902-930c-000000002e00}13572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:54.741{8223a6b9-6a7e-6902-940c-000000002e00}2900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:57.749{8223a6b9-6a7e-6902-950c-000000002e00}2224C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:59.797{8223a6b9-6a83-6902-960c-000000002e00}8112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:26:59.799{8223a6b9-6a83-6902-970c-000000002e00}11524C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:02.815{8223a6b9-6a83-6902-980c-000000002e00}14008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:04.750{8223a6b9-6a88-6902-990c-000000002e00}14072C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:04.758{8223a6b9-6a88-6902-9a0c-000000002e00}5868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:07.769{8223a6b9-6a88-6902-9b0c-000000002e00}10104C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:09.689{8223a6b9-6925-6902-ac0b-000000002e00}11744C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:09.781{8223a6b9-6a8d-6902-9c0c-000000002e00}5432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:09.788{8223a6b9-6a8d-6902-9d0c-000000002e00}13556C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:12.797{8223a6b9-6a8d-6902-9e0c-000000002e00}3380C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:14.740{8223a6b9-6a92-6902-9f0c-000000002e00}6004C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:14.760{8223a6b9-6a92-6902-a00c-000000002e00}13136C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:17.805{8223a6b9-6a92-6902-a10c-000000002e00}10772C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:19.748{8223a6b9-6a97-6902-a20c-000000002e00}10000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:19.756{8223a6b9-6a97-6902-a30c-000000002e00}4804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:22.816{8223a6b9-6a97-6902-a40c-000000002e00}2280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:24.748{8223a6b9-6a9c-6902-a50c-000000002e00}12304C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:24.751{8223a6b9-6a9c-6902-a60c-000000002e00}7704C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:27.767{8223a6b9-6a9c-6902-a70c-000000002e00}2228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:29.771{8223a6b9-6aa1-6902-a80c-000000002e00}5836C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:29.777{8223a6b9-6aa1-6902-a90c-000000002e00}14292C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:32.786{8223a6b9-6aa1-6902-aa0c-000000002e00}12276C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:34.741{8223a6b9-6aa6-6902-ab0c-000000002e00}4012C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:34.751{8223a6b9-6aa6-6902-ac0c-000000002e00}4540C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:37.763{8223a6b9-6aa6-6902-ad0c-000000002e00}6968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:39.759{8223a6b9-6aab-6902-ae0c-000000002e00}13984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:39.767{8223a6b9-6aab-6902-af0c-000000002e00}10468C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:42.782{8223a6b9-6aab-6902-b00c-000000002e00}4352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:44.818{8223a6b9-6ab0-6902-b10c-000000002e00}13980C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:44.821{8223a6b9-6ab0-6902-b20c-000000002e00}8340C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:47.829{8223a6b9-6ab0-6902-b30c-000000002e00}10096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:49.844{8223a6b9-6ab5-6902-b40c-000000002e00}12776C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:49.847{8223a6b9-6ab5-6902-b50c-000000002e00}13040C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:52.869{8223a6b9-6ab5-6902-b60c-000000002e00}8404C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:54.748{8223a6b9-6aba-6902-b70c-000000002e00}13188C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:54.754{8223a6b9-6aba-6902-b80c-000000002e00}12972C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:57.769{8223a6b9-6aba-6902-b90c-000000002e00}4336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:59.756{8223a6b9-6abf-6902-ba0c-000000002e00}4520C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:27:59.760{8223a6b9-6abf-6902-bb0c-000000002e00}5804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:02.786{8223a6b9-6abf-6902-bc0c-000000002e00}12880C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:04.759{8223a6b9-6ac4-6902-bd0c-000000002e00}14252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:04.769{8223a6b9-6ac4-6902-be0c-000000002e00}14160C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:07.772{8223a6b9-6ac4-6902-bf0c-000000002e00}2128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:09.782{8223a6b9-6ac9-6902-c00c-000000002e00}4596C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:09.788{8223a6b9-6ac9-6902-c10c-000000002e00}11144C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:12.787{8223a6b9-6ac9-6902-c20c-000000002e00}14080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:13.859{8223a6b9-6acc-6902-c30c-000000002e00}13524C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:14.103{8223a6b9-69a1-6902-0a0c-000000002e00}2080C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000025524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:14.733{8223a6b9-6ace-6902-c40c-000000002e00}1572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:14.739{8223a6b9-6ace-6902-c50c-000000002e00}13752C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:17.126{8223a6b9-6934-6902-b70b-000000002e00}14024C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:17.786{8223a6b9-6ace-6902-c60c-000000002e00}3232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:19.738{8223a6b9-6ad3-6902-c70c-000000002e00}14000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:19.744{8223a6b9-6ad3-6902-c80c-000000002e00}13316C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:22.804{8223a6b9-6ad3-6902-c90c-000000002e00}5608C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:24.795{8223a6b9-6ad8-6902-ca0c-000000002e00}13376C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:24.811{8223a6b9-6ad8-6902-cb0c-000000002e00}8512C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:27.859{8223a6b9-6ad8-6902-cc0c-000000002e00}3552C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:29.760{8223a6b9-6add-6902-cd0c-000000002e00}11780C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:29.766{8223a6b9-6add-6902-ce0c-000000002e00}13624C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:32.790{8223a6b9-6add-6902-cf0c-000000002e00}1720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:34.759{8223a6b9-6ae2-6902-d00c-000000002e00}1492C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:34.771{8223a6b9-6ae2-6902-d10c-000000002e00}13940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:37.776{8223a6b9-6ae2-6902-d20c-000000002e00}10772C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:39.861{8223a6b9-6ae7-6902-d30c-000000002e00}10000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:39.868{8223a6b9-6ae7-6902-d40c-000000002e00}12852C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:42.890{8223a6b9-6ae7-6902-d50c-000000002e00}3508C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:44.734{8223a6b9-6aec-6902-d60c-000000002e00}3752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:44.738{8223a6b9-6aec-6902-d70c-000000002e00}13120C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:47.755{8223a6b9-6aec-6902-d80c-000000002e00}14316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:49.763{8223a6b9-6af1-6902-d90c-000000002e00}11216C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:49.771{8223a6b9-6af1-6902-da0c-000000002e00}5420C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:52.683{8223a6b9-6a73-6902-8c0c-000000002e00}13972C:\Windows\System32\SearchProtocolHost.exesoc101win11\Administrator +534500x800000000000000025549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:52.764{8223a6b9-6af1-6902-db0c-000000002e00}936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:54.755{8223a6b9-6af6-6902-dc0c-000000002e00}7520C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:54.762{8223a6b9-6af6-6902-dd0c-000000002e00}11288C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:57.786{8223a6b9-6af6-6902-de0c-000000002e00}8148C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:59.812{8223a6b9-6afb-6902-df0c-000000002e00}10200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:28:59.826{8223a6b9-6afb-6902-e00c-000000002e00}2260C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:02.872{8223a6b9-6afb-6902-e10c-000000002e00}5048C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:03.465{8223a6b9-68a7-6902-5a0b-000000002e00}2560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:04.751{8223a6b9-6b00-6902-e20c-000000002e00}6560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:04.761{8223a6b9-6b00-6902-e30c-000000002e00}10800C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:07.772{8223a6b9-6b00-6902-e40c-000000002e00}11524C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:09.748{8223a6b9-6b05-6902-e50c-000000002e00}6492C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:09.753{8223a6b9-6b05-6902-e60c-000000002e00}8552C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:12.779{8223a6b9-6b05-6902-e70c-000000002e00}10352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:14.825{8223a6b9-6b0a-6902-e80c-000000002e00}11168C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:14.829{8223a6b9-6b0a-6902-e90c-000000002e00}13424C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:17.846{8223a6b9-6b0a-6902-ea0c-000000002e00}3380C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:19.734{8223a6b9-6b0f-6902-eb0c-000000002e00}4428C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:19.738{8223a6b9-6b0f-6902-ec0c-000000002e00}9172C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:22.759{8223a6b9-6b0f-6902-ed0c-000000002e00}9240C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:24.754{8223a6b9-6b14-6902-ee0c-000000002e00}1104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:24.767{8223a6b9-6b14-6902-ef0c-000000002e00}4728C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:27.786{8223a6b9-6b14-6902-f00c-000000002e00}3140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:28.452{8223a6b9-6b18-6902-f10c-000000002e00}8240C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:29.741{8223a6b9-6b19-6902-f20c-000000002e00}13992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:29.744{8223a6b9-6b19-6902-f30c-000000002e00}9276C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:32.746{8223a6b9-6b19-6902-f40c-000000002e00}12412C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:34.741{8223a6b9-6b1e-6902-f50c-000000002e00}14084C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:34.744{8223a6b9-6b1e-6902-f60c-000000002e00}13072C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:37.754{8223a6b9-6b1e-6902-f70c-000000002e00}11000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:39.737{8223a6b9-6b23-6902-f80c-000000002e00}9236C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:39.741{8223a6b9-6b23-6902-f90c-000000002e00}584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:42.738{8223a6b9-6b23-6902-fa0c-000000002e00}2128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:44.734{8223a6b9-6b28-6902-fb0c-000000002e00}10500C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:44.753{8223a6b9-6b28-6902-fc0c-000000002e00}14140C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:47.772{8223a6b9-6b28-6902-fd0c-000000002e00}8892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:49.759{8223a6b9-6b2d-6902-fe0c-000000002e00}7024C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:49.764{8223a6b9-6b2d-6902-ff0c-000000002e00}5576C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:52.779{8223a6b9-6b2d-6902-000d-000000002e00}10536C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:54.750{8223a6b9-6b32-6902-010d-000000002e00}1240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:54.756{8223a6b9-6b32-6902-020d-000000002e00}10800C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:57.756{8223a6b9-6b32-6902-030d-000000002e00}9300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:59.770{8223a6b9-6b37-6902-040d-000000002e00}14060C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:29:59.775{8223a6b9-6b37-6902-050d-000000002e00}14236C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:02.794{8223a6b9-6b37-6902-060d-000000002e00}6952C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:04.729{8223a6b9-6b3c-6902-070d-000000002e00}13944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:04.748{8223a6b9-6b3c-6902-080d-000000002e00}3664C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:07.757{8223a6b9-6b3c-6902-090d-000000002e00}4200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:09.753{8223a6b9-6b41-6902-0a0d-000000002e00}3180C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:09.764{8223a6b9-6b41-6902-0b0d-000000002e00}12112C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:12.812{8223a6b9-6b41-6902-0c0d-000000002e00}11168C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:14.743{8223a6b9-6b46-6902-0d0d-000000002e00}13908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:14.748{8223a6b9-6b46-6902-0e0d-000000002e00}13188C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:17.751{8223a6b9-6b46-6902-0f0d-000000002e00}13504C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:19.738{8223a6b9-6b4b-6902-100d-000000002e00}13452C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:19.746{8223a6b9-6b4b-6902-110d-000000002e00}12856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:19.851{8223a6b9-68ce-6902-740b-000000002e00}4384C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000025606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:22.754{8223a6b9-6b4b-6902-120d-000000002e00}11968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:24.742{8223a6b9-6b50-6902-130d-000000002e00}13992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:24.753{8223a6b9-6b50-6902-140d-000000002e00}6384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:26.771{8223a6b9-6942-6902-cb0b-000000002e00}14112C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000025610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:27.773{8223a6b9-6b50-6902-150d-000000002e00}13736C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:29.732{8223a6b9-6b55-6902-160d-000000002e00}3752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:29.743{8223a6b9-6b55-6902-170d-000000002e00}10836C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:32.743{8223a6b9-6b55-6902-180d-000000002e00}13476C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:34.758{8223a6b9-6b5a-6902-190d-000000002e00}1232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:34.770{8223a6b9-6b5a-6902-1a0d-000000002e00}13360C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:37.774{8223a6b9-6b5a-6902-1b0d-000000002e00}13852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:39.755{8223a6b9-6b5f-6902-1c0d-000000002e00}14224C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:39.760{8223a6b9-6b5f-6902-1d0d-000000002e00}3604C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:42.761{8223a6b9-6b5f-6902-1e0d-000000002e00}2128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:44.755{8223a6b9-6b64-6902-1f0d-000000002e00}10720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:44.766{8223a6b9-6b64-6902-200d-000000002e00}12952C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:47.782{8223a6b9-6b64-6902-210d-000000002e00}1848C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:49.747{8223a6b9-6b69-6902-220d-000000002e00}14128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:49.763{8223a6b9-6b69-6902-230d-000000002e00}2560C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:52.773{8223a6b9-6b69-6902-240d-000000002e00}2028C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:54.742{8223a6b9-6b6e-6902-250d-000000002e00}10256C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:54.754{8223a6b9-6b6e-6902-260d-000000002e00}3856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:57.747{8223a6b9-6b6e-6902-270d-000000002e00}6088C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:59.737{8223a6b9-6b73-6902-280d-000000002e00}1676C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:30:59.745{8223a6b9-6b73-6902-290d-000000002e00}13540C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:02.761{8223a6b9-6b73-6902-2a0d-000000002e00}13368C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:04.733{8223a6b9-6b78-6902-2b0d-000000002e00}3180C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:04.744{8223a6b9-6b78-6902-2c0d-000000002e00}13796C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:07.737{8223a6b9-6b78-6902-2d0d-000000002e00}4540C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:09.761{8223a6b9-6b7d-6902-2e0d-000000002e00}13576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:09.767{8223a6b9-6b7d-6902-2f0d-000000002e00}14332C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:12.788{8223a6b9-6b7d-6902-300d-000000002e00}10204C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:14.764{8223a6b9-6b82-6902-310d-000000002e00}5500C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:14.773{8223a6b9-6b82-6902-320d-000000002e00}14216C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:17.787{8223a6b9-6b82-6902-330d-000000002e00}12932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:19.739{8223a6b9-6b87-6902-340d-000000002e00}3056C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:19.747{8223a6b9-6b87-6902-350d-000000002e00}7008C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:22.764{8223a6b9-6b87-6902-360d-000000002e00}13568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:24.776{8223a6b9-6b8c-6902-370d-000000002e00}14192C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:24.781{8223a6b9-6b8c-6902-380d-000000002e00}13560C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:27.803{8223a6b9-6b8c-6902-390d-000000002e00}5676C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:29.789{8223a6b9-6934-6902-bb0b-000000002e00}6252C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000025648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:29.863{8223a6b9-6b91-6902-3a0d-000000002e00}4084C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:29.870{8223a6b9-6b91-6902-3b0d-000000002e00}10588C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:32.890{8223a6b9-6b91-6902-3c0d-000000002e00}13988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:34.749{8223a6b9-6b96-6902-3d0d-000000002e00}9788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:34.755{8223a6b9-6b96-6902-3e0d-000000002e00}4072C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:37.769{8223a6b9-6b96-6902-3f0d-000000002e00}10812C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:39.764{8223a6b9-6b9b-6902-400d-000000002e00}9856C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:39.778{8223a6b9-6b9b-6902-410d-000000002e00}6440C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:42.782{8223a6b9-6b9b-6902-420d-000000002e00}14220C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:44.762{8223a6b9-6ba0-6902-430d-000000002e00}9564C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:44.770{8223a6b9-6ba0-6902-440d-000000002e00}5064C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:47.792{8223a6b9-6ba0-6902-450d-000000002e00}4352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:49.755{8223a6b9-6ba5-6902-460d-000000002e00}1584C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:49.760{8223a6b9-6ba5-6902-470d-000000002e00}5520C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:52.772{8223a6b9-6ba5-6902-480d-000000002e00}13912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:54.785{8223a6b9-6baa-6902-490d-000000002e00}13376C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:54.789{8223a6b9-6baa-6902-4a0d-000000002e00}10324C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:57.859{8223a6b9-6baa-6902-4b0d-000000002e00}6340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:59.771{8223a6b9-6baf-6902-4c0d-000000002e00}2852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:31:59.776{8223a6b9-6baf-6902-4d0d-000000002e00}5296C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:02.800{8223a6b9-6baf-6902-4e0d-000000002e00}10252C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:04.742{8223a6b9-6bb4-6902-4f0d-000000002e00}3596C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:04.757{8223a6b9-6bb4-6902-500d-000000002e00}6508C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:07.752{8223a6b9-6bb4-6902-510d-000000002e00}13840C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:08.248{8223a6b9-66d1-6902-840a-000000002e00}11200C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000025673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:09.743{8223a6b9-6bb9-6902-540d-000000002e00}11972C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:09.746{8223a6b9-6bb9-6902-550d-000000002e00}8264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:12.761{8223a6b9-6bb9-6902-560d-000000002e00}5868C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:14.751{8223a6b9-6bbe-6902-570d-000000002e00}12636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:14.757{8223a6b9-6bbe-6902-580d-000000002e00}10516C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:17.776{8223a6b9-6bbe-6902-590d-000000002e00}5652C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:19.749{8223a6b9-6bc3-6902-5a0d-000000002e00}3752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:19.752{8223a6b9-6bc3-6902-5b0d-000000002e00}8352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:22.765{8223a6b9-6bc3-6902-5c0d-000000002e00}11092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:24.835{8223a6b9-6bc8-6902-5d0d-000000002e00}9884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:24.840{8223a6b9-6bc8-6902-5e0d-000000002e00}13256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:27.866{8223a6b9-6bc8-6902-5f0d-000000002e00}10648C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:29.734{8223a6b9-6bcd-6902-600d-000000002e00}14280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:29.742{8223a6b9-6bcd-6902-610d-000000002e00}3384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:32.754{8223a6b9-6bcd-6902-620d-000000002e00}13704C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:34.808{8223a6b9-6bd2-6902-630d-000000002e00}5048C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:34.818{8223a6b9-6bd2-6902-640d-000000002e00}11124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:37.814{8223a6b9-6bd2-6902-650d-000000002e00}10200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:38.263{8223a6b9-66d1-6902-850a-000000002e00}3464C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000025692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:39.747{8223a6b9-6bd7-6902-660d-000000002e00}14316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:39.752{8223a6b9-6bd7-6902-670d-000000002e00}7016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:42.755{8223a6b9-6bd7-6902-680d-000000002e00}14096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:44.752{8223a6b9-6bdc-6902-690d-000000002e00}2416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:44.760{8223a6b9-6bdc-6902-6a0d-000000002e00}4912C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:47.812{8223a6b9-6bdc-6902-6b0d-000000002e00}13336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:49.739{8223a6b9-6be1-6902-6c0d-000000002e00}1860C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:49.753{8223a6b9-6be1-6902-6d0d-000000002e00}13620C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:52.753{8223a6b9-6be1-6902-6e0d-000000002e00}6088C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:54.753{8223a6b9-6be6-6902-6f0d-000000002e00}13908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:54.759{8223a6b9-6be6-6902-700d-000000002e00}13652C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:57.777{8223a6b9-6be6-6902-710d-000000002e00}8128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:59.737{8223a6b9-6beb-6902-720d-000000002e00}1816C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:32:59.743{8223a6b9-6beb-6902-730d-000000002e00}5868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:02.766{8223a6b9-6beb-6902-740d-000000002e00}1444C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:04.968{8223a6b9-6bf0-6902-750d-000000002e00}13656C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:04.974{8223a6b9-6bf0-6902-760d-000000002e00}8164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:07.970{8223a6b9-6bf0-6902-770d-000000002e00}13884C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:08.545{8223a6b9-6bb8-6902-530d-000000002e00}14020C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:09.963{8223a6b9-6bb7-6902-520d-000000002e00}14008C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000025712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:10.524{8223a6b9-6bf5-6902-780d-000000002e00}10812C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:10.529{8223a6b9-6bf5-6902-790d-000000002e00}11216C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:11.530{8223a6b9-6bf6-6902-7b0d-000000002e00}9692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:11.538{8223a6b9-6bf6-6902-7c0d-000000002e00}13996C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:14.540{8223a6b9-6bf6-6902-7a0d-000000002e00}4860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:15.525{8223a6b9-6bfa-6902-7d0d-000000002e00}13932C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:15.529{8223a6b9-6bfa-6902-7e0d-000000002e00}9808C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:18.535{8223a6b9-6bfb-6902-7f0d-000000002e00}13116C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:20.523{8223a6b9-6bff-6902-800d-000000002e00}11372C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:20.532{8223a6b9-6bff-6902-810d-000000002e00}13436C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:23.545{8223a6b9-6c00-6902-820d-000000002e00}2228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:25.525{8223a6b9-6c04-6902-830d-000000002e00}4352C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:25.529{8223a6b9-6c04-6902-840d-000000002e00}14240C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:28.585{8223a6b9-6c05-6902-850d-000000002e00}2540C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:30.523{8223a6b9-6c09-6902-860d-000000002e00}13752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:30.526{8223a6b9-6c09-6902-870d-000000002e00}13872C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:33.591{8223a6b9-6c0a-6902-880d-000000002e00}6688C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:35.524{8223a6b9-6c0e-6902-890d-000000002e00}5576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:35.529{8223a6b9-6c0e-6902-8a0d-000000002e00}8892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:38.542{8223a6b9-6c0f-6902-8b0d-000000002e00}6340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:40.521{8223a6b9-6c13-6902-8c0d-000000002e00}14104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:40.533{8223a6b9-6c13-6902-8d0d-000000002e00}10036C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:43.553{8223a6b9-6c14-6902-8e0d-000000002e00}13620C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:45.523{8223a6b9-6c18-6902-8f0d-000000002e00}2984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:45.533{8223a6b9-6c18-6902-900d-000000002e00}5628C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:48.544{8223a6b9-6c19-6902-910d-000000002e00}2844C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:50.521{8223a6b9-6c1d-6902-920d-000000002e00}5868C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:50.530{8223a6b9-6c1d-6902-930d-000000002e00}12412C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:53.550{8223a6b9-6c1e-6902-940d-000000002e00}11904C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:55.521{8223a6b9-6c22-6902-950d-000000002e00}10620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:55.532{8223a6b9-6c22-6902-960d-000000002e00}2132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:33:58.534{8223a6b9-6c23-6902-970d-000000002e00}13880C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:00.520{8223a6b9-6c27-6902-980d-000000002e00}1576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:00.530{8223a6b9-6c27-6902-990d-000000002e00}9416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:03.525{8223a6b9-6c28-6902-9a0d-000000002e00}14140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:05.521{8223a6b9-6c2c-6902-9c0d-000000002e00}1848C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:05.529{8223a6b9-6c2c-6902-9d0d-000000002e00}11124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:08.536{8223a6b9-6c2d-6902-9e0d-000000002e00}4728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.263{8223a6b9-6c31-6902-a60d-000000002e00}12112C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000025751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.303{8223a6b9-6c31-6902-a90d-000000002e00}1676C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000025752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.404{8223a6b9-6c30-6902-9f0d-000000002e00}11832C:\Windows\System32\UsoClient.exeNT AUTHORITY\SYSTEM +534500x800000000000000025753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.644{8223a6b9-6c31-6902-a30d-000000002e00}2992C:\Windows\System32\AppHostRegistrationVerifier.exesoc101win11\Administrator +534500x800000000000000025754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.668{8223a6b9-6c31-6902-bb0d-000000002e00}13648C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.671{8223a6b9-6c31-6902-bc0d-000000002e00}13528C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.675{8223a6b9-6c31-6902-ae0d-000000002e00}3180C:\Windows\System32\rundll32.exesoc101win11\Administrator +534500x800000000000000025757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.889{8223a6b9-6c31-6902-a80d-000000002e00}8112C:\Windows\System32\taskhostw.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000025758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.899{8223a6b9-6c31-6902-ad0d-000000002e00}14188C:\Windows\System32\rundll32.exeNT AUTHORITY\SYSTEM +534500x800000000000000025759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:09.944{8223a6b9-6c31-6902-ac0d-000000002e00}9024C:\Windows\System32\DiskSnapshot.exeNT AUTHORITY\SYSTEM +534500x800000000000000025760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.111{8223a6b9-6c31-6902-b00d-000000002e00}3420C:\Windows\System32\UCPDMgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000025761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.120{8223a6b9-6c31-6902-a70d-000000002e00}10516C:\Windows\System32\dstokenclean.exeNT AUTHORITY\SYSTEM +534500x800000000000000025762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.174{8223a6b9-6c31-6902-aa0d-000000002e00}13404C:\Windows\System32\rundll32.exeNT AUTHORITY\SYSTEM +534500x800000000000000025763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.174{8223a6b9-6c31-6902-ab0d-000000002e00}11952C:\Windows\System32\sc.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000025764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.190{8223a6b9-6c31-6902-b60d-000000002e00}5052C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.291{8223a6b9-6c31-6902-ba0d-000000002e00}14132C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.323{8223a6b9-6c31-6902-b50d-000000002e00}6568C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000025767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.333{8223a6b9-6c31-6902-b90d-000000002e00}2984C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.333{8223a6b9-6c31-6902-a50d-000000002e00}6608C:\Windows\System32\dmclient.exeNT AUTHORITY\SYSTEM +534500x800000000000000025769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.368{8223a6b9-6c31-6902-b70d-000000002e00}13392C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.678{8223a6b9-6c31-6902-be0d-000000002e00}8232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:10.688{8223a6b9-6c31-6902-bf0d-000000002e00}6216C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:11.793{8223a6b9-6c33-6902-ca0d-000000002e00}11372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000025773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:12.165{8223a6b9-6c34-6902-cc0d-000000002e00}8272C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000025774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:12.611{8223a6b9-6c34-6902-ce0d-000000002e00}14300C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +534500x800000000000000025775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:12.702{8223a6b9-6c32-6902-c60d-000000002e00}8252C:\Windows\System32\Dism\DismHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:13.447{8223a6b9-61a4-6902-2c0a-000000002e00}12144C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000025777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:13.716{8223a6b9-6c31-6902-bd0d-000000002e00}10772C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:14.351{8223a6b9-6c31-6902-a40d-000000002e00}5600C:\Windows\System32\lpremove.exeNT AUTHORITY\SYSTEM +534500x800000000000000025779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:14.353{8223a6b9-6c31-6902-b80d-000000002e00}13460C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:14.380{8223a6b9-6c36-6902-d20d-000000002e00}9376C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:14.450{8223a6b9-6c36-6902-d30d-000000002e00}7316C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:14.673{8223a6b9-6c36-6902-d40d-000000002e00}2892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:14.807{8223a6b9-6c36-6902-d70d-000000002e00}7260C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:14.925{8223a6b9-6c36-6902-d80d-000000002e00}5052C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.049{8223a6b9-6c36-6902-d90d-000000002e00}8252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.145{8223a6b9-6c37-6902-db0d-000000002e00}10252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.231{8223a6b9-6c37-6902-dc0d-000000002e00}13404C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.351{8223a6b9-6c37-6902-dd0d-000000002e00}7316C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.433{8223a6b9-6c37-6902-de0d-000000002e00}13636C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.511{8223a6b9-6c37-6902-df0d-000000002e00}14332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.519{8223a6b9-6c36-6902-d50d-000000002e00}10620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.524{8223a6b9-6c36-6902-d60d-000000002e00}13880C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.606{8223a6b9-6c37-6902-e00d-000000002e00}13428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.780{8223a6b9-6c37-6902-e30d-000000002e00}11964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:15.977{8223a6b9-6c37-6902-e40d-000000002e00}10620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.071{8223a6b9-6c37-6902-e50d-000000002e00}156C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.143{8223a6b9-6c38-6902-e60d-000000002e00}13596C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.215{8223a6b9-6c38-6902-e70d-000000002e00}8252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.285{8223a6b9-6c38-6902-e80d-000000002e00}12804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.383{8223a6b9-6c38-6902-e90d-000000002e00}13776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.451{8223a6b9-6c38-6902-ea0d-000000002e00}11880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.526{8223a6b9-6c37-6902-e10d-000000002e00}8300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.529{8223a6b9-6c37-6902-e20d-000000002e00}13264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.562{8223a6b9-6c38-6902-eb0d-000000002e00}13496C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.631{8223a6b9-6c38-6902-ec0d-000000002e00}13840C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.711{8223a6b9-6c38-6902-ed0d-000000002e00}8252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.793{8223a6b9-6c38-6902-ee0d-000000002e00}5052C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:16.889{8223a6b9-6c38-6902-ef0d-000000002e00}2852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:17.035{8223a6b9-6c38-6902-f00d-000000002e00}2796C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:17.221{8223a6b9-6c39-6902-f10d-000000002e00}6680C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:17.289{8223a6b9-6c39-6902-f20d-000000002e00}156C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:17.407{8223a6b9-6c39-6902-f30d-000000002e00}14300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:19.540{8223a6b9-6c37-6902-da0d-000000002e00}12144C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:20.520{8223a6b9-6c3b-6902-f50d-000000002e00}12804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:20.524{8223a6b9-6c3b-6902-f60d-000000002e00}6680C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:22.601{8223a6b9-6c33-6902-c90d-000000002e00}14140C:\Windows\System32\Dism\DismHost.exesoc101win11\Administrator +534500x800000000000000025817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:22.618{8223a6b9-6c31-6902-b20d-000000002e00}13360C:\Windows\System32\cleanmgr.exesoc101win11\Administrator +534500x800000000000000025818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:23.526{8223a6b9-6c3c-6902-f70d-000000002e00}2852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:25.315{8223a6b9-6c39-6902-f40d-000000002e00}13776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:25.391{8223a6b9-6c41-6902-fb0d-000000002e00}924C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:25.521{8223a6b9-6c40-6902-f80d-000000002e00}11068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:25.525{8223a6b9-6c40-6902-f90d-000000002e00}3180C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:26.738{8223a6b9-6c41-6902-fc0d-000000002e00}13360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:26.809{8223a6b9-6c42-6902-fd0d-000000002e00}10252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:26.867{8223a6b9-6c42-6902-fe0d-000000002e00}13264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:26.938{8223a6b9-6c42-6902-ff0d-000000002e00}14188C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:26.986{8223a6b9-6c42-6902-000e-000000002e00}6680C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:27.050{8223a6b9-6c42-6902-010e-000000002e00}6568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:27.114{8223a6b9-6c43-6902-020e-000000002e00}4336C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:27.352{8223a6b9-6c43-6902-030e-000000002e00}10252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:27.825{8223a6b9-6c43-6902-040e-000000002e00}13264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:27.924{8223a6b9-6c43-6902-050e-000000002e00}13360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:28.028{8223a6b9-6c43-6902-060e-000000002e00}6680C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:28.136{8223a6b9-6c44-6902-070e-000000002e00}6568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:28.384{8223a6b9-6c44-6902-080e-000000002e00}4336C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:28.480{8223a6b9-6c44-6902-090e-000000002e00}10252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:28.531{8223a6b9-6c41-6902-fa0d-000000002e00}6908C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:29.273{8223a6b9-6c44-6902-0a0e-000000002e00}7316C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:29.373{8223a6b9-6c45-6902-0b0e-000000002e00}4432C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:29.535{8223a6b9-6c45-6902-0c0e-000000002e00}9376C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:29.691{8223a6b9-6c45-6902-0f0e-000000002e00}10324C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:30.519{8223a6b9-6c45-6902-0d0e-000000002e00}6568C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:30.523{8223a6b9-6c45-6902-0e0e-000000002e00}10804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:31.110{8223a6b9-6c45-6902-100e-000000002e00}14020C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:31.207{8223a6b9-6c47-6902-120e-000000002e00}5300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:31.436{8223a6b9-6c47-6902-130e-000000002e00}2060C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:31.503{8223a6b9-6c47-6902-140e-000000002e00}14292C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:31.757{8223a6b9-6c47-6902-150e-000000002e00}10324C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:31.821{8223a6b9-6c47-6902-160e-000000002e00}10252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:31.884{8223a6b9-6c47-6902-170e-000000002e00}7636C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:31.995{8223a6b9-6c47-6902-180e-000000002e00}10232C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:33.493{8223a6b9-6c48-6902-190e-000000002e00}2796C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:33.525{8223a6b9-6c46-6902-110e-000000002e00}3180C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:33.557{8223a6b9-6c49-6902-1a0e-000000002e00}13428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:33.651{8223a6b9-6c49-6902-1b0e-000000002e00}11880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:33.793{8223a6b9-6c49-6902-1c0e-000000002e00}5420C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:33.889{8223a6b9-6c49-6902-1d0e-000000002e00}2852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:34.223{8223a6b9-6c49-6902-1e0e-000000002e00}11964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:34.302{8223a6b9-6c4a-6902-1f0e-000000002e00}13496C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:34.460{8223a6b9-6c4a-6902-200e-000000002e00}11000C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:35.178{8223a6b9-6c4a-6902-210e-000000002e00}14292C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:35.271{8223a6b9-6c4b-6902-250e-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:35.520{8223a6b9-6c4a-6902-220e-000000002e00}10804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:35.523{8223a6b9-6c4a-6902-230e-000000002e00}6680C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:35.956{8223a6b9-6c4b-6902-260e-000000002e00}12804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:36.083{8223a6b9-6c4b-6902-270e-000000002e00}3180C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:36.131{8223a6b9-6c4c-6902-280e-000000002e00}11880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:36.194{8223a6b9-6c4c-6902-290e-000000002e00}11516C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:36.257{8223a6b9-6c4c-6902-2a0e-000000002e00}9952C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:36.337{8223a6b9-6c4c-6902-2b0e-000000002e00}6568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:36.432{8223a6b9-6c4c-6902-2c0e-000000002e00}13496C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:38.077{8223a6b9-6c4c-6902-2d0e-000000002e00}12412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:38.219{8223a6b9-6c4e-6902-2e0e-000000002e00}11000C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:38.539{8223a6b9-6c4b-6902-240e-000000002e00}5300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.140{8223a6b9-6c4e-6902-2f0e-000000002e00}8244C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.193{8223a6b9-6c4f-6902-300e-000000002e00}10812C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.256{8223a6b9-6c4f-6902-310e-000000002e00}10804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.320{8223a6b9-6c4f-6902-320e-000000002e00}924C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.576{8223a6b9-6c4f-6902-330e-000000002e00}9276C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.650{8223a6b9-6c4f-6902-360e-000000002e00}3092C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.715{8223a6b9-6c4f-6902-370e-000000002e00}7132C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.765{8223a6b9-6c4f-6902-380e-000000002e00}10812C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.926{8223a6b9-6c4f-6902-390e-000000002e00}10804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:39.989{8223a6b9-6c4f-6902-3a0e-000000002e00}13428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.035{8223a6b9-6c4f-6902-3b0e-000000002e00}2852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.106{8223a6b9-6c50-6902-3c0e-000000002e00}392C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.179{8223a6b9-6c50-6902-3e0e-000000002e00}6680C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.240{8223a6b9-6c50-6902-3f0e-000000002e00}1720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.303{8223a6b9-6c50-6902-400e-000000002e00}8244C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.367{8223a6b9-6c50-6902-410e-000000002e00}12412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.414{8223a6b9-6c50-6902-420e-000000002e00}10804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.521{8223a6b9-6c4f-6902-340e-000000002e00}11964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.524{8223a6b9-6c4f-6902-350e-000000002e00}11000C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.574{8223a6b9-6c50-6902-430e-000000002e00}392C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:40.641{8223a6b9-6c50-6902-440e-000000002e00}9276C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:41.214{8223a6b9-6c50-6902-450e-000000002e00}7468C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:41.274{8223a6b9-6c51-6902-460e-000000002e00}3180C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:41.370{8223a6b9-6c51-6902-470e-000000002e00}13880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:41.724{8223a6b9-6c51-6902-480e-000000002e00}12412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:42.203{8223a6b9-6c51-6902-490e-000000002e00}13872C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:42.353{8223a6b9-6c52-6902-4a0e-000000002e00}6680C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:43.551{8223a6b9-6c50-6902-3d0e-000000002e00}4912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:43.584{8223a6b9-6c52-6902-4b0e-000000002e00}10036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:43.692{8223a6b9-6c53-6902-4c0e-000000002e00}7708C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:43.980{8223a6b9-6c53-6902-4d0e-000000002e00}8552C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:44.157{8223a6b9-6c53-6902-4e0e-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:45.268{8223a6b9-6c54-6902-4f0e-000000002e00}2808C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:45.478{8223a6b9-6c55-6902-530e-000000002e00}5080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:45.520{8223a6b9-6c54-6902-500e-000000002e00}13840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:45.524{8223a6b9-6c54-6902-510e-000000002e00}6568C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:46.660{8223a6b9-6c55-6902-540e-000000002e00}4432C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:46.783{8223a6b9-6c56-6902-550e-000000002e00}14320C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:46.983{8223a6b9-6c56-6902-560e-000000002e00}3004C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:47.281{8223a6b9-6c56-6902-570e-000000002e00}9048C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:48.087{8223a6b9-6c57-6902-580e-000000002e00}1860C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:48.493{8223a6b9-6c58-6902-590e-000000002e00}3592C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:48.528{8223a6b9-6c55-6902-520e-000000002e00}6680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:48.827{8223a6b9-6c58-6902-5a0e-000000002e00}12968C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:49.019{8223a6b9-6c58-6902-5b0e-000000002e00}9952C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:49.258{8223a6b9-6c59-6902-5c0e-000000002e00}14332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:49.289{8223a6b9-6c31-6902-b30d-000000002e00}13440C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000025922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:49.608{8223a6b9-6c59-6902-5d0e-000000002e00}13264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:50.520{8223a6b9-6c59-6902-5e0e-000000002e00}6112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:50.523{8223a6b9-6c59-6902-5f0e-000000002e00}5420C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:50.929{8223a6b9-6c59-6902-600e-000000002e00}11040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:51.117{8223a6b9-6c5a-6902-620e-000000002e00}7636C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:51.810{8223a6b9-6c5b-6902-630e-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:51.875{8223a6b9-6c5b-6902-640e-000000002e00}14244C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:51.919{8223a6b9-6c5b-6902-650e-000000002e00}13480C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:52.040{8223a6b9-6c5b-6902-660e-000000002e00}6992C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:52.652{8223a6b9-6c5c-6902-670e-000000002e00}156C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:52.857{8223a6b9-6c5c-6902-680e-000000002e00}5080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:53.524{8223a6b9-6c5a-6902-610e-000000002e00}12944C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:54.916{8223a6b9-6c5c-6902-690e-000000002e00}11968C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:55.059{8223a6b9-6c5e-6902-6c0e-000000002e00}8128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:55.280{8223a6b9-6c5f-6902-6d0e-000000002e00}4428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:55.469{8223a6b9-6c5f-6902-6f0e-000000002e00}5760C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:55.520{8223a6b9-6c5e-6902-6a0e-000000002e00}13264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:55.525{8223a6b9-6c5e-6902-6b0e-000000002e00}3604C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:56.099{8223a6b9-6c5f-6902-700e-000000002e00}11832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:56.202{8223a6b9-6c60-6902-710e-000000002e00}13636C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:56.964{8223a6b9-6c60-6902-720e-000000002e00}9276C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:57.069{8223a6b9-6c60-6902-730e-000000002e00}8644C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:34:58.523{8223a6b9-6c5f-6902-6e0e-000000002e00}5536C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:00.523{8223a6b9-6c63-6902-750e-000000002e00}6908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:00.526{8223a6b9-6c63-6902-760e-000000002e00}13428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:01.316{8223a6b9-6c61-6902-740e-000000002e00}8552C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:01.565{8223a6b9-6c65-6902-780e-000000002e00}14176C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:02.035{8223a6b9-6c65-6902-790e-000000002e00}4336C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:02.179{8223a6b9-6c66-6902-7a0e-000000002e00}13360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:03.003{8223a6b9-6c66-6902-7b0e-000000002e00}1720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:03.128{8223a6b9-6c67-6902-7c0e-000000002e00}4912C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:03.534{8223a6b9-6c64-6902-770e-000000002e00}8128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:03.926{8223a6b9-6c67-6902-7d0e-000000002e00}12720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:04.053{8223a6b9-6c67-6902-7e0e-000000002e00}3004C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:04.385{8223a6b9-6c68-6902-7f0e-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:04.576{8223a6b9-6c68-6902-800e-000000002e00}11040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:05.314{8223a6b9-6c68-6902-830e-000000002e00}2956C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:05.520{8223a6b9-6c68-6902-810e-000000002e00}13712C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:05.523{8223a6b9-6c68-6902-820e-000000002e00}5300C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:05.526{8223a6b9-6c69-6902-850e-000000002e00}7708C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:05.850{8223a6b9-6c69-6902-860e-000000002e00}11832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:06.387{8223a6b9-6c69-6902-870e-000000002e00}13576C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:07.214{8223a6b9-6c6a-6902-880e-000000002e00}13944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:07.616{8223a6b9-6c6b-6902-890e-000000002e00}13440C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:08.455{8223a6b9-6c6b-6902-8a0e-000000002e00}9880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:08.534{8223a6b9-6c69-6902-840e-000000002e00}11516C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:08.836{8223a6b9-6c6c-6902-8b0e-000000002e00}11968C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:09.536{8223a6b9-6c30-6902-a10d-000000002e00}2128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:09.745{8223a6b9-6c6c-6902-8c0e-000000002e00}9788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:10.237{8223a6b9-6c6d-6902-8f0e-000000002e00}14276C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:10.521{8223a6b9-6c6d-6902-8d0e-000000002e00}8232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:10.523{8223a6b9-6c6d-6902-8e0e-000000002e00}14176C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:11.003{8223a6b9-6c6e-6902-910e-000000002e00}13636C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:11.347{8223a6b9-6c6f-6902-920e-000000002e00}6112C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:12.487{8223a6b9-6c6f-6902-930e-000000002e00}10692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:12.791{8223a6b9-6c70-6902-940e-000000002e00}4712C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:13.295{8223a6b9-6c70-6902-950e-000000002e00}9880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:13.528{8223a6b9-6c6e-6902-900e-000000002e00}13360C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:13.626{8223a6b9-6c71-6902-960e-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:14.092{8223a6b9-6c30-6902-a00d-000000002e00}13572C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000025982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:15.520{8223a6b9-6c72-6902-980e-000000002e00}10804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:15.523{8223a6b9-6c72-6902-990e-000000002e00}504C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:18.525{8223a6b9-6c71-6902-970e-000000002e00}9820C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:18.530{8223a6b9-6c73-6902-9a0e-000000002e00}5300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:18.784{8223a6b9-6c76-6902-9b0e-000000002e00}976C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:20.521{8223a6b9-6c77-6902-9d0e-000000002e00}11832C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:20.523{8223a6b9-6c77-6902-9e0e-000000002e00}8340C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:22.103{8223a6b9-6c76-6902-9c0e-000000002e00}5128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:22.281{8223a6b9-6c7a-6902-a00e-000000002e00}9856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:23.524{8223a6b9-6c78-6902-9f0e-000000002e00}14016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000025992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:25.521{8223a6b9-6c7c-6902-a20e-000000002e00}12256C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000025993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:25.523{8223a6b9-6c7c-6902-a30e-000000002e00}2416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000025994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:25.919{8223a6b9-6c7a-6902-a10e-000000002e00}7816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:25.993{8223a6b9-6c7d-6902-a50e-000000002e00}13812C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:26.177{8223a6b9-6c7d-6902-a60e-000000002e00}11360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:26.381{8223a6b9-6c7e-6902-a70e-000000002e00}6228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:28.471{8223a6b9-6c7e-6902-a80e-000000002e00}9172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000025999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:28.535{8223a6b9-6c7d-6902-a40e-000000002e00}14320C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:28.559{8223a6b9-6c80-6902-a90e-000000002e00}504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:28.646{8223a6b9-6c80-6902-aa0e-000000002e00}12948C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:28.850{8223a6b9-6c80-6902-ab0e-000000002e00}14304C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:29.409{8223a6b9-6c80-6902-ac0e-000000002e00}2956C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:29.974{8223a6b9-6c81-6902-ad0e-000000002e00}13576C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:30.521{8223a6b9-6c81-6902-ae0e-000000002e00}13416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:30.524{8223a6b9-6c81-6902-af0e-000000002e00}14224C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:32.294{8223a6b9-6c81-6902-b00e-000000002e00}13396C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:32.354{8223a6b9-6c84-6902-b20e-000000002e00}9880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:32.428{8223a6b9-6c84-6902-b30e-000000002e00}3592C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:32.514{8223a6b9-6c84-6902-b40e-000000002e00}13840C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:32.963{8223a6b9-6c84-6902-b50e-000000002e00}13880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:33.008{8223a6b9-6c84-6902-b60e-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:33.221{8223a6b9-6c85-6902-b70e-000000002e00}9588C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:33.262{8223a6b9-6c85-6902-b80e-000000002e00}11040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:33.341{8223a6b9-6c85-6902-b90e-000000002e00}3892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:33.500{8223a6b9-6c85-6902-ba0e-000000002e00}7016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:33.538{8223a6b9-6c82-6902-b10e-000000002e00}6112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:33.564{8223a6b9-6c85-6902-bb0e-000000002e00}4740C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:33.675{8223a6b9-6c85-6902-bc0e-000000002e00}1804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:35.508{8223a6b9-6c85-6902-bd0e-000000002e00}1240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:35.520{8223a6b9-6c86-6902-be0e-000000002e00}10580C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:35.524{8223a6b9-6c86-6902-bf0e-000000002e00}2956C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:35.555{8223a6b9-6c87-6902-c10e-000000002e00}9932C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:35.826{8223a6b9-6c87-6902-c20e-000000002e00}11716C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:35.906{8223a6b9-6c87-6902-c30e-000000002e00}13264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:36.320{8223a6b9-6c87-6902-c40e-000000002e00}4468C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:36.420{8223a6b9-6c88-6902-c50e-000000002e00}13360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:36.803{8223a6b9-6c88-6902-c60e-000000002e00}2360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:36.910{8223a6b9-6c88-6902-c70e-000000002e00}11968C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.475{8223a6b9-6c88-6902-c80e-000000002e00}10496C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.524{8223a6b9-6c89-6902-c90e-000000002e00}13428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.584{8223a6b9-6c89-6902-ca0e-000000002e00}2984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.632{8223a6b9-6c89-6902-cb0e-000000002e00}7288C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.695{8223a6b9-6c89-6902-cc0e-000000002e00}8128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.743{8223a6b9-6c89-6902-cd0e-000000002e00}5104C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.806{8223a6b9-6c89-6902-ce0e-000000002e00}7348C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.838{8223a6b9-6c89-6902-cf0e-000000002e00}14052C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.905{8223a6b9-6c89-6902-d00e-000000002e00}4596C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:37.949{8223a6b9-6c89-6902-d10e-000000002e00}1080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.007{8223a6b9-6c89-6902-d20e-000000002e00}1240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.051{8223a6b9-6c8a-6902-d30e-000000002e00}11716C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.110{8223a6b9-6c8a-6902-d40e-000000002e00}13264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.157{8223a6b9-6c8a-6902-d50e-000000002e00}4468C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.220{8223a6b9-6c8a-6902-d60e-000000002e00}7316C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.284{8223a6b9-6c8a-6902-d70e-000000002e00}13756C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.332{8223a6b9-6c8a-6902-d80e-000000002e00}5852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.382{8223a6b9-6c8a-6902-d90e-000000002e00}2668C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.444{8223a6b9-6c8a-6902-da0e-000000002e00}13392C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.492{8223a6b9-6c8a-6902-db0e-000000002e00}8300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.524{8223a6b9-6c87-6902-c00e-000000002e00}5128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.540{8223a6b9-6c8a-6902-dc0e-000000002e00}6440C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.603{8223a6b9-6c8a-6902-dd0e-000000002e00}12952C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.650{8223a6b9-6c8a-6902-de0e-000000002e00}12944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.713{8223a6b9-6c8a-6902-df0e-000000002e00}9820C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.761{8223a6b9-6c8a-6902-e00e-000000002e00}10772C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.824{8223a6b9-6c8a-6902-e10e-000000002e00}6568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.887{8223a6b9-6c8a-6902-e20e-000000002e00}3412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.934{8223a6b9-6c8a-6902-e30e-000000002e00}2228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:38.998{8223a6b9-6c8a-6902-e40e-000000002e00}5484C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.045{8223a6b9-6c8a-6902-e50e-000000002e00}10692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.094{8223a6b9-6c8b-6902-e60e-000000002e00}5836C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.141{8223a6b9-6c8b-6902-e70e-000000002e00}620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.204{8223a6b9-6c8b-6902-e80e-000000002e00}10292C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.252{8223a6b9-6c8b-6902-e90e-000000002e00}5420C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.318{8223a6b9-6c8b-6902-ea0e-000000002e00}13712C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.363{8223a6b9-6c8b-6902-eb0e-000000002e00}2808C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.427{8223a6b9-6c8b-6902-ec0e-000000002e00}7260C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.475{8223a6b9-6c8b-6902-ed0e-000000002e00}12872C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.541{8223a6b9-6c8b-6902-ee0e-000000002e00}10544C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.602{8223a6b9-6c8b-6902-f10e-000000002e00}1804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.660{8223a6b9-6c8b-6902-f20e-000000002e00}14052C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.708{8223a6b9-6c8b-6902-f30e-000000002e00}4596C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.761{8223a6b9-6c8b-6902-f40e-000000002e00}1080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.825{8223a6b9-6c8b-6902-f50e-000000002e00}3412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.873{8223a6b9-6c8b-6902-f60e-000000002e00}2228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.936{8223a6b9-6c8b-6902-f70e-000000002e00}5484C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:39.984{8223a6b9-6c8b-6902-f80e-000000002e00}10692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.050{8223a6b9-6c8b-6902-f90e-000000002e00}4860C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.124{8223a6b9-6c8c-6902-fa0e-000000002e00}4352C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.186{8223a6b9-6c8c-6902-fc0e-000000002e00}10496C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.242{8223a6b9-6c8c-6902-fd0e-000000002e00}13428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.292{8223a6b9-6c8c-6902-fe0e-000000002e00}2984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.352{8223a6b9-6c8c-6902-ff0e-000000002e00}2992C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.399{8223a6b9-6c8c-6902-000f-000000002e00}5328C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.464{8223a6b9-6c8c-6902-010f-000000002e00}4740C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.521{8223a6b9-6c8c-6902-020f-000000002e00}12000C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.521{8223a6b9-6c8b-6902-ef0e-000000002e00}6832C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.527{8223a6b9-6c8b-6902-f00e-000000002e00}9356C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.588{8223a6b9-6c8c-6902-030f-000000002e00}984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.652{8223a6b9-6c8c-6902-040f-000000002e00}4340C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.706{8223a6b9-6c8c-6902-050f-000000002e00}9856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.761{8223a6b9-6c8c-6902-060f-000000002e00}13408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.809{8223a6b9-6c8c-6902-070f-000000002e00}13964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.872{8223a6b9-6c8c-6902-080f-000000002e00}10036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.927{8223a6b9-6c8c-6902-090f-000000002e00}13900C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:40.984{8223a6b9-6c8c-6902-0a0f-000000002e00}7316C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.039{8223a6b9-6c8c-6902-0b0f-000000002e00}8328C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.110{8223a6b9-6c8d-6902-0c0f-000000002e00}11040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.172{8223a6b9-6c8d-6902-0d0f-000000002e00}3672C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.221{8223a6b9-6c8d-6902-0e0f-000000002e00}7016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.269{8223a6b9-6c8d-6902-0f0f-000000002e00}6036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.317{8223a6b9-6c8d-6902-100f-000000002e00}3664C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.383{8223a6b9-6c8d-6902-110f-000000002e00}13916C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.436{8223a6b9-6c8d-6902-120f-000000002e00}9960C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.492{8223a6b9-6c8d-6902-130f-000000002e00}11832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.555{8223a6b9-6c8d-6902-140f-000000002e00}14016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.665{8223a6b9-6c8d-6902-150f-000000002e00}9744C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.728{8223a6b9-6c8d-6902-160f-000000002e00}13684C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.794{8223a6b9-6c8d-6902-170f-000000002e00}9856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.855{8223a6b9-6c8d-6902-180f-000000002e00}4712C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.919{8223a6b9-6c8d-6902-190f-000000002e00}12720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:41.982{8223a6b9-6c8d-6902-1a0f-000000002e00}14240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:42.046{8223a6b9-6c8d-6902-1b0f-000000002e00}13880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:42.110{8223a6b9-6c8e-6902-1c0f-000000002e00}7316C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:42.220{8223a6b9-6c8e-6902-1d0f-000000002e00}8328C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:42.334{8223a6b9-6c8e-6902-1e0f-000000002e00}11040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:42.494{8223a6b9-6c8e-6902-1f0f-000000002e00}3672C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:42.617{8223a6b9-6c8e-6902-200f-000000002e00}7016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:42.697{8223a6b9-6c8e-6902-210f-000000002e00}6036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:43.532{8223a6b9-6c8e-6902-220f-000000002e00}3664C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:43.532{8223a6b9-6c8c-6902-fb0e-000000002e00}14188C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:43.611{8223a6b9-6c8f-6902-230f-000000002e00}1720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:43.787{8223a6b9-6c8f-6902-240f-000000002e00}13624C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:43.943{8223a6b9-6c8f-6902-250f-000000002e00}9248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:44.054{8223a6b9-6c8f-6902-260f-000000002e00}13396C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:44.136{8223a6b9-6c90-6902-270f-000000002e00}3412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:44.301{8223a6b9-6c90-6902-280f-000000002e00}8252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:44.383{8223a6b9-6c90-6902-290f-000000002e00}4712C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:44.468{8223a6b9-6c90-6902-2a0f-000000002e00}12720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:44.609{8223a6b9-6c90-6902-2b0f-000000002e00}14240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.242{8223a6b9-6c90-6902-2e0f-000000002e00}3892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.335{8223a6b9-6c91-6902-300f-000000002e00}7260C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.522{8223a6b9-6c90-6902-2c0f-000000002e00}10516C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.527{8223a6b9-6c90-6902-2d0f-000000002e00}11068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.726{8223a6b9-6c91-6902-310f-000000002e00}14332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.793{8223a6b9-6c91-6902-320f-000000002e00}10620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.854{8223a6b9-6c91-6902-330f-000000002e00}2892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.905{8223a6b9-6c91-6902-340f-000000002e00}10544C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:45.971{8223a6b9-6c91-6902-350f-000000002e00}6832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.035{8223a6b9-6c91-6902-360f-000000002e00}6384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.093{8223a6b9-6c92-6902-370f-000000002e00}3248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.139{8223a6b9-6c92-6902-380f-000000002e00}9744C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.202{8223a6b9-6c92-6902-390f-000000002e00}6088C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.266{8223a6b9-6c92-6902-3a0f-000000002e00}5676C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.329{8223a6b9-6c92-6902-3b0f-000000002e00}10648C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.393{8223a6b9-6c92-6902-3c0f-000000002e00}13812C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.456{8223a6b9-6c92-6902-3d0f-000000002e00}13852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.503{8223a6b9-6c92-6902-3e0f-000000002e00}13572C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.566{8223a6b9-6c92-6902-3f0f-000000002e00}13868C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.646{8223a6b9-6c92-6902-400f-000000002e00}3180C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.693{8223a6b9-6c92-6902-410f-000000002e00}11360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.756{8223a6b9-6c92-6902-420f-000000002e00}7260C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.808{8223a6b9-6c92-6902-430f-000000002e00}7024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.867{8223a6b9-6c92-6902-440f-000000002e00}8552C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.930{8223a6b9-6c92-6902-450f-000000002e00}11128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:46.990{8223a6b9-6c92-6902-460f-000000002e00}14304C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.046{8223a6b9-6c92-6902-470f-000000002e00}984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.108{8223a6b9-6c93-6902-480f-000000002e00}1996C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.169{8223a6b9-6c93-6902-490f-000000002e00}11828C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.217{8223a6b9-6c93-6902-4a0f-000000002e00}9744C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.280{8223a6b9-6c93-6902-4b0f-000000002e00}6088C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.328{8223a6b9-6c93-6902-4c0f-000000002e00}5676C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.397{8223a6b9-6c93-6902-4d0f-000000002e00}10648C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.470{8223a6b9-6c93-6902-4e0f-000000002e00}13812C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.538{8223a6b9-6c93-6902-4f0f-000000002e00}13852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.597{8223a6b9-6c93-6902-500f-000000002e00}13572C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:47.676{8223a6b9-6c93-6902-510f-000000002e00}13768C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:48.330{8223a6b9-6c93-6902-520f-000000002e00}9692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:48.419{8223a6b9-6c94-6902-530f-000000002e00}10516C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:48.543{8223a6b9-6c91-6902-2f0f-000000002e00}11516C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:48.898{8223a6b9-6c94-6902-540f-000000002e00}11908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:48.958{8223a6b9-6c94-6902-550f-000000002e00}10088C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:49.032{8223a6b9-6c94-6902-560f-000000002e00}13388C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:49.259{8223a6b9-6c95-6902-570f-000000002e00}3280C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:49.319{8223a6b9-6c95-6902-580f-000000002e00}4912C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:49.400{8223a6b9-6c95-6902-590f-000000002e00}2028C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:49.541{8223a6b9-6c95-6902-5a0f-000000002e00}13908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:49.671{8223a6b9-6c95-6902-5d0f-000000002e00}2416C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:50.521{8223a6b9-6c95-6902-5b0f-000000002e00}1080C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:50.526{8223a6b9-6c95-6902-5c0f-000000002e00}9776C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.019{8223a6b9-6c95-6902-5e0f-000000002e00}392C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.098{8223a6b9-6c97-6902-600f-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.194{8223a6b9-6c97-6902-610f-000000002e00}13776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.297{8223a6b9-6c97-6902-620f-000000002e00}12988C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.368{8223a6b9-6c97-6902-630f-000000002e00}13576C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.432{8223a6b9-6c97-6902-640f-000000002e00}3480C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.496{8223a6b9-6c97-6902-650f-000000002e00}14140C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.560{8223a6b9-6c97-6902-660f-000000002e00}11068C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.639{8223a6b9-6c97-6902-670f-000000002e00}14288C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.709{8223a6b9-6c97-6902-680f-000000002e00}12880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.766{8223a6b9-6c97-6902-690f-000000002e00}6036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.830{8223a6b9-6c97-6902-6a0f-000000002e00}7348C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.878{8223a6b9-6c97-6902-6b0f-000000002e00}14148C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.941{8223a6b9-6c97-6902-6c0f-000000002e00}12200C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:51.989{8223a6b9-6c97-6902-6d0f-000000002e00}11128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.053{8223a6b9-6c98-6902-6e0f-000000002e00}2956C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.117{8223a6b9-6c98-6902-6f0f-000000002e00}11428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.180{8223a6b9-6c98-6902-700f-000000002e00}6384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.244{8223a6b9-6c98-6902-710f-000000002e00}1240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.308{8223a6b9-6c98-6902-720f-000000002e00}10108C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.388{8223a6b9-6c98-6902-730f-000000002e00}13996C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.446{8223a6b9-6c98-6902-740f-000000002e00}14152C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.498{8223a6b9-6c98-6902-750f-000000002e00}11896C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.561{8223a6b9-6c98-6902-760f-000000002e00}11952C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.614{8223a6b9-6c98-6902-770f-000000002e00}1112C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.682{8223a6b9-6c98-6902-780f-000000002e00}6908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.738{8223a6b9-6c98-6902-790f-000000002e00}3892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.799{8223a6b9-6c98-6902-7a0f-000000002e00}6508C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.847{8223a6b9-6c98-6902-7b0f-000000002e00}5420C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.910{8223a6b9-6c98-6902-7c0f-000000002e00}9692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:52.973{8223a6b9-6c98-6902-7d0f-000000002e00}3856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.037{8223a6b9-6c98-6902-7e0f-000000002e00}13256C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.084{8223a6b9-6c99-6902-7f0f-000000002e00}14112C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.146{8223a6b9-6c99-6902-800f-000000002e00}13480C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.225{8223a6b9-6c99-6902-810f-000000002e00}12852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.289{8223a6b9-6c99-6902-820f-000000002e00}10560C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.351{8223a6b9-6c99-6902-830f-000000002e00}9024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.399{8223a6b9-6c99-6902-840f-000000002e00}9356C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.457{8223a6b9-6c99-6902-850f-000000002e00}4596C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.511{8223a6b9-6c99-6902-860f-000000002e00}13536C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.527{8223a6b9-6c96-6902-5f0f-000000002e00}10232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.558{8223a6b9-6c99-6902-870f-000000002e00}13788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.622{8223a6b9-6c99-6902-880f-000000002e00}5936C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.673{8223a6b9-6c99-6902-890f-000000002e00}11964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.726{8223a6b9-6c99-6902-8a0f-000000002e00}10028C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.780{8223a6b9-6c99-6902-8b0f-000000002e00}1080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.830{8223a6b9-6c99-6902-8c0f-000000002e00}1780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.882{8223a6b9-6c99-6902-8d0f-000000002e00}2128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.939{8223a6b9-6c99-6902-8e0f-000000002e00}14240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:53.987{8223a6b9-6c99-6902-8f0f-000000002e00}10496C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.037{8223a6b9-6c99-6902-900f-000000002e00}1444C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.097{8223a6b9-6c9a-6902-910f-000000002e00}12824C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.161{8223a6b9-6c9a-6902-920f-000000002e00}9932C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.208{8223a6b9-6c9a-6902-930f-000000002e00}7016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.256{8223a6b9-6c9a-6902-940f-000000002e00}14172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.320{8223a6b9-6c9a-6902-950f-000000002e00}14288C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.367{8223a6b9-6c9a-6902-960f-000000002e00}12880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.426{8223a6b9-6c9a-6902-970f-000000002e00}6036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.478{8223a6b9-6c9a-6902-980f-000000002e00}12944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.545{8223a6b9-6c9a-6902-990f-000000002e00}14148C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.653{8223a6b9-6c9a-6902-9c0f-000000002e00}9048C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.703{8223a6b9-6c9a-6902-9d0f-000000002e00}13460C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.748{8223a6b9-6c9a-6902-9e0f-000000002e00}10692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.796{8223a6b9-6c9a-6902-9f0f-000000002e00}9248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.859{8223a6b9-6c9a-6902-a00f-000000002e00}12160C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.907{8223a6b9-6c9a-6902-a10f-000000002e00}13412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:54.955{8223a6b9-6c9a-6902-a20f-000000002e00}5080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.018{8223a6b9-6c9a-6902-a30f-000000002e00}13840C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.069{8223a6b9-6c9b-6902-a40f-000000002e00}2360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.140{8223a6b9-6c9b-6902-a50f-000000002e00}8300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.193{8223a6b9-6c9b-6902-a70f-000000002e00}488C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.243{8223a6b9-6c9b-6902-a80f-000000002e00}7468C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.297{8223a6b9-6c9b-6902-a90f-000000002e00}14128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.352{8223a6b9-6c9b-6902-aa0f-000000002e00}504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.399{8223a6b9-6c9b-6902-ab0f-000000002e00}8128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.447{8223a6b9-6c9b-6902-ac0f-000000002e00}7016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.511{8223a6b9-6c9b-6902-ad0f-000000002e00}7132C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.522{8223a6b9-6c9a-6902-9a0f-000000002e00}5500C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.525{8223a6b9-6c9a-6902-9b0f-000000002e00}7436C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.572{8223a6b9-6c9b-6902-ae0f-000000002e00}10860C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.667{8223a6b9-6c9b-6902-af0f-000000002e00}10396C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.762{8223a6b9-6c9b-6902-b00f-000000002e00}7348C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.825{8223a6b9-6c9b-6902-b10f-000000002e00}8152C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.875{8223a6b9-6c9b-6902-b20f-000000002e00}9612C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.937{8223a6b9-6c9b-6902-b30f-000000002e00}6832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:55.996{8223a6b9-6c9b-6902-b40f-000000002e00}2560C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.072{8223a6b9-6c9b-6902-b50f-000000002e00}14120C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.145{8223a6b9-6c9c-6902-b60f-000000002e00}1996C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.204{8223a6b9-6c9c-6902-b70f-000000002e00}13656C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.260{8223a6b9-6c9c-6902-b80f-000000002e00}5324C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.310{8223a6b9-6c9c-6902-b90f-000000002e00}11716C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.364{8223a6b9-6c9c-6902-ba0f-000000002e00}13596C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.424{8223a6b9-6c9c-6902-bb0f-000000002e00}2080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.474{8223a6b9-6c9c-6902-bc0f-000000002e00}12124C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.532{8223a6b9-6c9c-6902-bd0f-000000002e00}12848C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.590{8223a6b9-6c9c-6902-be0f-000000002e00}13576C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.634{8223a6b9-6c9c-6902-bf0f-000000002e00}9316C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.690{8223a6b9-6c9c-6902-c00f-000000002e00}5420C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.810{8223a6b9-6c9c-6902-c10f-000000002e00}9692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.888{8223a6b9-6c9c-6902-c20f-000000002e00}6728C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:56.999{8223a6b9-6c9c-6902-c30f-000000002e00}5780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:35:58.531{8223a6b9-6c9b-6902-a60f-000000002e00}5340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:00.523{8223a6b9-6c9f-6902-c50f-000000002e00}13416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:00.526{8223a6b9-6c9f-6902-c60f-000000002e00}10620C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:01.543{8223a6b9-6c9c-6902-c40f-000000002e00}9960C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:01.602{8223a6b9-6ca1-6902-c80f-000000002e00}8552C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:01.682{8223a6b9-6ca1-6902-c90f-000000002e00}8152C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:01.736{8223a6b9-6ca1-6902-ca0f-000000002e00}9612C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:01.786{8223a6b9-6ca1-6902-cb0f-000000002e00}14272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:01.850{8223a6b9-6ca1-6902-cc0f-000000002e00}11428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:01.913{8223a6b9-6ca1-6902-cd0f-000000002e00}13360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:01.961{8223a6b9-6ca1-6902-ce0f-000000002e00}10164C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.011{8223a6b9-6ca1-6902-cf0f-000000002e00}10472C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.071{8223a6b9-6ca2-6902-d00f-000000002e00}13620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.121{8223a6b9-6ca2-6902-d10f-000000002e00}13396C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.173{8223a6b9-6ca2-6902-d20f-000000002e00}1780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.263{8223a6b9-6ca2-6902-d30f-000000002e00}10416C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.318{8223a6b9-6ca2-6902-d40f-000000002e00}8300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.389{8223a6b9-6ca2-6902-d50f-000000002e00}488C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.450{8223a6b9-6ca2-6902-d60f-000000002e00}7468C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.516{8223a6b9-6ca2-6902-d70f-000000002e00}14128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.643{8223a6b9-6ca2-6902-d80f-000000002e00}504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.722{8223a6b9-6ca2-6902-d90f-000000002e00}8128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.772{8223a6b9-6ca2-6902-da0f-000000002e00}7016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.848{8223a6b9-6ca2-6902-db0f-000000002e00}984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.896{8223a6b9-6ca2-6902-dc0f-000000002e00}13988C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:02.945{8223a6b9-6ca2-6902-dd0f-000000002e00}10212C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.007{8223a6b9-6ca2-6902-de0f-000000002e00}8340C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.054{8223a6b9-6ca3-6902-df0f-000000002e00}7436C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.117{8223a6b9-6ca3-6902-e00f-000000002e00}5852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.165{8223a6b9-6ca3-6902-e10f-000000002e00}9044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.220{8223a6b9-6ca3-6902-e20f-000000002e00}13944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.272{8223a6b9-6ca3-6902-e30f-000000002e00}13756C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.326{8223a6b9-6ca3-6902-e40f-000000002e00}2560C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.371{8223a6b9-6ca3-6902-e50f-000000002e00}5936C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.434{8223a6b9-6ca3-6902-e60f-000000002e00}11964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.484{8223a6b9-6ca3-6902-e70f-000000002e00}10028C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.529{8223a6b9-6ca0-6902-c70f-000000002e00}14116C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.535{8223a6b9-6ca3-6902-e80f-000000002e00}1080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.592{8223a6b9-6ca3-6902-e90f-000000002e00}13840C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:03.849{8223a6b9-6ca3-6902-ea0f-000000002e00}2360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:05.161{8223a6b9-6ca3-6902-eb0f-000000002e00}8304C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:05.325{8223a6b9-6ca5-6902-ef0f-000000002e00}6476C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:05.522{8223a6b9-6ca4-6902-ec0f-000000002e00}12988C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:05.525{8223a6b9-6ca4-6902-ed0f-000000002e00}10416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:05.666{8223a6b9-6ca5-6902-f00f-000000002e00}488C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:05.742{8223a6b9-6ca5-6902-f10f-000000002e00}504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:06.131{8223a6b9-6ca5-6902-f20f-000000002e00}8128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:06.351{8223a6b9-6ca6-6902-f30f-000000002e00}7016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:06.792{8223a6b9-6ca6-6902-f40f-000000002e00}984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:07.214{8223a6b9-6ca6-6902-f50f-000000002e00}13988C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:08.542{8223a6b9-6ca5-6902-ee0f-000000002e00}13576C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:10.521{8223a6b9-6ca9-6902-f70f-000000002e00}10592C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:10.525{8223a6b9-6ca9-6902-f80f-000000002e00}2956C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:13.355{8223a6b9-6ca7-6902-f60f-000000002e00}10212C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:13.560{8223a6b9-6caa-6902-f90f-000000002e00}6384C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:13.827{8223a6b9-6cad-6902-fa0f-000000002e00}13996C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:15.521{8223a6b9-6cae-6902-fc0f-000000002e00}14116C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:15.524{8223a6b9-6cae-6902-fd0f-000000002e00}13264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:17.643{8223a6b9-6cad-6902-fb0f-000000002e00}3412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:17.855{8223a6b9-6cb1-6902-ff0f-000000002e00}13904C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:18.537{8223a6b9-6caf-6902-fe0f-000000002e00}2080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:20.522{8223a6b9-6cb3-6902-0110-000000002e00}8300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:20.525{8223a6b9-6cb3-6902-0210-000000002e00}1444C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:22.556{8223a6b9-6cb1-6902-0010-000000002e00}8304C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:22.641{8223a6b9-6cb6-6902-0410-000000002e00}6728C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:22.857{8223a6b9-6cb6-6902-0510-000000002e00}5780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:23.096{8223a6b9-6cb6-6902-0610-000000002e00}4912C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:23.254{8223a6b9-6c32-6902-c50d-000000002e00}13984C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000026350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:23.254{8223a6b9-6c32-6902-c30d-000000002e00}13592C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000026351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:23.526{8223a6b9-6cb4-6902-0310-000000002e00}4976C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:25.440{8223a6b9-6cb8-6902-0810-000000002e00}8356C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:25.448{8223a6b9-6cb8-6902-0910-000000002e00}11692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:26.448{8223a6b9-6cb9-6902-0b10-000000002e00}13692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:26.452{8223a6b9-6cb9-6902-0c10-000000002e00}10592C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:27.155{8223a6b9-6cb7-6902-0710-000000002e00}7508C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:27.253{8223a6b9-6cbb-6902-0d10-000000002e00}11616C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:27.364{8223a6b9-6cbb-6902-0e10-000000002e00}14016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:27.539{8223a6b9-6cbb-6902-0f10-000000002e00}11964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:28.699{8223a6b9-6cbb-6902-1010-000000002e00}13620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:28.926{8223a6b9-6cbc-6902-1110-000000002e00}4712C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:29.390{8223a6b9-6cbc-6902-1210-000000002e00}9744C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:29.452{8223a6b9-6cb8-6902-0a10-000000002e00}13588C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:29.684{8223a6b9-6cbd-6902-1310-000000002e00}14320C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:30.521{8223a6b9-6cbd-6902-1410-000000002e00}13804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:30.525{8223a6b9-6cbd-6902-1510-000000002e00}2360C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:31.478{8223a6b9-6cbd-6902-1610-000000002e00}10800C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:31.526{8223a6b9-6cbe-6902-1810-000000002e00}6508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:31.529{8223a6b9-6cbe-6902-1910-000000002e00}9932C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:31.578{8223a6b9-6cbf-6902-1a10-000000002e00}13560C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:31.745{8223a6b9-6cbf-6902-1b10-000000002e00}13884C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:31.855{8223a6b9-6cbf-6902-1c10-000000002e00}5340C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:32.717{8223a6b9-6cbf-6902-1d10-000000002e00}11096C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:32.816{8223a6b9-6cc0-6902-1e10-000000002e00}11864C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:33.640{8223a6b9-6cc0-6902-1f10-000000002e00}4536C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:33.723{8223a6b9-6cc1-6902-2010-000000002e00}14008C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:34.093{8223a6b9-6cc1-6902-2110-000000002e00}13604C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:34.264{8223a6b9-6cc2-6902-2210-000000002e00}13768C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:34.536{8223a6b9-6cbe-6902-1710-000000002e00}6340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:35.523{8223a6b9-6cc2-6902-2410-000000002e00}8236C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:35.526{8223a6b9-6cc2-6902-2510-000000002e00}10908C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:35.756{8223a6b9-6cc2-6902-2310-000000002e00}1964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:35.841{8223a6b9-6cc3-6902-2710-000000002e00}6680C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:36.069{8223a6b9-6cc3-6902-2810-000000002e00}10692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:36.153{8223a6b9-6cc4-6902-2910-000000002e00}14016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:36.387{8223a6b9-6cc4-6902-2a10-000000002e00}3552C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:36.445{8223a6b9-6cc4-6902-2b10-000000002e00}1068C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:36.508{8223a6b9-6cc4-6902-2c10-000000002e00}4896C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:36.619{8223a6b9-6cc4-6902-2d10-000000002e00}10396C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:38.154{8223a6b9-6cc4-6902-2e10-000000002e00}9044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:38.246{8223a6b9-6cc6-6902-2f10-000000002e00}840C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:38.342{8223a6b9-6cc6-6902-3010-000000002e00}14240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:38.487{8223a6b9-6cc6-6902-3110-000000002e00}11360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:38.540{8223a6b9-6cc3-6902-2610-000000002e00}2892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:40.522{8223a6b9-6cc7-6902-3310-000000002e00}10852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:40.525{8223a6b9-6cc7-6902-3410-000000002e00}7016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:43.533{8223a6b9-6cc8-6902-3510-000000002e00}12948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:45.524{8223a6b9-6ccc-6902-3610-000000002e00}13040C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:45.527{8223a6b9-6ccc-6902-3710-000000002e00}13556C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:48.527{8223a6b9-6ccd-6902-3810-000000002e00}13524C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:50.521{8223a6b9-6cd1-6902-3910-000000002e00}11936C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:50.524{8223a6b9-6cd1-6902-3a10-000000002e00}13256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:53.545{8223a6b9-6cd2-6902-3b10-000000002e00}13692C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:55.523{8223a6b9-6cd6-6902-3c10-000000002e00}4084C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:55.527{8223a6b9-6cd6-6902-3d10-000000002e00}3664C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:36:58.536{8223a6b9-6cd7-6902-3e10-000000002e00}1128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:00.522{8223a6b9-6cdb-6902-3f10-000000002e00}13996C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:00.525{8223a6b9-6cdb-6902-4010-000000002e00}5624C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:03.533{8223a6b9-6cdc-6902-4110-000000002e00}3092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:05.441{8223a6b9-6ce0-6902-4210-000000002e00}13588C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:05.449{8223a6b9-6ce0-6902-4310-000000002e00}14256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:06.449{8223a6b9-6ce1-6902-4510-000000002e00}14128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:06.452{8223a6b9-6ce1-6902-4610-000000002e00}8128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:09.452{8223a6b9-6ce0-6902-4410-000000002e00}5296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:10.522{8223a6b9-6ce5-6902-4710-000000002e00}7508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:10.525{8223a6b9-6ce5-6902-4810-000000002e00}10096C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:11.529{8223a6b9-6ce6-6902-4a10-000000002e00}10036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:11.534{8223a6b9-6ce6-6902-4b10-000000002e00}13916C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:14.543{8223a6b9-6ce6-6902-4910-000000002e00}7720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:15.449{8223a6b9-6cea-6902-4c10-000000002e00}2984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:15.454{8223a6b9-6cea-6902-4d10-000000002e00}1104C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:16.457{8223a6b9-6ceb-6902-4f10-000000002e00}924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:16.461{8223a6b9-6ceb-6902-5010-000000002e00}5868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:18.134{8223a6b9-6cc6-6902-3210-000000002e00}14172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:18.254{8223a6b9-6cee-6902-5110-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:18.651{8223a6b9-6cee-6902-5210-000000002e00}11692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:18.754{8223a6b9-6cee-6902-5310-000000002e00}1552C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:19.461{8223a6b9-6cea-6902-4e10-000000002e00}392C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:20.523{8223a6b9-6cef-6902-5510-000000002e00}14152C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:20.526{8223a6b9-6cef-6902-5610-000000002e00}12932C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:21.531{8223a6b9-6cf0-6902-5810-000000002e00}14220C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:21.532{8223a6b9-6cf0-6902-5910-000000002e00}10872C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:24.542{8223a6b9-6cf0-6902-5710-000000002e00}13996C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:25.523{8223a6b9-6cf4-6902-5a10-000000002e00}13436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:25.528{8223a6b9-6cf4-6902-5b10-000000002e00}9316C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:28.537{8223a6b9-6cf5-6902-5c10-000000002e00}3672C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:30.522{8223a6b9-6cf9-6902-5d10-000000002e00}840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:30.526{8223a6b9-6cf9-6902-5e10-000000002e00}12848C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:33.587{8223a6b9-6cfa-6902-5f10-000000002e00}14072C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:35.522{8223a6b9-6cfe-6902-6010-000000002e00}11832C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:35.526{8223a6b9-6cfe-6902-6110-000000002e00}10252C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:38.529{8223a6b9-6cff-6902-6210-000000002e00}10508C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:40.524{8223a6b9-6d03-6902-6310-000000002e00}7720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:40.526{8223a6b9-6d03-6902-6410-000000002e00}9940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:43.545{8223a6b9-6d04-6902-6510-000000002e00}12824C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:45.522{8223a6b9-6d08-6902-6610-000000002e00}11168C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:45.526{8223a6b9-6d08-6902-6710-000000002e00}13624C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:48.535{8223a6b9-6d09-6902-6810-000000002e00}6112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:50.524{8223a6b9-6d0d-6902-6910-000000002e00}5048C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:50.527{8223a6b9-6d0d-6902-6a10-000000002e00}13124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:53.527{8223a6b9-6d0e-6902-6b10-000000002e00}4896C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:55.524{8223a6b9-6d12-6902-6c10-000000002e00}10396C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:55.527{8223a6b9-6d12-6902-6d10-000000002e00}10496C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:37:58.541{8223a6b9-6d13-6902-6e10-000000002e00}13444C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:00.522{8223a6b9-6d17-6902-6f10-000000002e00}12872C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:00.527{8223a6b9-6d17-6902-7010-000000002e00}7260C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:03.525{8223a6b9-6d18-6902-7110-000000002e00}4336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:05.396{8223a6b9-6cee-6902-5410-000000002e00}9892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:05.510{8223a6b9-6d1c-6902-7210-000000002e00}2560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:05.520{8223a6b9-6d1c-6902-7310-000000002e00}14320C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:05.539{8223a6b9-6d1d-6902-7510-000000002e00}3000C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:06.330{8223a6b9-6d1d-6902-7810-000000002e00}10140C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:06.430{8223a6b9-6d1e-6902-7910-000000002e00}11124C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:06.519{8223a6b9-6d1d-6902-7610-000000002e00}4540C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:06.523{8223a6b9-6d1d-6902-7710-000000002e00}9820C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:07.216{8223a6b9-6d1e-6902-7a10-000000002e00}1720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:07.285{8223a6b9-6d1f-6902-7b10-000000002e00}11480C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:07.432{8223a6b9-6d1f-6902-7c10-000000002e00}9236C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:07.515{8223a6b9-6d1f-6902-7d10-000000002e00}14008C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:08.902{8223a6b9-6d1f-6902-7e10-000000002e00}10104C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:08.950{8223a6b9-6d20-6902-7f10-000000002e00}11200C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:09.044{8223a6b9-6d20-6902-8010-000000002e00}14020C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:09.108{8223a6b9-6d21-6902-8110-000000002e00}8512C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:09.170{8223a6b9-6d21-6902-8210-000000002e00}13620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:09.250{8223a6b9-6d21-6902-8310-000000002e00}13780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:09.526{8223a6b9-6d1d-6902-7410-000000002e00}14168C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:10.289{8223a6b9-6d21-6902-8410-000000002e00}14220C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:10.363{8223a6b9-6d22-6902-8810-000000002e00}6688C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:10.523{8223a6b9-6d21-6902-8510-000000002e00}10396C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:10.526{8223a6b9-6d21-6902-8610-000000002e00}10496C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:11.530{8223a6b9-6d22-6902-8a10-000000002e00}7508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:11.533{8223a6b9-6d22-6902-8b10-000000002e00}1996C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:11.985{8223a6b9-6d22-6902-8910-000000002e00}5732C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:12.157{8223a6b9-6d23-6902-8c10-000000002e00}5128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:14.553{8223a6b9-6d22-6902-8710-000000002e00}13436C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:15.119{8223a6b9-6d24-6902-8d10-000000002e00}1488C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:15.179{8223a6b9-6d27-6902-9110-000000002e00}11908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:15.262{8223a6b9-6d27-6902-9210-000000002e00}6568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:15.523{8223a6b9-6d26-6902-8e10-000000002e00}840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:15.527{8223a6b9-6d26-6902-8f10-000000002e00}6440C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:16.363{8223a6b9-6d27-6902-9310-000000002e00}8404C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:16.453{8223a6b9-6d28-6902-9410-000000002e00}10296C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:17.330{8223a6b9-6d28-6902-9510-000000002e00}6476C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:17.402{8223a6b9-6d29-6902-9610-000000002e00}4340C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:17.768{8223a6b9-6d29-6902-9710-000000002e00}8272C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:17.837{8223a6b9-6d29-6902-9810-000000002e00}10500C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:18.297{8223a6b9-6d29-6902-9910-000000002e00}6112C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:18.359{8223a6b9-6d2a-6902-9a10-000000002e00}14304C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:18.437{8223a6b9-6d2a-6902-9b10-000000002e00}8512C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:18.541{8223a6b9-6d27-6902-9010-000000002e00}10580C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:20.524{8223a6b9-6d2b-6902-9d10-000000002e00}9588C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:20.528{8223a6b9-6d2b-6902-9e10-000000002e00}976C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:22.389{8223a6b9-6d2a-6902-9c10-000000002e00}13668C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:22.446{8223a6b9-6d2e-6902-a010-000000002e00}12872C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:22.516{8223a6b9-6d2e-6902-a110-000000002e00}3412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:22.576{8223a6b9-6d2e-6902-a210-000000002e00}280C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:22.642{8223a6b9-6d2e-6902-a310-000000002e00}13408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:22.707{8223a6b9-6d2e-6902-a410-000000002e00}12944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:22.768{8223a6b9-6d2e-6902-a510-000000002e00}13332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:22.839{8223a6b9-6d2e-6902-a610-000000002e00}14300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:23.004{8223a6b9-6d2e-6902-a710-000000002e00}11828C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:23.075{8223a6b9-6d2f-6902-a810-000000002e00}5956C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:23.244{8223a6b9-6d2f-6902-a910-000000002e00}9884C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:23.326{8223a6b9-6d2f-6902-aa10-000000002e00}9820C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:23.530{8223a6b9-6d2c-6902-9f10-000000002e00}6920C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:25.524{8223a6b9-6d30-6902-ac10-000000002e00}1804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:25.528{8223a6b9-6d30-6902-ad10-000000002e00}9940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:26.725{8223a6b9-6d2f-6902-ab10-000000002e00}9248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:26.785{8223a6b9-6d32-6902-af10-000000002e00}13604C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:27.380{8223a6b9-6d32-6902-b010-000000002e00}10804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:27.425{8223a6b9-6d33-6902-b110-000000002e00}13868C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:27.520{8223a6b9-6d33-6902-b210-000000002e00}10500C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:27.570{8223a6b9-6d33-6902-b310-000000002e00}14020C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:27.715{8223a6b9-6d33-6902-b410-000000002e00}12408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:28.537{8223a6b9-6d31-6902-ae10-000000002e00}7708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:30.523{8223a6b9-6d35-6902-b610-000000002e00}5544C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:30.527{8223a6b9-6d35-6902-b710-000000002e00}14112C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:33.527{8223a6b9-6d36-6902-b810-000000002e00}9588C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:35.516{8223a6b9-6d3a-6902-b910-000000002e00}4840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:35.521{8223a6b9-6d3a-6902-ba10-000000002e00}13964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:36.521{8223a6b9-6d3b-6902-bc10-000000002e00}9960C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:36.524{8223a6b9-6d3b-6902-bd10-000000002e00}9956C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:39.535{8223a6b9-6d3b-6902-bb10-000000002e00}13460C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:40.523{8223a6b9-6d3f-6902-be10-000000002e00}9788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:40.526{8223a6b9-6d3f-6902-bf10-000000002e00}14188C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:41.529{8223a6b9-6d40-6902-c110-000000002e00}3372C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:41.532{8223a6b9-6d40-6902-c210-000000002e00}13372C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:44.537{8223a6b9-6d40-6902-c010-000000002e00}10808C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:45.523{8223a6b9-6d44-6902-c310-000000002e00}14212C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:45.526{8223a6b9-6d44-6902-c410-000000002e00}10768C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:48.534{8223a6b9-6d45-6902-c510-000000002e00}12304C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:50.524{8223a6b9-6d49-6902-c610-000000002e00}3508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:50.528{8223a6b9-6d49-6902-c710-000000002e00}2596C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:53.533{8223a6b9-6d4a-6902-c810-000000002e00}9172C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:55.524{8223a6b9-6d4e-6902-c910-000000002e00}11968C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:55.527{8223a6b9-6d4e-6902-ca10-000000002e00}13424C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:38:58.541{8223a6b9-6d4f-6902-cb10-000000002e00}11692C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:00.523{8223a6b9-6d53-6902-cc10-000000002e00}10500C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:00.526{8223a6b9-6d53-6902-cd10-000000002e00}5676C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:03.536{8223a6b9-6d54-6902-ce10-000000002e00}13764C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:05.523{8223a6b9-6d58-6902-cf10-000000002e00}14168C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:05.527{8223a6b9-6d58-6902-d010-000000002e00}14028C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:07.292{8223a6b9-6d33-6902-b510-000000002e00}13124C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:07.718{8223a6b9-6d5b-6902-d210-000000002e00}4896C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:08.545{8223a6b9-6d59-6902-d110-000000002e00}7132C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:09.155{8223a6b9-6d5b-6902-d310-000000002e00}13512C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:09.202{8223a6b9-6c31-6902-b10d-000000002e00}584C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:09.344{8223a6b9-6d5d-6902-d410-000000002e00}6832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:09.847{8223a6b9-6c31-6902-c00d-000000002e00}4456C:\Windows\System32\svchost.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000026560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:10.526{8223a6b9-6d5d-6902-d610-000000002e00}2028C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:10.529{8223a6b9-6d5d-6902-d710-000000002e00}14240C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:12.739{8223a6b9-6c31-6902-b40d-000000002e00}11524C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:13.583{8223a6b9-6d5e-6902-d810-000000002e00}10108C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:15.524{8223a6b9-6d62-6902-d910-000000002e00}12988C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:15.527{8223a6b9-6d62-6902-da10-000000002e00}936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:18.534{8223a6b9-6d63-6902-db10-000000002e00}2668C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:20.524{8223a6b9-6d67-6902-dc10-000000002e00}9884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:20.528{8223a6b9-6d67-6902-dd10-000000002e00}5608C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:23.377{8223a6b9-6d5d-6902-d510-000000002e00}11128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:23.488{8223a6b9-6d6b-6902-df10-000000002e00}13248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:23.540{8223a6b9-6d68-6902-de10-000000002e00}1720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:23.885{8223a6b9-6d6b-6902-e010-000000002e00}2596C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:24.029{8223a6b9-6d6b-6902-e110-000000002e00}13568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:25.524{8223a6b9-6d6c-6902-e310-000000002e00}3104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:25.528{8223a6b9-6d6c-6902-e410-000000002e00}10760C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:28.540{8223a6b9-6d6d-6902-e510-000000002e00}10088C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:30.524{8223a6b9-6d71-6902-e610-000000002e00}6088C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:30.527{8223a6b9-6d71-6902-e710-000000002e00}12124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:32.490{8223a6b9-6d6c-6902-e210-000000002e00}488C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:32.632{8223a6b9-6d74-6902-e910-000000002e00}5328C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:33.536{8223a6b9-6d72-6902-e810-000000002e00}14052C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:35.524{8223a6b9-6d76-6902-eb10-000000002e00}13928C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:35.527{8223a6b9-6d76-6902-ec10-000000002e00}2128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:38.535{8223a6b9-6d77-6902-ed10-000000002e00}14116C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:40.524{8223a6b9-6d7b-6902-ee10-000000002e00}10544C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:40.527{8223a6b9-6d7b-6902-ef10-000000002e00}9960C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:43.525{8223a6b9-6d7c-6902-f010-000000002e00}14140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:45.526{8223a6b9-6d80-6902-f110-000000002e00}8136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:45.529{8223a6b9-6d80-6902-f210-000000002e00}620C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:48.541{8223a6b9-6d81-6902-f310-000000002e00}14016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:50.524{8223a6b9-6d85-6902-f410-000000002e00}13332C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:50.527{8223a6b9-6d85-6902-f510-000000002e00}13040C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:53.540{8223a6b9-6d86-6902-f610-000000002e00}2668C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:55.525{8223a6b9-6d8a-6902-f710-000000002e00}9884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:55.528{8223a6b9-6d8a-6902-f810-000000002e00}5608C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:39:58.533{8223a6b9-6d8b-6902-f910-000000002e00}840C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:00.524{8223a6b9-6d8f-6902-fa10-000000002e00}1720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:00.529{8223a6b9-6d8f-6902-fb10-000000002e00}9236C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:03.532{8223a6b9-6d90-6902-fc10-000000002e00}11164C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:05.524{8223a6b9-6d94-6902-fd10-000000002e00}1128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:05.527{8223a6b9-6d94-6902-fe10-000000002e00}3584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:08.538{8223a6b9-6d95-6902-ff10-000000002e00}10212C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:10.526{8223a6b9-6d99-6902-0011-000000002e00}10140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:10.528{8223a6b9-6d99-6902-0111-000000002e00}13596C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:13.532{8223a6b9-6d9a-6902-0211-000000002e00}7156C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:15.525{8223a6b9-6d9e-6902-0311-000000002e00}13528C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:15.528{8223a6b9-6d9e-6902-0411-000000002e00}1244C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:18.530{8223a6b9-6d9f-6902-0511-000000002e00}4384C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:19.004{8223a6b9-6d74-6902-ea10-000000002e00}5340C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:19.346{8223a6b9-6da3-6902-0611-000000002e00}13436C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:20.525{8223a6b9-6da3-6902-0811-000000002e00}9960C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:20.528{8223a6b9-6da3-6902-0911-000000002e00}14276C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:23.537{8223a6b9-6da4-6902-0a11-000000002e00}8152C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:25.525{8223a6b9-6da8-6902-0b11-000000002e00}13504C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:25.528{8223a6b9-6da8-6902-0c11-000000002e00}5324C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:28.537{8223a6b9-6da9-6902-0d11-000000002e00}10272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:29.198{8223a6b9-6da3-6902-0711-000000002e00}13804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:29.315{8223a6b9-6dad-6902-0e11-000000002e00}3032C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:29.682{8223a6b9-6dad-6902-0f11-000000002e00}9856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:30.247{8223a6b9-6dad-6902-1211-000000002e00}8128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:30.525{8223a6b9-6dad-6902-1011-000000002e00}13696C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:30.529{8223a6b9-6dad-6902-1111-000000002e00}2292C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:33.534{8223a6b9-6dae-6902-1311-000000002e00}12040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:33.775{8223a6b9-6dae-6902-1411-000000002e00}5080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:33.885{8223a6b9-6db1-6902-1511-000000002e00}5500C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:34.083{8223a6b9-6db1-6902-1611-000000002e00}9172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:34.297{8223a6b9-6db2-6902-1711-000000002e00}13124C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:34.865{8223a6b9-6db2-6902-1811-000000002e00}12408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:35.071{8223a6b9-6db2-6902-1b11-000000002e00}11144C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:35.525{8223a6b9-6db2-6902-1911-000000002e00}11692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:35.528{8223a6b9-6db2-6902-1a11-000000002e00}1128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:35.628{8223a6b9-6db3-6902-1c11-000000002e00}5544C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:35.845{8223a6b9-6db3-6902-1e11-000000002e00}11972C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:36.295{8223a6b9-6db3-6902-1f11-000000002e00}6088C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:36.422{8223a6b9-6db4-6902-2011-000000002e00}8252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:36.594{8223a6b9-6db4-6902-2111-000000002e00}13760C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:36.921{8223a6b9-6db4-6902-2211-000000002e00}2844C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:38.557{8223a6b9-6db3-6902-1d11-000000002e00}13596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:38.588{8223a6b9-6db4-6902-2311-000000002e00}12904C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:38.858{8223a6b9-6db6-6902-2411-000000002e00}2060C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:40.368{8223a6b9-6db6-6902-2511-000000002e00}984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:40.463{8223a6b9-6db8-6902-2911-000000002e00}6384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:40.525{8223a6b9-6db7-6902-2611-000000002e00}2900C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:40.529{8223a6b9-6db7-6902-2711-000000002e00}4540C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:40.717{8223a6b9-6db8-6902-2a11-000000002e00}10472C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:40.910{8223a6b9-6db8-6902-2b11-000000002e00}9240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:43.586{8223a6b9-6db8-6902-2811-000000002e00}6568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:45.525{8223a6b9-6dbc-6902-2d11-000000002e00}1112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:45.528{8223a6b9-6dbc-6902-2e11-000000002e00}13416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:48.533{8223a6b9-6dbd-6902-2f11-000000002e00}2360C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:50.527{8223a6b9-6dc1-6902-3011-000000002e00}2992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:50.529{8223a6b9-6dc1-6902-3111-000000002e00}10692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:53.533{8223a6b9-6dc2-6902-3211-000000002e00}6340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:55.525{8223a6b9-6dc6-6902-3311-000000002e00}5600C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:55.528{8223a6b9-6dc6-6902-3411-000000002e00}4340C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:40:58.535{8223a6b9-6dc7-6902-3511-000000002e00}13568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:00.525{8223a6b9-6dcb-6902-3611-000000002e00}12408C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:00.528{8223a6b9-6dcb-6902-3711-000000002e00}13700C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:03.533{8223a6b9-6dcc-6902-3811-000000002e00}3104C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:05.527{8223a6b9-6dd0-6902-3911-000000002e00}10580C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:05.537{8223a6b9-6dd0-6902-3a11-000000002e00}8404C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:08.542{8223a6b9-6dd1-6902-3b11-000000002e00}11636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:10.525{8223a6b9-6dd5-6902-3c11-000000002e00}2760C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:10.529{8223a6b9-6dd5-6902-3d11-000000002e00}6088C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:13.532{8223a6b9-6dd6-6902-3e11-000000002e00}5296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:15.526{8223a6b9-6dda-6902-3f11-000000002e00}14300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:15.530{8223a6b9-6dda-6902-4011-000000002e00}13360C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:18.543{8223a6b9-6ddb-6902-4111-000000002e00}10096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:20.526{8223a6b9-6ddf-6902-4211-000000002e00}14324C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:20.529{8223a6b9-6ddf-6902-4311-000000002e00}1940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:23.540{8223a6b9-6de0-6902-4411-000000002e00}11908C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:25.526{8223a6b9-6de4-6902-4511-000000002e00}8196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:25.529{8223a6b9-6de4-6902-4611-000000002e00}7132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:28.531{8223a6b9-6de5-6902-4711-000000002e00}13940C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:30.526{8223a6b9-6de9-6902-4811-000000002e00}5868C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:30.528{8223a6b9-6de9-6902-4911-000000002e00}9568C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:30.619{8223a6b9-6db8-6902-2c11-000000002e00}8136C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:30.740{8223a6b9-6dea-6902-4b11-000000002e00}13944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:31.528{8223a6b9-6dea-6902-4c11-000000002e00}13416C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:31.764{8223a6b9-6deb-6902-4d11-000000002e00}10908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:33.533{8223a6b9-6dea-6902-4a11-000000002e00}11524C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:35.402{8223a6b9-6dee-6902-4f11-000000002e00}11480C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:35.406{8223a6b9-6dee-6902-5011-000000002e00}13404C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:36.407{8223a6b9-6def-6902-5211-000000002e00}11680C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:36.411{8223a6b9-6def-6902-5311-000000002e00}9236C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:39.412{8223a6b9-6dee-6902-5111-000000002e00}6340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:40.526{8223a6b9-6df3-6902-5411-000000002e00}3384C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:40.530{8223a6b9-6df3-6902-5511-000000002e00}7008C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:41.531{8223a6b9-6df4-6902-5711-000000002e00}10140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:41.534{8223a6b9-6df4-6902-5811-000000002e00}10088C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:44.186{8223a6b9-6deb-6902-4e11-000000002e00}6920C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:44.458{8223a6b9-6df8-6902-5911-000000002e00}8264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:44.553{8223a6b9-6df4-6902-5611-000000002e00}4976C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:45.435{8223a6b9-6df8-6902-5b11-000000002e00}13884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:45.441{8223a6b9-6df8-6902-5c11-000000002e00}14240C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:46.440{8223a6b9-6df9-6902-5e11-000000002e00}13360C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:46.443{8223a6b9-6df9-6902-5f11-000000002e00}10232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:47.628{8223a6b9-6df8-6902-5a11-000000002e00}12636C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:47.849{8223a6b9-6dfb-6902-6011-000000002e00}2852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:49.446{8223a6b9-6df8-6902-5d11-000000002e00}5872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:49.635{8223a6b9-6dfb-6902-6111-000000002e00}14144C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:49.727{8223a6b9-6dfd-6902-6411-000000002e00}7180C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:50.526{8223a6b9-6dfd-6902-6211-000000002e00}12856C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:50.529{8223a6b9-6dfd-6902-6311-000000002e00}6384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:50.583{8223a6b9-6dfd-6902-6511-000000002e00}12016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:50.715{8223a6b9-6dfe-6902-6911-000000002e00}11932C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:51.534{8223a6b9-6dfe-6902-6711-000000002e00}9240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:51.537{8223a6b9-6dfe-6902-6811-000000002e00}5136C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:54.546{8223a6b9-6dfe-6902-6611-000000002e00}9956C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:55.400{8223a6b9-6e02-6902-6b11-000000002e00}13912C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:55.408{8223a6b9-6e02-6902-6c11-000000002e00}4012C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:56.408{8223a6b9-6e03-6902-6e11-000000002e00}13332C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:56.411{8223a6b9-6e03-6902-6f11-000000002e00}14212C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:41:59.430{8223a6b9-6e02-6902-6d11-000000002e00}13040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:00.526{8223a6b9-6e07-6902-7011-000000002e00}13156C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:00.529{8223a6b9-6e07-6902-7111-000000002e00}8300C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:01.533{8223a6b9-6e08-6902-7311-000000002e00}10696C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:01.536{8223a6b9-6e08-6902-7411-000000002e00}9412C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:04.589{8223a6b9-6e08-6902-7211-000000002e00}5600C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:05.488{8223a6b9-6e0c-6902-7511-000000002e00}13372C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:05.492{8223a6b9-6e0c-6902-7611-000000002e00}6340C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:06.493{8223a6b9-6e0d-6902-7811-000000002e00}1992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:06.496{8223a6b9-6e0d-6902-7911-000000002e00}11164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:09.514{8223a6b9-6e0c-6902-7711-000000002e00}9260C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:10.526{8223a6b9-6e11-6902-7a11-000000002e00}5760C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:10.531{8223a6b9-6e11-6902-7b11-000000002e00}1572C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:11.532{8223a6b9-6e12-6902-7d11-000000002e00}13620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:11.536{8223a6b9-6e12-6902-7e11-000000002e00}10872C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:13.228{8223a6b9-6dfe-6902-6a11-000000002e00}9568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:13.522{8223a6b9-6e15-6902-7f11-000000002e00}12412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:14.496{8223a6b9-6e15-6902-8011-000000002e00}13756C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:14.543{8223a6b9-6e12-6902-7c11-000000002e00}13072C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:14.654{8223a6b9-6e16-6902-8111-000000002e00}13360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:15.493{8223a6b9-6e16-6902-8211-000000002e00}7320C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:15.500{8223a6b9-6e16-6902-8311-000000002e00}13348C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:16.500{8223a6b9-6e17-6902-8611-000000002e00}10652C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:16.503{8223a6b9-6e17-6902-8711-000000002e00}9852C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:19.518{8223a6b9-6e17-6902-8511-000000002e00}13032C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:20.526{8223a6b9-6e1b-6902-8811-000000002e00}13684C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:20.529{8223a6b9-6e1b-6902-8911-000000002e00}11908C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:21.531{8223a6b9-6e1c-6902-8b11-000000002e00}8100C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:21.533{8223a6b9-6e1c-6902-8c11-000000002e00}12944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:21.737{8223a6b9-6e16-6902-8411-000000002e00}984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:21.862{8223a6b9-6e1d-6902-8d11-000000002e00}6788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:24.549{8223a6b9-6e1c-6902-8a11-000000002e00}5868C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:25.508{8223a6b9-6e20-6902-8f11-000000002e00}14188C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:25.511{8223a6b9-6e20-6902-9011-000000002e00}10908C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:26.511{8223a6b9-6e21-6902-9211-000000002e00}13880C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:26.516{8223a6b9-6e21-6902-9311-000000002e00}7588C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:26.865{8223a6b9-6e1d-6902-8e11-000000002e00}8240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:26.979{8223a6b9-6e22-6902-9411-000000002e00}13732C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:27.330{8223a6b9-6e22-6902-9511-000000002e00}14288C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:27.504{8223a6b9-6e23-6902-9611-000000002e00}4536C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:29.535{8223a6b9-6e21-6902-9111-000000002e00}14112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:30.526{8223a6b9-6e25-6902-9811-000000002e00}13560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:30.530{8223a6b9-6e25-6902-9911-000000002e00}8644C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:31.534{8223a6b9-6e26-6902-9b11-000000002e00}1552C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:31.537{8223a6b9-6e26-6902-9c11-000000002e00}8128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:34.596{8223a6b9-6e26-6902-9a11-000000002e00}6036C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:35.480{8223a6b9-6e2a-6902-9d11-000000002e00}8264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:35.485{8223a6b9-6e2a-6902-9e11-000000002e00}1244C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:36.485{8223a6b9-6e2b-6902-a011-000000002e00}13908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:36.488{8223a6b9-6e2b-6902-a111-000000002e00}8356C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:39.491{8223a6b9-6e2a-6902-9f11-000000002e00}10544C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:40.528{8223a6b9-6e2f-6902-a211-000000002e00}6832C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:40.531{8223a6b9-6e2f-6902-a311-000000002e00}488C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:41.532{8223a6b9-6e30-6902-a511-000000002e00}13436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:41.535{8223a6b9-6e30-6902-a611-000000002e00}156C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:44.553{8223a6b9-6e30-6902-a411-000000002e00}10232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:45.484{8223a6b9-6e34-6902-a711-000000002e00}2240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:45.491{8223a6b9-6e34-6902-a811-000000002e00}9776C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:46.491{8223a6b9-6e35-6902-aa11-000000002e00}8228C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:46.493{8223a6b9-6e35-6902-ab11-000000002e00}5136C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:49.506{8223a6b9-6e34-6902-a911-000000002e00}13520C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:50.527{8223a6b9-6e39-6902-ac11-000000002e00}3128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:50.530{8223a6b9-6e39-6902-ad11-000000002e00}6788C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:51.533{8223a6b9-6e3a-6902-af11-000000002e00}13752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:51.537{8223a6b9-6e3a-6902-b011-000000002e00}14016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:54.553{8223a6b9-6e3a-6902-ae11-000000002e00}9248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:55.497{8223a6b9-6e3e-6902-b111-000000002e00}1068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:55.500{8223a6b9-6e3e-6902-b211-000000002e00}12720C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:56.502{8223a6b9-6e3f-6902-b411-000000002e00}14120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:56.506{8223a6b9-6e3f-6902-b511-000000002e00}5936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:42:59.519{8223a6b9-6e3f-6902-b311-000000002e00}4012C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:00.527{8223a6b9-6e43-6902-b611-000000002e00}1676C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:00.530{8223a6b9-6e43-6902-b711-000000002e00}13612C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:01.535{8223a6b9-6e44-6902-b911-000000002e00}5956C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:01.537{8223a6b9-6e44-6902-ba11-000000002e00}13760C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:04.550{8223a6b9-6e44-6902-b811-000000002e00}14112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:05.474{8223a6b9-6e48-6902-bb11-000000002e00}13720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:05.491{8223a6b9-6e48-6902-bc11-000000002e00}6988C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:06.490{8223a6b9-6e49-6902-be11-000000002e00}13336C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:06.495{8223a6b9-6e49-6902-bf11-000000002e00}13696C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:08.262{8223a6b9-6e4c-6902-c211-000000002e00}976C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:08.440{8223a6b9-5000-6902-9003-000000002e00}9824C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000026796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:08.507{8223a6b9-6e4c-6902-c111-000000002e00}13596C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000026797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 19:43:09.503{8223a6b9-6e48-6902-bd11-000000002e00}7520C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:08.803{8223a6b9-6c35-6902-d10d-000000002e00}14180C:\Windows\System32\PickerHost.exesoc101win11\Administrator +534500x800000000000000026799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:09.350{8223a6b9-7248-6902-c411-000000002e00}14948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:09.368{8223a6b9-7248-6902-c511-000000002e00}14956C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000026801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:10.291{8223a6b9-6c35-6902-cf0d-000000002e00}2132C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000026802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:10.418{8223a6b9-724a-6902-cd11-000000002e00}15488C:\Windows\System32\ipconfig.exeNT AUTHORITY\SYSTEM +534500x800000000000000026803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:10.427{8223a6b9-7249-6902-c811-000000002e00}15076C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000026804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:10.433{8223a6b9-7249-6902-cb11-000000002e00}2592C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:10.533{8223a6b9-724a-6902-ce11-000000002e00}15532C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000026806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:10.929{8223a6b9-7248-6902-c711-000000002e00}15264C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000026807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:11.045{8223a6b9-724a-6902-cc11-000000002e00}15412C:\Windows\System32\taskhostw.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000026808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:11.279{8223a6b9-6c33-6902-cb0d-000000002e00}1848C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000026809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:11.473{8223a6b9-6e23-6902-9711-000000002e00}10620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:11.768{8223a6b9-6c32-6902-c40d-000000002e00}1476C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000026811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:11.880{8223a6b9-724b-6902-d511-000000002e00}16012C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:11.898{8223a6b9-724b-6902-d611-000000002e00}16036C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:12.084{8223a6b9-724b-6902-d911-000000002e00}16264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:12.087{8223a6b9-724b-6902-da11-000000002e00}16272C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:12.099{8223a6b9-6c32-6902-c70d-000000002e00}868C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:12.214{8223a6b9-6c34-6902-cd0d-000000002e00}10200C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000026817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:12.273{8223a6b9-6c32-6902-c20d-000000002e00}6004C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000026818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:12.277{8223a6b9-6c32-6902-c80d-000000002e00}12876C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:12.648{8223a6b9-724b-6902-db11-000000002e00}16308C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000026820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:12.692{8223a6b9-724b-6902-d211-000000002e00}15896C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000026821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:14.360{8223a6b9-724d-6902-dc11-000000002e00}15516C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +534500x800000000000000026822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:14.486{8223a6b9-724e-6902-dd11-000000002e00}15416C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000026823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:14.502{8223a6b9-724e-6902-de11-000000002e00}784C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000026824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:14.544{8223a6b9-724e-6902-e011-000000002e00}2100C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000026825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:14.653{8223a6b9-724e-6902-df11-000000002e00}6252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:14.656{8223a6b9-724e-6902-e111-000000002e00}8552C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:15.114{8223a6b9-6c35-6902-d00d-000000002e00}13616C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000026828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:16.985{8223a6b9-6c30-6902-a20d-000000002e00}6952C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000026829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:17.670{8223a6b9-724b-6902-d811-000000002e00}16216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:19.704{8223a6b9-7253-6902-e311-000000002e00}15432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:19.713{8223a6b9-7253-6902-e411-000000002e00}1128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:22.758{8223a6b9-7253-6902-e511-000000002e00}11876C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:24.701{8223a6b9-7258-6902-e611-000000002e00}16328C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:24.708{8223a6b9-7258-6902-e711-000000002e00}16312C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:27.204{8223a6b9-725b-6902-e911-000000002e00}13500C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000026836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:27.758{8223a6b9-7258-6902-e811-000000002e00}15896C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:29.706{8223a6b9-725d-6902-ea11-000000002e00}15988C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:29.710{8223a6b9-725d-6902-eb11-000000002e00}10140C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:32.711{8223a6b9-725d-6902-ec11-000000002e00}15688C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:34.722{8223a6b9-7262-6902-ed11-000000002e00}16316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:34.736{8223a6b9-7262-6902-ee11-000000002e00}11124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:37.741{8223a6b9-7262-6902-ef11-000000002e00}1476C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:39.690{8223a6b9-7267-6902-f011-000000002e00}16228C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:39.702{8223a6b9-7267-6902-f111-000000002e00}16244C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:42.704{8223a6b9-7267-6902-f211-000000002e00}11832C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:44.700{8223a6b9-726c-6902-f311-000000002e00}10200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:44.706{8223a6b9-726c-6902-f411-000000002e00}15460C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:47.703{8223a6b9-726c-6902-f511-000000002e00}5816C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:49.683{8223a6b9-7271-6902-f611-000000002e00}11480C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:49.692{8223a6b9-7271-6902-f711-000000002e00}10088C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:50.574{8223a6b9-724a-6902-cf11-000000002e00}15636C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000026852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:52.694{8223a6b9-7271-6902-f811-000000002e00}16308C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:54.694{8223a6b9-7276-6902-f911-000000002e00}15776C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:54.703{8223a6b9-7276-6902-fa11-000000002e00}1804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:57.705{8223a6b9-7276-6902-fb11-000000002e00}14032C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:59.712{8223a6b9-727b-6902-fc11-000000002e00}10140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:00:59.716{8223a6b9-727b-6902-fd11-000000002e00}8204C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:02.729{8223a6b9-727b-6902-fe11-000000002e00}11516C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:04.706{8223a6b9-7280-6902-ff11-000000002e00}11124C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:04.709{8223a6b9-7280-6902-0012-000000002e00}2588C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:07.708{8223a6b9-7280-6902-0112-000000002e00}3196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:09.695{8223a6b9-7285-6902-0212-000000002e00}15812C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:09.701{8223a6b9-7285-6902-0312-000000002e00}16148C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:12.700{8223a6b9-7285-6902-0412-000000002e00}16244C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:14.714{8223a6b9-728a-6902-0512-000000002e00}14228C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:14.718{8223a6b9-728a-6902-0612-000000002e00}1128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:17.710{8223a6b9-728a-6902-0712-000000002e00}14140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:19.724{8223a6b9-728f-6902-0812-000000002e00}15828C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:19.731{8223a6b9-728f-6902-0912-000000002e00}4916C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:22.311{8223a6b9-7292-6902-0b12-000000002e00}10696C:\Windows\System32\appidcertstorecheck.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000026871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:22.311{8223a6b9-7292-6902-0c12-000000002e00}15596C:\Windows\System32\conhost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000026872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:22.788{8223a6b9-728f-6902-0a12-000000002e00}15552C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:24.740{8223a6b9-7294-6902-0d12-000000002e00}13500C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:24.745{8223a6b9-7294-6902-0e12-000000002e00}15992C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:27.798{8223a6b9-7294-6902-0f12-000000002e00}1804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:29.734{8223a6b9-7299-6902-1012-000000002e00}280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:29.737{8223a6b9-7299-6902-1112-000000002e00}14060C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:32.797{8223a6b9-7299-6902-1212-000000002e00}14780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:34.688{8223a6b9-729e-6902-1312-000000002e00}11516C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:34.697{8223a6b9-729e-6902-1412-000000002e00}6860C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:37.701{8223a6b9-729e-6902-1512-000000002e00}4712C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:39.717{8223a6b9-72a3-6902-1612-000000002e00}4804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:39.722{8223a6b9-72a3-6902-1712-000000002e00}13072C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:42.713{8223a6b9-72a3-6902-1812-000000002e00}15224C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:44.687{8223a6b9-72a8-6902-1912-000000002e00}11428C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:44.701{8223a6b9-72a8-6902-1a12-000000002e00}15412C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:47.691{8223a6b9-72a8-6902-1b12-000000002e00}15740C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:49.700{8223a6b9-72ad-6902-1c12-000000002e00}6560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:49.706{8223a6b9-72ad-6902-1d12-000000002e00}14900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:52.714{8223a6b9-72ad-6902-1e12-000000002e00}2668C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:54.693{8223a6b9-72b2-6902-1f12-000000002e00}10380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:54.699{8223a6b9-72b2-6902-2012-000000002e00}15456C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:57.703{8223a6b9-72b2-6902-2112-000000002e00}8936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:59.704{8223a6b9-72b7-6902-2212-000000002e00}868C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:01:59.716{8223a6b9-72b7-6902-2312-000000002e00}14592C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:02.711{8223a6b9-72b7-6902-2412-000000002e00}16300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:03.570{8223a6b9-7249-6902-ca11-000000002e00}8300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:04.678{8223a6b9-72bc-6902-2512-000000002e00}14972C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:04.690{8223a6b9-72bc-6902-2612-000000002e00}12988C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:05.017{8223a6b9-7248-6902-c611-000000002e00}15068C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000026901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:07.695{8223a6b9-72bc-6902-2712-000000002e00}15596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:09.697{8223a6b9-72c1-6902-2812-000000002e00}15076C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:09.704{8223a6b9-72c1-6902-2912-000000002e00}13936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:12.754{8223a6b9-72c1-6902-2a12-000000002e00}3464C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:13.104{8223a6b9-724b-6902-d711-000000002e00}16120C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000026906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:13.108{8223a6b9-724b-6902-d411-000000002e00}15996C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000026907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:14.702{8223a6b9-72c6-6902-2b12-000000002e00}16264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:14.710{8223a6b9-72c6-6902-2c12-000000002e00}7180C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:17.707{8223a6b9-72c6-6902-2d12-000000002e00}13336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:19.687{8223a6b9-72cb-6902-2e12-000000002e00}6908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:19.694{8223a6b9-72cb-6902-2f12-000000002e00}3856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:22.692{8223a6b9-72cb-6902-3012-000000002e00}4428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:24.683{8223a6b9-72d0-6902-3112-000000002e00}8356C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:24.695{8223a6b9-72d0-6902-3212-000000002e00}2808C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:27.706{8223a6b9-72d0-6902-3312-000000002e00}3248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:29.692{8223a6b9-72d5-6902-3412-000000002e00}14932C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:29.698{8223a6b9-72d5-6902-3512-000000002e00}14924C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:32.695{8223a6b9-72d5-6902-3612-000000002e00}11900C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:34.702{8223a6b9-72da-6902-3712-000000002e00}14176C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:34.706{8223a6b9-72da-6902-3812-000000002e00}14732C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:37.704{8223a6b9-72da-6902-3912-000000002e00}15312C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:39.782{8223a6b9-72df-6902-3a12-000000002e00}15612C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:39.788{8223a6b9-72df-6902-3b12-000000002e00}10324C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:42.791{8223a6b9-72df-6902-3c12-000000002e00}14628C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:44.779{8223a6b9-72e4-6902-3d12-000000002e00}13596C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:44.783{8223a6b9-72e4-6902-3e12-000000002e00}15772C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:47.782{8223a6b9-72e4-6902-3f12-000000002e00}4540C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:49.699{8223a6b9-72e9-6902-4012-000000002e00}15532C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:49.703{8223a6b9-72e9-6902-4112-000000002e00}1940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:52.700{8223a6b9-72e9-6902-4212-000000002e00}13264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:54.715{8223a6b9-72ee-6902-4312-000000002e00}13860C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:54.729{8223a6b9-72ee-6902-4412-000000002e00}16024C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:57.716{8223a6b9-72ee-6902-4512-000000002e00}14872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:59.695{8223a6b9-72f3-6902-4612-000000002e00}13032C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:02:59.700{8223a6b9-72f3-6902-4712-000000002e00}3552C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:02.700{8223a6b9-72f3-6902-4812-000000002e00}14828C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:04.698{8223a6b9-72f8-6902-4912-000000002e00}6560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:04.701{8223a6b9-72f8-6902-4a12-000000002e00}16248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:07.700{8223a6b9-72f8-6902-4b12-000000002e00}13436C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:09.706{8223a6b9-72fd-6902-4c12-000000002e00}11832C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:09.711{8223a6b9-72fd-6902-4d12-000000002e00}13508C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:12.727{8223a6b9-72fd-6902-4e12-000000002e00}14220C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:14.693{8223a6b9-7302-6902-4f12-000000002e00}15584C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:14.707{8223a6b9-7302-6902-5012-000000002e00}15908C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:17.703{8223a6b9-7302-6902-5112-000000002e00}12988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:19.698{8223a6b9-7307-6902-5212-000000002e00}13912C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:19.707{8223a6b9-7307-6902-5312-000000002e00}11144C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:22.727{8223a6b9-7307-6902-5412-000000002e00}14600C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:24.733{8223a6b9-730c-6902-5512-000000002e00}14680C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:24.746{8223a6b9-730c-6902-5612-000000002e00}9436C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:27.752{8223a6b9-730c-6902-5712-000000002e00}15180C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:29.704{8223a6b9-7311-6902-5812-000000002e00}15076C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:29.707{8223a6b9-7311-6902-5912-000000002e00}3752C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:32.723{8223a6b9-7311-6902-5a12-000000002e00}14096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:34.695{8223a6b9-7316-6902-5b12-000000002e00}1816C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:34.699{8223a6b9-7316-6902-5c12-000000002e00}11904C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:37.706{8223a6b9-7316-6902-5d12-000000002e00}16208C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:39.764{8223a6b9-731b-6902-5e12-000000002e00}16184C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:39.770{8223a6b9-731b-6902-5f12-000000002e00}9588C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:42.758{8223a6b9-731b-6902-6012-000000002e00}15472C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:44.681{8223a6b9-7320-6902-6112-000000002e00}5104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:44.694{8223a6b9-7320-6902-6212-000000002e00}16164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:47.688{8223a6b9-7320-6902-6312-000000002e00}13660C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:49.698{8223a6b9-7325-6902-6412-000000002e00}6952C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:49.704{8223a6b9-7325-6902-6512-000000002e00}11636C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:52.764{8223a6b9-7325-6902-6612-000000002e00}14804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:54.689{8223a6b9-732a-6902-6712-000000002e00}10804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:54.693{8223a6b9-732a-6902-6812-000000002e00}7288C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:57.693{8223a6b9-732a-6902-6912-000000002e00}15760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:59.688{8223a6b9-732f-6902-6a12-000000002e00}16336C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:03:59.693{8223a6b9-732f-6902-6b12-000000002e00}15288C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:02.691{8223a6b9-732f-6902-6c12-000000002e00}13728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:04.723{8223a6b9-7334-6902-6d12-000000002e00}2852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:04.727{8223a6b9-7334-6902-6e12-000000002e00}14668C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:07.726{8223a6b9-7334-6902-6f12-000000002e00}2948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:09.713{8223a6b9-7339-6902-7012-000000002e00}15860C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:09.716{8223a6b9-7339-6902-7112-000000002e00}14312C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:12.732{8223a6b9-7339-6902-7212-000000002e00}9292C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:14.689{8223a6b9-733e-6902-7312-000000002e00}14044C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:14.693{8223a6b9-733e-6902-7412-000000002e00}13644C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:17.681{8223a6b9-733e-6902-7512-000000002e00}16048C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:19.723{8223a6b9-7343-6902-7612-000000002e00}14360C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:19.736{8223a6b9-7343-6902-7712-000000002e00}7820C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:22.741{8223a6b9-7343-6902-7812-000000002e00}3720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:24.697{8223a6b9-7348-6902-7912-000000002e00}3032C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:24.701{8223a6b9-7348-6902-7a12-000000002e00}14172C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:27.689{8223a6b9-7348-6902-7b12-000000002e00}1940C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:29.717{8223a6b9-734d-6902-7c12-000000002e00}16324C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:29.727{8223a6b9-734d-6902-7d12-000000002e00}14892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:32.723{8223a6b9-734d-6902-7e12-000000002e00}16140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:34.762{8223a6b9-7352-6902-7f12-000000002e00}3672C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:34.767{8223a6b9-7352-6902-8012-000000002e00}15732C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:37.766{8223a6b9-7352-6902-8112-000000002e00}10720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:39.751{8223a6b9-7357-6902-8212-000000002e00}15256C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:39.755{8223a6b9-7357-6902-8312-000000002e00}13032C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:42.752{8223a6b9-7357-6902-8412-000000002e00}16340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000026997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:44.745{8223a6b9-735c-6902-8512-000000002e00}13436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000026998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:44.757{8223a6b9-735c-6902-8612-000000002e00}1068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000026999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:47.776{8223a6b9-735c-6902-8712-000000002e00}868C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:49.685{8223a6b9-7361-6902-8812-000000002e00}2132C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:49.691{8223a6b9-7361-6902-8912-000000002e00}14812C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:52.685{8223a6b9-7361-6902-8a12-000000002e00}12752C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:54.697{8223a6b9-7366-6902-8b12-000000002e00}15908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:54.701{8223a6b9-7366-6902-8c12-000000002e00}9172C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:55.026{8223a6b9-7366-6902-8e12-000000002e00}11480C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000027006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:57.707{8223a6b9-7366-6902-8d12-000000002e00}14544C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:59.722{8223a6b9-736b-6902-8f12-000000002e00}15912C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:04:59.727{8223a6b9-736b-6902-9012-000000002e00}15660C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:02.729{8223a6b9-736b-6902-9112-000000002e00}4804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:04.703{8223a6b9-7370-6902-9212-000000002e00}7132C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:04.706{8223a6b9-7370-6902-9312-000000002e00}9436C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:07.708{8223a6b9-7370-6902-9412-000000002e00}13340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:09.687{8223a6b9-7375-6902-9512-000000002e00}15052C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:09.697{8223a6b9-7375-6902-9612-000000002e00}10508C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:12.082{8223a6b9-7377-6902-9912-000000002e00}2900C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000027016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:12.109{8223a6b9-7377-6902-9812-000000002e00}1996C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000027017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:12.710{8223a6b9-7375-6902-9712-000000002e00}9952C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:14.680{8223a6b9-737a-6902-9a12-000000002e00}11896C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:14.686{8223a6b9-737a-6902-9b12-000000002e00}5420C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:17.730{8223a6b9-737a-6902-9c12-000000002e00}14300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:19.031{8223a6b9-6e4c-6902-c311-000000002e00}14444C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:19.692{8223a6b9-737f-6902-9d12-000000002e00}15816C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:19.699{8223a6b9-737f-6902-9e12-000000002e00}14008C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:22.758{8223a6b9-737f-6902-9f12-000000002e00}14024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:24.701{8223a6b9-7384-6902-a012-000000002e00}15928C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:24.704{8223a6b9-7384-6902-a112-000000002e00}15960C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:26.834{8223a6b9-7386-6902-a412-000000002e00}14932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:26.834{8223a6b9-7386-6902-a312-000000002e00}13524C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000027029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:27.702{8223a6b9-7384-6902-a212-000000002e00}3248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:29.672{8223a6b9-7389-6902-a712-000000002e00}2068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:29.683{8223a6b9-7389-6902-a812-000000002e00}15308C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:32.681{8223a6b9-7389-6902-a912-000000002e00}14508C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:34.742{8223a6b9-738e-6902-aa12-000000002e00}728C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:34.746{8223a6b9-738e-6902-ab12-000000002e00}14720C:\Windows\System32\conhost.exesoc101win11\Administrator +11241100x800000000000000027035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:35.143{8223a6b9-378f-6902-0c00-000000002e00}872C:\WINDOWS\system32\lsass.exeC:\Users\Administrator\AppData\Local\Microsoft\Windows\SFAP\cache0.bin2024-11-11 17:13:25.488NT AUTHORITY\SYSTEM +534500x800000000000000027036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:35.445{8223a6b9-738f-6902-ae12-000000002e00}16352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:35.479{8223a6b9-738f-6902-af12-000000002e00}14072C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000027038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:35.649{8223a6b9-6e4b-6902-c011-000000002e00}13620C:\Windows\System32\LogonUI.exeNT AUTHORITY\SYSTEM +534500x800000000000000027039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:35.655{8223a6b9-738f-6902-ad12-000000002e00}6384C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:37.736{8223a6b9-738e-6902-ac12-000000002e00}2224C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:38.610{8223a6b9-7387-6902-a612-000000002e00}15036C:\Windows\System32\ctfmon.exeNT AUTHORITY\SYSTEM +534500x800000000000000027042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:39.765{8223a6b9-7393-6902-b012-000000002e00}2264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:39.770{8223a6b9-7393-6902-b112-000000002e00}10720C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:42.765{8223a6b9-7393-6902-b212-000000002e00}14424C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:44.775{8223a6b9-7398-6902-b312-000000002e00}5432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:44.779{8223a6b9-7398-6902-b412-000000002e00}3552C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:47.791{8223a6b9-7398-6902-b512-000000002e00}13988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:49.790{8223a6b9-739d-6902-b612-000000002e00}3140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:49.807{8223a6b9-739d-6902-b712-000000002e00}1068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:52.786{8223a6b9-739d-6902-b812-000000002e00}15544C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:54.781{8223a6b9-73a2-6902-b912-000000002e00}15584C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:54.787{8223a6b9-73a2-6902-ba12-000000002e00}14220C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:57.792{8223a6b9-73a2-6902-bb12-000000002e00}9820C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:59.846{8223a6b9-73a7-6902-bc12-000000002e00}15808C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:05:59.850{8223a6b9-73a7-6902-bd12-000000002e00}10352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:02.866{8223a6b9-73a7-6902-be12-000000002e00}15408C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:04.756{8223a6b9-73ac-6902-bf12-000000002e00}8164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:04.769{8223a6b9-73ac-6902-c012-000000002e00}11144C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:05.752{8223a6b9-73ad-6902-c212-000000002e00}14600C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000027060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:07.766{8223a6b9-73ac-6902-c112-000000002e00}14544C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:09.773{8223a6b9-73b1-6902-c312-000000002e00}14536C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:09.790{8223a6b9-73b1-6902-c412-000000002e00}13360C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:12.790{8223a6b9-73b1-6902-c512-000000002e00}8936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:14.768{8223a6b9-73b6-6902-c612-000000002e00}15332C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:14.782{8223a6b9-73b6-6902-c712-000000002e00}10820C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:17.779{8223a6b9-73b6-6902-c812-000000002e00}14988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:19.763{8223a6b9-73bb-6902-c912-000000002e00}10140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:19.769{8223a6b9-73bb-6902-ca12-000000002e00}15300C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:22.781{8223a6b9-73bb-6902-cb12-000000002e00}9808C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:24.767{8223a6b9-73c0-6902-cc12-000000002e00}11288C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:24.773{8223a6b9-73c0-6902-cd12-000000002e00}11896C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:27.818{8223a6b9-73c0-6902-ce12-000000002e00}14612C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:29.809{8223a6b9-73c5-6902-cf12-000000002e00}15260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:29.812{8223a6b9-73c5-6902-d012-000000002e00}10384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:32.863{8223a6b9-73c5-6902-d112-000000002e00}15128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:34.784{8223a6b9-73ca-6902-d212-000000002e00}12856C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:34.787{8223a6b9-73ca-6902-d312-000000002e00}15756C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:37.773{8223a6b9-73ca-6902-d412-000000002e00}15968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:39.771{8223a6b9-73cf-6902-d512-000000002e00}5912C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:39.777{8223a6b9-73cf-6902-d612-000000002e00}13524C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:42.786{8223a6b9-73cf-6902-d712-000000002e00}5628C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:44.796{8223a6b9-73d4-6902-d812-000000002e00}13592C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:44.811{8223a6b9-73d4-6902-d912-000000002e00}14516C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:47.822{8223a6b9-73d4-6902-da12-000000002e00}14904C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:49.778{8223a6b9-73d9-6902-db12-000000002e00}13528C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:49.793{8223a6b9-73d9-6902-dc12-000000002e00}14440C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:52.781{8223a6b9-73d9-6902-dd12-000000002e00}16200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:54.769{8223a6b9-73de-6902-de12-000000002e00}15600C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:54.786{8223a6b9-73de-6902-df12-000000002e00}14272C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:57.776{8223a6b9-73de-6902-e012-000000002e00}13812C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:59.788{8223a6b9-73e3-6902-e112-000000002e00}7820C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:06:59.799{8223a6b9-73e3-6902-e212-000000002e00}4728C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:02.804{8223a6b9-73e3-6902-e312-000000002e00}3000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:04.764{8223a6b9-73e8-6902-e412-000000002e00}4160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:04.775{8223a6b9-73e8-6902-e512-000000002e00}14324C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:07.775{8223a6b9-73e8-6902-e612-000000002e00}13768C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:09.768{8223a6b9-73ed-6902-e712-000000002e00}12112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:09.773{8223a6b9-73ed-6902-e812-000000002e00}11116C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:12.766{8223a6b9-73ed-6902-e912-000000002e00}14616C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:14.787{8223a6b9-73f2-6902-ea12-000000002e00}14556C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:14.794{8223a6b9-73f2-6902-eb12-000000002e00}1428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:17.794{8223a6b9-73f2-6902-ec12-000000002e00}1848C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:19.806{8223a6b9-73f7-6902-ed12-000000002e00}1508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:19.819{8223a6b9-73f7-6902-ee12-000000002e00}14256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:22.835{8223a6b9-73f7-6902-ef12-000000002e00}4084C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:24.763{8223a6b9-73fc-6902-f012-000000002e00}3232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:24.772{8223a6b9-73fc-6902-f112-000000002e00}13488C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:27.758{8223a6b9-73fc-6902-f212-000000002e00}8128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:29.789{8223a6b9-7401-6902-f312-000000002e00}16348C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:29.800{8223a6b9-7401-6902-f412-000000002e00}5868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:32.807{8223a6b9-7401-6902-f512-000000002e00}1804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:34.778{8223a6b9-7406-6902-f612-000000002e00}8240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:34.781{8223a6b9-7406-6902-f712-000000002e00}5608C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:37.784{8223a6b9-7406-6902-f812-000000002e00}576C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:39.768{8223a6b9-740b-6902-f912-000000002e00}1752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:39.775{8223a6b9-740b-6902-fa12-000000002e00}14224C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:42.773{8223a6b9-740b-6902-fb12-000000002e00}9940C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:44.763{8223a6b9-7410-6902-fc12-000000002e00}16144C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:44.776{8223a6b9-7410-6902-fd12-000000002e00}10620C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:47.779{8223a6b9-7410-6902-fe12-000000002e00}16208C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:49.776{8223a6b9-7415-6902-ff12-000000002e00}14168C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:49.779{8223a6b9-7415-6902-0013-000000002e00}2900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:52.831{8223a6b9-7415-6902-0113-000000002e00}15096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:54.822{8223a6b9-741a-6902-0213-000000002e00}15152C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:54.831{8223a6b9-741a-6902-0313-000000002e00}16356C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:57.872{8223a6b9-741a-6902-0413-000000002e00}2760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:59.772{8223a6b9-741f-6902-0513-000000002e00}11636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:07:59.785{8223a6b9-741f-6902-0613-000000002e00}5964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:02.776{8223a6b9-741f-6902-0713-000000002e00}15364C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:04.775{8223a6b9-7424-6902-0813-000000002e00}13504C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:04.783{8223a6b9-7424-6902-0913-000000002e00}15560C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:07.769{8223a6b9-7424-6902-0a13-000000002e00}11128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:09.755{8223a6b9-7429-6902-0b13-000000002e00}14448C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:09.765{8223a6b9-7429-6902-0c13-000000002e00}14540C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:12.783{8223a6b9-7429-6902-0d13-000000002e00}14044C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:14.768{8223a6b9-742e-6902-0e13-000000002e00}14396C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:14.775{8223a6b9-742e-6902-0f13-000000002e00}13328C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:17.777{8223a6b9-742e-6902-1013-000000002e00}14852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:19.822{8223a6b9-7433-6902-1113-000000002e00}2416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:19.827{8223a6b9-7433-6902-1213-000000002e00}14724C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:22.820{8223a6b9-7433-6902-1313-000000002e00}15984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:24.764{8223a6b9-7438-6902-1413-000000002e00}11360C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:24.772{8223a6b9-7438-6902-1513-000000002e00}492C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:27.749{8223a6b9-7438-6902-1613-000000002e00}15740C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:29.821{8223a6b9-743d-6902-1713-000000002e00}7820C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:29.826{8223a6b9-743d-6902-1813-000000002e00}14112C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:32.823{8223a6b9-743d-6902-1913-000000002e00}3000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:34.831{8223a6b9-7442-6902-1a13-000000002e00}13068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:34.835{8223a6b9-7442-6902-1b13-000000002e00}14876C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:37.847{8223a6b9-7442-6902-1c13-000000002e00}10252C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:39.885{8223a6b9-7447-6902-1d13-000000002e00}15080C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:39.887{8223a6b9-7447-6902-1e13-000000002e00}5432C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:42.900{8223a6b9-7447-6902-1f13-000000002e00}15680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:44.791{8223a6b9-744c-6902-2013-000000002e00}1428C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:44.803{8223a6b9-744c-6902-2113-000000002e00}14136C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:47.803{8223a6b9-744c-6902-2213-000000002e00}14216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:49.759{8223a6b9-7451-6902-2313-000000002e00}11680C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:49.769{8223a6b9-7451-6902-2413-000000002e00}11908C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:52.827{8223a6b9-7451-6902-2513-000000002e00}1848C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:54.753{8223a6b9-7456-6902-2613-000000002e00}13728C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:54.763{8223a6b9-7456-6902-2713-000000002e00}14752C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:57.760{8223a6b9-7456-6902-2813-000000002e00}14512C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:59.838{8223a6b9-745b-6902-2913-000000002e00}14992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:08:59.845{8223a6b9-745b-6902-2a13-000000002e00}15504C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:02.829{8223a6b9-745b-6902-2b13-000000002e00}9596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:04.766{8223a6b9-7460-6902-2c13-000000002e00}14608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:04.770{8223a6b9-7460-6902-2d13-000000002e00}14708C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:07.773{8223a6b9-7460-6902-2e13-000000002e00}15408C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:09.769{8223a6b9-7465-6902-2f13-000000002e00}8392C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:09.788{8223a6b9-7465-6902-3013-000000002e00}16016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:12.801{8223a6b9-7465-6902-3113-000000002e00}13840C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:14.787{8223a6b9-746a-6902-3213-000000002e00}9404C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:14.791{8223a6b9-746a-6902-3313-000000002e00}14528C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:17.777{8223a6b9-746a-6902-3413-000000002e00}13644C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:19.772{8223a6b9-746f-6902-3513-000000002e00}13652C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:19.785{8223a6b9-746f-6902-3613-000000002e00}4568C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:22.791{8223a6b9-746f-6902-3713-000000002e00}13448C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:24.775{8223a6b9-7474-6902-3813-000000002e00}15052C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:24.777{8223a6b9-7474-6902-3913-000000002e00}16256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:27.758{8223a6b9-7474-6902-3a13-000000002e00}16144C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:29.793{8223a6b9-7479-6902-3b13-000000002e00}16160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:29.799{8223a6b9-7479-6902-3c13-000000002e00}16044C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:32.812{8223a6b9-7479-6902-3d13-000000002e00}5300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:34.843{8223a6b9-747e-6902-3e13-000000002e00}924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:34.858{8223a6b9-747e-6902-3f13-000000002e00}9300C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:37.864{8223a6b9-747e-6902-4013-000000002e00}15368C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:39.874{8223a6b9-7483-6902-4113-000000002e00}14784C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:39.882{8223a6b9-7483-6902-4213-000000002e00}16080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:42.887{8223a6b9-7483-6902-4313-000000002e00}14008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:44.759{8223a6b9-7488-6902-4413-000000002e00}13724C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:44.765{8223a6b9-7488-6902-4513-000000002e00}2984C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:47.767{8223a6b9-7488-6902-4613-000000002e00}4072C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:49.794{8223a6b9-748d-6902-4713-000000002e00}4456C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:49.806{8223a6b9-748d-6902-4813-000000002e00}15500C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:52.797{8223a6b9-748d-6902-4913-000000002e00}12380C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:54.767{8223a6b9-7492-6902-4a13-000000002e00}16108C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:54.772{8223a6b9-7492-6902-4b13-000000002e00}15692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:57.768{8223a6b9-7492-6902-4c13-000000002e00}15164C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:59.811{8223a6b9-7497-6902-4d13-000000002e00}12944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:09:59.823{8223a6b9-7497-6902-4e13-000000002e00}14396C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:01.276{8223a6b9-7499-6902-5213-000000002e00}5324C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000027202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:02.820{8223a6b9-7497-6902-4f13-000000002e00}15440C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:04.766{8223a6b9-749c-6902-5413-000000002e00}16308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:04.769{8223a6b9-749c-6902-5513-000000002e00}14152C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:07.763{8223a6b9-749c-6902-5613-000000002e00}16248C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:07.999{8223a6b9-749f-6902-5713-000000002e00}14772C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000027207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:08.148{8223a6b9-74a0-6902-5913-000000002e00}13436C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000027208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:09.774{8223a6b9-74a1-6902-5a13-000000002e00}5432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:09.783{8223a6b9-74a1-6902-5b13-000000002e00}4596C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:11.666{8223a6b9-724b-6902-d311-000000002e00}15932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:12.789{8223a6b9-74a1-6902-5c13-000000002e00}16280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:14.789{8223a6b9-74a6-6902-5d13-000000002e00}2092C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:14.799{8223a6b9-74a6-6902-5e13-000000002e00}14292C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:17.777{8223a6b9-74a6-6902-5f13-000000002e00}5576C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:19.768{8223a6b9-74ab-6902-6013-000000002e00}1848C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:19.773{8223a6b9-74ab-6902-6113-000000002e00}15832C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:22.773{8223a6b9-74ab-6902-6213-000000002e00}15720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:24.764{8223a6b9-74b0-6902-6313-000000002e00}14256C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:24.775{8223a6b9-74b0-6902-6413-000000002e00}5612C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:27.028{8223a6b9-7386-6902-a512-000000002e00}13576C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:27.785{8223a6b9-74b0-6902-6513-000000002e00}15688C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:29.772{8223a6b9-74b5-6902-6613-000000002e00}15788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:29.784{8223a6b9-74b5-6902-6713-000000002e00}14708C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:32.776{8223a6b9-74b5-6902-6813-000000002e00}3232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:34.797{8223a6b9-74ba-6902-6a13-000000002e00}14692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:34.800{8223a6b9-74ba-6902-6b13-000000002e00}15660C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:37.791{8223a6b9-74ba-6902-6c13-000000002e00}14500C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:39.774{8223a6b9-74bf-6902-6d13-000000002e00}16276C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:39.782{8223a6b9-74bf-6902-6e13-000000002e00}14868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:41.301{8223a6b9-7499-6902-5313-000000002e00}6384C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000027231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:42.768{8223a6b9-74bf-6902-6f13-000000002e00}14440C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:44.760{8223a6b9-74c4-6902-7013-000000002e00}15308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:44.766{8223a6b9-74c4-6902-7113-000000002e00}4568C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:47.767{8223a6b9-74c4-6902-7213-000000002e00}2796C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:49.758{8223a6b9-74c9-6902-7313-000000002e00}6728C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:49.762{8223a6b9-74c9-6902-7413-000000002e00}5128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:52.757{8223a6b9-74c9-6902-7513-000000002e00}8512C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:54.803{8223a6b9-74ce-6902-7613-000000002e00}15160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:54.809{8223a6b9-74ce-6902-7713-000000002e00}14060C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:57.792{8223a6b9-74ce-6902-7813-000000002e00}16196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:59.993{8223a6b9-74d3-6902-7913-000000002e00}2900C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:10:59.998{8223a6b9-74d3-6902-7a13-000000002e00}3664C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:00.554{8223a6b9-6c2b-6902-9b0d-000000002e00}5064C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:01.497{8223a6b9-7498-6902-5113-000000002e00}16008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:02.872{8223a6b9-7498-6902-5013-000000002e00}15968C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000027246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:02.988{8223a6b9-74d3-6902-7b13-000000002e00}16228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:05.529{8223a6b9-74d8-6902-7c13-000000002e00}15964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:05.532{8223a6b9-74d8-6902-7d13-000000002e00}10384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:06.540{8223a6b9-74d9-6902-7f13-000000002e00}8552C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:06.545{8223a6b9-74d9-6902-8013-000000002e00}10108C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:09.556{8223a6b9-74d9-6902-7e13-000000002e00}3032C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:10.530{8223a6b9-74dd-6902-8113-000000002e00}15560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:10.535{8223a6b9-74dd-6902-8213-000000002e00}5484C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:13.549{8223a6b9-74de-6902-8313-000000002e00}16328C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:15.527{8223a6b9-74e2-6902-8613-000000002e00}14516C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:15.538{8223a6b9-74e2-6902-8713-000000002e00}16188C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:18.534{8223a6b9-74e3-6902-8813-000000002e00}10664C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:20.531{8223a6b9-74e7-6902-8913-000000002e00}14928C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:20.534{8223a6b9-74e7-6902-8a13-000000002e00}1568C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:23.555{8223a6b9-74e8-6902-8b13-000000002e00}1720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:25.530{8223a6b9-74ec-6902-8c13-000000002e00}5652C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:25.538{8223a6b9-74ec-6902-8d13-000000002e00}2224C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:28.548{8223a6b9-74ed-6902-8e13-000000002e00}944C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:30.533{8223a6b9-74f1-6902-8f13-000000002e00}14380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:30.537{8223a6b9-74f1-6902-9013-000000002e00}15424C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:33.542{8223a6b9-74f2-6902-9113-000000002e00}15276C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:34.487{8223a6b9-74b7-6902-6913-000000002e00}14572C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:35.527{8223a6b9-74f6-6902-9313-000000002e00}13348C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:35.530{8223a6b9-74f6-6902-9413-000000002e00}7228C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:38.536{8223a6b9-74f7-6902-9513-000000002e00}13872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:40.531{8223a6b9-74fb-6902-9713-000000002e00}14192C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:40.536{8223a6b9-74fb-6902-9813-000000002e00}14880C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:43.544{8223a6b9-74fc-6902-9913-000000002e00}15832C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:45.528{8223a6b9-7500-6902-9a13-000000002e00}16028C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:45.535{8223a6b9-7500-6902-9b13-000000002e00}3720C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:48.528{8223a6b9-7501-6902-9c13-000000002e00}14256C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:50.528{8223a6b9-7505-6902-9d13-000000002e00}14032C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:50.534{8223a6b9-7505-6902-9e13-000000002e00}9788C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:53.533{8223a6b9-7506-6902-9f13-000000002e00}13912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:55.531{8223a6b9-750a-6902-a013-000000002e00}68C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:55.535{8223a6b9-750a-6902-a113-000000002e00}396C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:11:58.547{8223a6b9-750b-6902-a213-000000002e00}16124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:00.528{8223a6b9-750f-6902-a313-000000002e00}3140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:00.530{8223a6b9-750f-6902-a413-000000002e00}10256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:03.541{8223a6b9-7510-6902-a513-000000002e00}16356C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:05.529{8223a6b9-7514-6902-a613-000000002e00}12984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:05.532{8223a6b9-7514-6902-a713-000000002e00}10836C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:08.533{8223a6b9-7515-6902-a813-000000002e00}6052C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:10.527{8223a6b9-7519-6902-a913-000000002e00}13908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:10.535{8223a6b9-7519-6902-aa13-000000002e00}16216C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:13.539{8223a6b9-751a-6902-ab13-000000002e00}14440C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:14.959{8223a6b9-74e2-6902-8513-000000002e00}14072C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:15.533{8223a6b9-751e-6902-ac13-000000002e00}15272C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:15.537{8223a6b9-751e-6902-ad13-000000002e00}14016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:16.340{8223a6b9-74e2-6902-8413-000000002e00}16108C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000027296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:18.551{8223a6b9-751f-6902-ae13-000000002e00}10508C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:20.528{8223a6b9-7523-6902-af13-000000002e00}15876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:20.536{8223a6b9-7523-6902-b013-000000002e00}15132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:23.543{8223a6b9-7524-6902-b113-000000002e00}15568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:25.527{8223a6b9-7528-6902-b213-000000002e00}13916C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:25.538{8223a6b9-7528-6902-b313-000000002e00}8236C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:28.540{8223a6b9-7529-6902-b413-000000002e00}15096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:30.533{8223a6b9-752d-6902-b513-000000002e00}12752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:30.538{8223a6b9-752d-6902-b613-000000002e00}1288C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:33.548{8223a6b9-752e-6902-b713-000000002e00}5592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:35.531{8223a6b9-7532-6902-b813-000000002e00}11852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:35.535{8223a6b9-7532-6902-b913-000000002e00}13864C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:36.993{8223a6b9-74f7-6902-9613-000000002e00}12636C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:38.233{8223a6b9-7536-6902-c013-000000002e00}15476C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000027310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:38.251{8223a6b9-7536-6902-c113-000000002e00}4200C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000027311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:38.571{8223a6b9-7533-6902-ba13-000000002e00}15704C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:40.532{8223a6b9-7537-6902-c513-000000002e00}15180C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:40.535{8223a6b9-7537-6902-c613-000000002e00}5024C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:43.546{8223a6b9-7538-6902-c713-000000002e00}14944C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:45.527{8223a6b9-753c-6902-c813-000000002e00}14512C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:45.530{8223a6b9-753c-6902-c913-000000002e00}14744C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:48.528{8223a6b9-753d-6902-ca13-000000002e00}15552C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:50.526{8223a6b9-7541-6902-cb13-000000002e00}10804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:50.530{8223a6b9-7541-6902-cc13-000000002e00}15208C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:53.536{8223a6b9-7542-6902-cd13-000000002e00}14772C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:55.527{8223a6b9-7546-6902-ce13-000000002e00}13436C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:55.530{8223a6b9-7546-6902-cf13-000000002e00}11164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:12:58.531{8223a6b9-7547-6902-d013-000000002e00}11052C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:00.527{8223a6b9-754b-6902-d113-000000002e00}6524C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:00.530{8223a6b9-754b-6902-d213-000000002e00}14864C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:03.542{8223a6b9-754c-6902-d313-000000002e00}14668C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:05.528{8223a6b9-7550-6902-d413-000000002e00}5608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:05.530{8223a6b9-7550-6902-d513-000000002e00}14352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:08.585{8223a6b9-7551-6902-d613-000000002e00}14620C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:10.528{8223a6b9-7555-6902-d713-000000002e00}15856C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:10.530{8223a6b9-7555-6902-d813-000000002e00}14104C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:13.588{8223a6b9-7556-6902-d913-000000002e00}7024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:15.526{8223a6b9-755a-6902-da13-000000002e00}8252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:15.531{8223a6b9-755a-6902-db13-000000002e00}13488C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:18.530{8223a6b9-755b-6902-dc13-000000002e00}1068C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:20.527{8223a6b9-755f-6902-dd13-000000002e00}7924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:20.530{8223a6b9-755f-6902-de13-000000002e00}15408C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:23.539{8223a6b9-7560-6902-df13-000000002e00}13932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:25.527{8223a6b9-7564-6902-e013-000000002e00}1964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:25.531{8223a6b9-7564-6902-e113-000000002e00}4696C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:28.532{8223a6b9-7565-6902-e213-000000002e00}6568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:30.526{8223a6b9-7569-6902-e313-000000002e00}2296C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:30.530{8223a6b9-7569-6902-e413-000000002e00}12984C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:32.902{8223a6b9-7536-6902-c413-000000002e00}14368C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:33.130{8223a6b9-756c-6902-e613-000000002e00}10324C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:33.544{8223a6b9-756a-6902-e513-000000002e00}14936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:34.208{8223a6b9-756d-6902-e713-000000002e00}3752C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:34.480{8223a6b9-756e-6902-e813-000000002e00}13656C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:35.241{8223a6b9-756e-6902-e913-000000002e00}8232C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:35.529{8223a6b9-756e-6902-ea13-000000002e00}2852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:35.532{8223a6b9-756e-6902-eb13-000000002e00}11816C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:35.844{8223a6b9-756f-6902-ed13-000000002e00}15536C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:38.532{8223a6b9-756f-6902-ec13-000000002e00}8264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:39.289{8223a6b9-756f-6902-ee13-000000002e00}12944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:39.906{8223a6b9-7573-6902-ef13-000000002e00}15300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:40.526{8223a6b9-7573-6902-f013-000000002e00}9412C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:40.530{8223a6b9-7573-6902-f113-000000002e00}14416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:43.533{8223a6b9-7574-6902-f313-000000002e00}15568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:45.529{8223a6b9-7578-6902-f413-000000002e00}13612C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:45.531{8223a6b9-7578-6902-f513-000000002e00}11204C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:48.535{8223a6b9-7579-6902-f613-000000002e00}1288C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:50.527{8223a6b9-757d-6902-f713-000000002e00}15116C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:50.531{8223a6b9-757d-6902-f813-000000002e00}15260C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:53.546{8223a6b9-757e-6902-f913-000000002e00}15112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:55.527{8223a6b9-7582-6902-fa13-000000002e00}12308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:55.531{8223a6b9-7582-6902-fb13-000000002e00}15184C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:57.924{8223a6b9-7573-6902-f213-000000002e00}16376C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:58.330{8223a6b9-7585-6902-fd13-000000002e00}6216C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:13:58.537{8223a6b9-7583-6902-fc13-000000002e00}13776C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:00.527{8223a6b9-7587-6902-ff13-000000002e00}14924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:00.530{8223a6b9-7587-6902-0014-000000002e00}15264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:02.636{8223a6b9-7586-6902-fe13-000000002e00}15432C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:03.053{8223a6b9-758a-6902-0214-000000002e00}15720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:03.536{8223a6b9-7588-6902-0114-000000002e00}14916C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:03.998{8223a6b9-758b-6902-0314-000000002e00}14944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:04.460{8223a6b9-758c-6902-0414-000000002e00}1720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:05.527{8223a6b9-758c-6902-0614-000000002e00}5676C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:05.530{8223a6b9-758c-6902-0714-000000002e00}15340C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:06.355{8223a6b9-758c-6902-0514-000000002e00}9576C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:06.737{8223a6b9-758e-6902-0914-000000002e00}12776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:08.202{8223a6b9-758e-6902-0a14-000000002e00}5520C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:08.339{8223a6b9-7590-6902-0b14-000000002e00}15716C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:08.551{8223a6b9-758d-6902-0814-000000002e00}9316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:09.210{8223a6b9-7590-6902-0c14-000000002e00}15676C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:09.319{8223a6b9-7591-6902-0d14-000000002e00}13616C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:09.459{8223a6b9-7591-6902-0e14-000000002e00}11932C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:09.554{8223a6b9-7591-6902-0f14-000000002e00}14572C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:09.707{8223a6b9-7591-6902-1214-000000002e00}13972C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:09.777{8223a6b9-7591-6902-1314-000000002e00}5912C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:09.905{8223a6b9-7591-6902-1414-000000002e00}9564C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:09.984{8223a6b9-7591-6902-1514-000000002e00}14372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:10.127{8223a6b9-7591-6902-1614-000000002e00}13884C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:10.216{8223a6b9-7592-6902-1814-000000002e00}6532C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:10.350{8223a6b9-7592-6902-1914-000000002e00}13788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:10.481{8223a6b9-7592-6902-1a14-000000002e00}14356C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:10.527{8223a6b9-7591-6902-1014-000000002e00}10272C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:10.530{8223a6b9-7591-6902-1114-000000002e00}7316C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:12.151{8223a6b9-7592-6902-1b14-000000002e00}5544C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:12.286{8223a6b9-7594-6902-1c14-000000002e00}14684C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:13.552{8223a6b9-7592-6902-1714-000000002e00}4352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:13.663{8223a6b9-7594-6902-1d14-000000002e00}7808C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:13.776{8223a6b9-7595-6902-1e14-000000002e00}16048C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:15.528{8223a6b9-7596-6902-2014-000000002e00}15288C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:15.530{8223a6b9-7596-6902-2114-000000002e00}13492C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:15.800{8223a6b9-7595-6902-1f14-000000002e00}16204C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:15.847{8223a6b9-7597-6902-2314-000000002e00}11880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:15.942{8223a6b9-7597-6902-2414-000000002e00}16000C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:17.491{8223a6b9-7597-6902-2514-000000002e00}9044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:17.615{8223a6b9-7599-6902-2614-000000002e00}12872C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:18.556{8223a6b9-7597-6902-2214-000000002e00}16040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:19.707{8223a6b9-7599-6902-2714-000000002e00}4540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:19.820{8223a6b9-759b-6902-2a14-000000002e00}16032C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:20.527{8223a6b9-759b-6902-2814-000000002e00}2844C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:20.530{8223a6b9-759b-6902-2914-000000002e00}15888C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:21.284{8223a6b9-759b-6902-2b14-000000002e00}5836C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:21.400{8223a6b9-759d-6902-2d14-000000002e00}14072C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:22.402{8223a6b9-759d-6902-2e14-000000002e00}15992C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:22.527{8223a6b9-759e-6902-2f14-000000002e00}14576C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:23.528{8223a6b9-759c-6902-2c14-000000002e00}3104C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:25.527{8223a6b9-75a0-6902-3114-000000002e00}15088C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:25.530{8223a6b9-75a0-6902-3214-000000002e00}15048C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:25.542{8223a6b9-759e-6902-3014-000000002e00}2100C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:25.701{8223a6b9-75a1-6902-3414-000000002e00}15568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.411{8223a6b9-75a1-6902-3514-000000002e00}11040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.456{8223a6b9-75a4-6902-3614-000000002e00}16228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.585{8223a6b9-75a1-6902-3314-000000002e00}14304C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.599{8223a6b9-75a4-6902-3714-000000002e00}1752C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.678{8223a6b9-75a4-6902-3814-000000002e00}14736C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.761{8223a6b9-75a4-6902-3914-000000002e00}6228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.821{8223a6b9-75a4-6902-3a14-000000002e00}15184C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.900{8223a6b9-75a4-6902-3b14-000000002e00}13844C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:28.947{8223a6b9-75a4-6902-3c14-000000002e00}15908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:29.040{8223a6b9-75a4-6902-3d14-000000002e00}4024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:29.249{8223a6b9-75a5-6902-3e14-000000002e00}9776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:29.317{8223a6b9-75a5-6902-3f14-000000002e00}13092C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:29.512{8223a6b9-75a5-6902-4014-000000002e00}14424C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:29.595{8223a6b9-75a5-6902-4114-000000002e00}14024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:29.688{8223a6b9-75a5-6902-4414-000000002e00}14856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:30.527{8223a6b9-75a5-6902-4214-000000002e00}6688C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:30.531{8223a6b9-75a5-6902-4314-000000002e00}14348C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:31.672{8223a6b9-75a5-6902-4514-000000002e00}13764C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:31.720{8223a6b9-75a7-6902-4714-000000002e00}15208C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:32.182{8223a6b9-75a7-6902-4814-000000002e00}15808C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:32.260{8223a6b9-75a8-6902-4914-000000002e00}16192C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:33.221{8223a6b9-75a8-6902-4a14-000000002e00}12776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:33.362{8223a6b9-75a9-6902-4b14-000000002e00}14772C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:33.543{8223a6b9-75a6-6902-4614-000000002e00}14988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:34.674{8223a6b9-75a9-6902-4c14-000000002e00}11864C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:34.767{8223a6b9-75aa-6902-4f14-000000002e00}15268C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:35.388{8223a6b9-75aa-6902-5014-000000002e00}16200C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:35.484{8223a6b9-75ab-6902-5214-000000002e00}13540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:35.527{8223a6b9-75aa-6902-4d14-000000002e00}15056C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:35.530{8223a6b9-75aa-6902-4e14-000000002e00}13428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:35.579{8223a6b9-75ab-6902-5314-000000002e00}2068C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:35.740{8223a6b9-75ab-6902-5414-000000002e00}15456C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:35.929{8223a6b9-75ab-6902-5514-000000002e00}15376C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:38.539{8223a6b9-75ab-6902-5114-000000002e00}12112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:40.526{8223a6b9-75af-6902-5714-000000002e00}14104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:40.530{8223a6b9-75af-6902-5814-000000002e00}15864C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:42.638{8223a6b9-75ab-6902-5614-000000002e00}12276C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:42.733{8223a6b9-75b2-6902-5a14-000000002e00}13188C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:43.529{8223a6b9-75b0-6902-5914-000000002e00}16344C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:43.529{8223a6b9-75b2-6902-5b14-000000002e00}5068C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:43.645{8223a6b9-75b3-6902-5c14-000000002e00}9888C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:45.167{8223a6b9-75b3-6902-5d14-000000002e00}14816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:45.326{8223a6b9-75b5-6902-6114-000000002e00}6572C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:45.527{8223a6b9-75b4-6902-5e14-000000002e00}15448C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:45.530{8223a6b9-75b4-6902-5f14-000000002e00}11900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:47.517{8223a6b9-75b5-6902-6214-000000002e00}784C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:47.628{8223a6b9-75b7-6902-6314-000000002e00}16252C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:48.442{8223a6b9-75b7-6902-6414-000000002e00}4336C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:48.539{8223a6b9-75b8-6902-6514-000000002e00}15528C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:48.542{8223a6b9-75b5-6902-6014-000000002e00}3000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:48.839{8223a6b9-75b8-6902-6614-000000002e00}3752C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:48.931{8223a6b9-75b8-6902-6714-000000002e00}12856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:49.082{8223a6b9-75b8-6902-6814-000000002e00}5956C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:49.156{8223a6b9-75b9-6902-6914-000000002e00}8644C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:49.252{8223a6b9-75b9-6902-6a14-000000002e00}15368C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:49.420{8223a6b9-75b9-6902-6b14-000000002e00}16172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.371{8223a6b9-75b9-6902-6c14-000000002e00}15328C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.433{8223a6b9-75ba-6902-7014-000000002e00}15600C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.527{8223a6b9-75b9-6902-6d14-000000002e00}11044C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.531{8223a6b9-75b9-6902-6e14-000000002e00}15844C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.533{8223a6b9-75ba-6902-7114-000000002e00}3128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.632{8223a6b9-75ba-6902-7214-000000002e00}14172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.688{8223a6b9-75ba-6902-7314-000000002e00}15160C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.783{8223a6b9-75ba-6902-7414-000000002e00}14868C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:50.878{8223a6b9-75ba-6902-7514-000000002e00}15612C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:51.892{8223a6b9-75ba-6902-7614-000000002e00}14284C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:51.972{8223a6b9-75bb-6902-7714-000000002e00}15152C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:52.148{8223a6b9-75bb-6902-7814-000000002e00}15488C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:52.212{8223a6b9-75bc-6902-7914-000000002e00}14292C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:52.300{8223a6b9-75bc-6902-7a14-000000002e00}5420C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:52.416{8223a6b9-75bc-6902-7b14-000000002e00}3032C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:53.539{8223a6b9-75ba-6902-6f14-000000002e00}15040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:55.527{8223a6b9-75be-6902-7d14-000000002e00}13536C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:55.531{8223a6b9-75be-6902-7e14-000000002e00}13504C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:55.873{8223a6b9-75bc-6902-7c14-000000002e00}14228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:55.959{8223a6b9-75bf-6902-8014-000000002e00}5600C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.026{8223a6b9-75bf-6902-8114-000000002e00}14776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.091{8223a6b9-75c0-6902-8214-000000002e00}14924C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.204{8223a6b9-75c0-6902-8314-000000002e00}3420C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.306{8223a6b9-75c0-6902-8414-000000002e00}14024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.439{8223a6b9-75c0-6902-8514-000000002e00}15180C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.614{8223a6b9-75c0-6902-8614-000000002e00}9820C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.694{8223a6b9-75c0-6902-8714-000000002e00}14360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.756{8223a6b9-75c0-6902-8814-000000002e00}944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.851{8223a6b9-75c0-6902-8914-000000002e00}16368C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:56.945{8223a6b9-75c0-6902-8a14-000000002e00}13412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.088{8223a6b9-75c0-6902-8b14-000000002e00}14748C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.236{8223a6b9-75c1-6902-8c14-000000002e00}11692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.372{8223a6b9-75c1-6902-8d14-000000002e00}16100C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.470{8223a6b9-75c1-6902-8e14-000000002e00}13568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.557{8223a6b9-75c1-6902-8f14-000000002e00}11864C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.628{8223a6b9-75c1-6902-9014-000000002e00}15268C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.723{8223a6b9-75c1-6902-9114-000000002e00}6524C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.787{8223a6b9-75c1-6902-9214-000000002e00}16128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:57.944{8223a6b9-75c1-6902-9314-000000002e00}12920C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:58.388{8223a6b9-75c1-6902-9414-000000002e00}13572C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:58.483{8223a6b9-75c2-6902-9514-000000002e00}13972C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:58.533{8223a6b9-75bf-6902-7f14-000000002e00}5760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:58.674{8223a6b9-75c2-6902-9614-000000002e00}15384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:58.769{8223a6b9-75c2-6902-9714-000000002e00}10508C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:58.848{8223a6b9-75c2-6902-9814-000000002e00}13416C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:14:58.943{8223a6b9-75c2-6902-9914-000000002e00}13884C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:00.528{8223a6b9-75c3-6902-9b14-000000002e00}14104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:00.531{8223a6b9-75c3-6902-9c14-000000002e00}15864C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:03.551{8223a6b9-75c4-6902-9d14-000000002e00}14968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:05.527{8223a6b9-75c8-6902-9e14-000000002e00}12276C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:05.532{8223a6b9-75c8-6902-9f14-000000002e00}15920C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:08.540{8223a6b9-75c9-6902-a014-000000002e00}10292C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:09.051{8223a6b9-74a0-6902-5813-000000002e00}10760C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000027533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:10.528{8223a6b9-75cd-6902-a114-000000002e00}13264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:10.532{8223a6b9-75cd-6902-a214-000000002e00}11524C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:13.537{8223a6b9-75ce-6902-a314-000000002e00}14900C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:15.527{8223a6b9-75d2-6902-a514-000000002e00}4696C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:15.531{8223a6b9-75d2-6902-a614-000000002e00}492C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:18.539{8223a6b9-75d3-6902-a714-000000002e00}3752C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:20.526{8223a6b9-75d7-6902-a814-000000002e00}2304C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:20.530{8223a6b9-75d7-6902-a914-000000002e00}5956C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:23.530{8223a6b9-75d8-6902-aa14-000000002e00}14440C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:25.529{8223a6b9-75dc-6902-ab14-000000002e00}14432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:25.533{8223a6b9-75dc-6902-ac14-000000002e00}5836C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:28.539{8223a6b9-75dd-6902-ad14-000000002e00}15328C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:30.527{8223a6b9-75e1-6902-ae14-000000002e00}11044C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:30.530{8223a6b9-75e1-6902-af14-000000002e00}15844C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:33.537{8223a6b9-75e2-6902-b014-000000002e00}1568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:35.526{8223a6b9-75e6-6902-b114-000000002e00}13944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:35.529{8223a6b9-75e6-6902-b214-000000002e00}14028C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:38.540{8223a6b9-75e7-6902-b314-000000002e00}5300C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:40.527{8223a6b9-75eb-6902-b414-000000002e00}12972C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:40.530{8223a6b9-75eb-6902-b514-000000002e00}2540C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:43.541{8223a6b9-75ec-6902-b614-000000002e00}8164C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:45.527{8223a6b9-75f0-6902-b714-000000002e00}12308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:45.530{8223a6b9-75f0-6902-b814-000000002e00}5420C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.348{8223a6b9-75c2-6902-9a14-000000002e00}13604C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.435{8223a6b9-75f2-6902-ba14-000000002e00}14992C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.569{8223a6b9-75f2-6902-bb14-000000002e00}13504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.617{8223a6b9-75f2-6902-bc14-000000002e00}14228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.696{8223a6b9-75f2-6902-bd14-000000002e00}5600C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.762{8223a6b9-75f2-6902-be14-000000002e00}14776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.828{8223a6b9-75f2-6902-bf14-000000002e00}10380C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.871{8223a6b9-75f2-6902-c014-000000002e00}14676C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.939{8223a6b9-75f2-6902-c114-000000002e00}13936C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:46.998{8223a6b9-75f2-6902-c214-000000002e00}9852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:47.093{8223a6b9-75f2-6902-c314-000000002e00}16236C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:47.509{8223a6b9-75f3-6902-c414-000000002e00}15208C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:47.606{8223a6b9-75f3-6902-c514-000000002e00}15036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.194{8223a6b9-75f3-6902-c614-000000002e00}9932C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.241{8223a6b9-75f4-6902-c714-000000002e00}15916C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.321{8223a6b9-75f4-6902-c814-000000002e00}1720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.384{8223a6b9-75f4-6902-c914-000000002e00}9316C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.444{8223a6b9-75f4-6902-ca14-000000002e00}1764C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.510{8223a6b9-75f4-6902-cb14-000000002e00}15680C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.558{8223a6b9-75f1-6902-b914-000000002e00}15764C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.589{8223a6b9-75f4-6902-cc14-000000002e00}5816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.653{8223a6b9-75f4-6902-cd14-000000002e00}16296C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.700{8223a6b9-75f4-6902-ce14-000000002e00}11348C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.774{8223a6b9-75f4-6902-cf14-000000002e00}1140C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.869{8223a6b9-75f4-6902-d014-000000002e00}13984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.923{8223a6b9-75f4-6902-d114-000000002e00}7288C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:48.973{8223a6b9-75f4-6902-d214-000000002e00}6728C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:49.046{8223a6b9-75f4-6902-d314-000000002e00}10500C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:49.098{8223a6b9-75f5-6902-d414-000000002e00}16152C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:49.358{8223a6b9-75f5-6902-d514-000000002e00}15996C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:49.415{8223a6b9-75f5-6902-d614-000000002e00}2076C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:49.620{8223a6b9-75f5-6902-d714-000000002e00}15236C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:49.716{8223a6b9-75f5-6902-da14-000000002e00}13788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:49.929{8223a6b9-75f5-6902-db14-000000002e00}14740C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:50.010{8223a6b9-75f5-6902-dc14-000000002e00}16320C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:50.226{8223a6b9-75f6-6902-dd14-000000002e00}14544C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:50.353{8223a6b9-75f6-6902-df14-000000002e00}15044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:50.527{8223a6b9-75f5-6902-d814-000000002e00}15928C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:50.530{8223a6b9-75f5-6902-d914-000000002e00}12952C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:50.958{8223a6b9-75f6-6902-e014-000000002e00}14196C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:51.053{8223a6b9-75f6-6902-e114-000000002e00}13404C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:51.199{8223a6b9-75f7-6902-e214-000000002e00}16356C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:51.276{8223a6b9-75f7-6902-e314-000000002e00}15548C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:51.505{8223a6b9-75f7-6902-e414-000000002e00}4860C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:51.577{8223a6b9-75f7-6902-e514-000000002e00}3604C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:51.735{8223a6b9-75f7-6902-e614-000000002e00}14888C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:51.852{8223a6b9-75f7-6902-e714-000000002e00}10536C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:53.414{8223a6b9-75f7-6902-e814-000000002e00}11428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:53.483{8223a6b9-75f9-6902-e914-000000002e00}15332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:53.529{8223a6b9-75f6-6902-de14-000000002e00}7708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:53.561{8223a6b9-75f9-6902-ea14-000000002e00}15300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:53.624{8223a6b9-75f9-6902-eb14-000000002e00}16212C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:54.133{8223a6b9-75f9-6902-ec14-000000002e00}15660C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:54.215{8223a6b9-75fa-6902-ed14-000000002e00}5324C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:54.709{8223a6b9-75fa-6902-ee14-000000002e00}15328C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:54.784{8223a6b9-75fa-6902-f114-000000002e00}3664C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:54.878{8223a6b9-75fa-6902-f214-000000002e00}2092C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:54.942{8223a6b9-75fa-6902-f314-000000002e00}14844C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:55.212{8223a6b9-75fa-6902-f414-000000002e00}2796C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:55.296{8223a6b9-75fb-6902-f614-000000002e00}11372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:55.516{8223a6b9-75fb-6902-f714-000000002e00}14456C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:55.527{8223a6b9-75fa-6902-ef14-000000002e00}13376C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:55.530{8223a6b9-75fa-6902-f014-000000002e00}14416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:55.564{8223a6b9-75fb-6902-f814-000000002e00}9024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:55.787{8223a6b9-75fb-6902-f914-000000002e00}14352C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:55.850{8223a6b9-75fb-6902-fa14-000000002e00}11040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:56.119{8223a6b9-75fb-6902-fb14-000000002e00}9788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:56.260{8223a6b9-75fc-6902-fc14-000000002e00}15656C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:57.087{8223a6b9-75fc-6902-fd14-000000002e00}11216C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:57.171{8223a6b9-75fd-6902-fe14-000000002e00}10088C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:57.456{8223a6b9-75fd-6902-ff14-000000002e00}10820C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:57.525{8223a6b9-75fd-6902-0015-000000002e00}15908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:57.729{8223a6b9-75fd-6902-0115-000000002e00}3372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:57.835{8223a6b9-75fd-6902-0215-000000002e00}14228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:58.542{8223a6b9-75fb-6902-f514-000000002e00}15160C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:58.647{8223a6b9-75fd-6902-0315-000000002e00}5600C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:15:58.726{8223a6b9-75fe-6902-0415-000000002e00}14776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:00.529{8223a6b9-75ff-6902-0615-000000002e00}9884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:00.530{8223a6b9-75ff-6902-0715-000000002e00}15432C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:01.553{8223a6b9-75fe-6902-0515-000000002e00}10380C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:01.615{8223a6b9-7601-6902-0915-000000002e00}13764C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:02.009{8223a6b9-7601-6902-0a15-000000002e00}4384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:02.081{8223a6b9-7602-6902-0b15-000000002e00}15832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:02.994{8223a6b9-7602-6902-0c15-000000002e00}14732C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:03.083{8223a6b9-7602-6902-0d15-000000002e00}10804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:03.388{8223a6b9-7603-6902-0e15-000000002e00}12040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:03.494{8223a6b9-7603-6902-0f15-000000002e00}3228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:03.547{8223a6b9-7600-6902-0815-000000002e00}14360C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:05.528{8223a6b9-7604-6902-1115-000000002e00}15992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:05.530{8223a6b9-7604-6902-1215-000000002e00}12944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:06.076{8223a6b9-7603-6902-1015-000000002e00}2892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:06.202{8223a6b9-7606-6902-1415-000000002e00}16296C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:07.505{8223a6b9-7606-6902-1515-000000002e00}11348C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:07.596{8223a6b9-7607-6902-1615-000000002e00}15032C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:08.156{8223a6b9-7607-6902-1715-000000002e00}13972C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:08.220{8223a6b9-7608-6902-1815-000000002e00}15384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:08.314{8223a6b9-7608-6902-1915-000000002e00}16244C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:08.410{8223a6b9-7608-6902-1a15-000000002e00}924C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:08.545{8223a6b9-7605-6902-1315-000000002e00}7180C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:09.390{8223a6b9-7608-6902-1b15-000000002e00}3056C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:09.472{8223a6b9-7609-6902-1c15-000000002e00}16008C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:09.834{8223a6b9-7609-6902-1d15-000000002e00}13156C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:09.881{8223a6b9-7609-6902-2015-000000002e00}16320C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:10.088{8223a6b9-7609-6902-2115-000000002e00}4916C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:10.183{8223a6b9-760a-6902-2215-000000002e00}15044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:10.425{8223a6b9-760a-6902-2415-000000002e00}11416C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:10.486{8223a6b9-760a-6902-2515-000000002e00}4352C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:10.529{8223a6b9-7609-6902-1e15-000000002e00}15868C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:10.533{8223a6b9-7609-6902-1f15-000000002e00}1732C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:11.335{8223a6b9-760a-6902-2615-000000002e00}9808C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:11.445{8223a6b9-760b-6902-2715-000000002e00}1964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:12.465{8223a6b9-760b-6902-2815-000000002e00}15072C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:12.534{8223a6b9-760c-6902-2915-000000002e00}11116C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:12.627{8223a6b9-760c-6902-2a15-000000002e00}14564C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:12.711{8223a6b9-760c-6902-2b15-000000002e00}5068C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:12.912{8223a6b9-760c-6902-2c15-000000002e00}5956C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:12.965{8223a6b9-760c-6902-2d15-000000002e00}1676C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.033{8223a6b9-760c-6902-2e15-000000002e00}15672C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.087{8223a6b9-760d-6902-2f15-000000002e00}15168C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.278{8223a6b9-760d-6902-3015-000000002e00}15660C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.331{8223a6b9-760d-6902-3115-000000002e00}15560C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.456{8223a6b9-760d-6902-3215-000000002e00}14852C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.504{8223a6b9-760d-6902-3315-000000002e00}9412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.540{8223a6b9-760a-6902-2315-000000002e00}10324C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.578{8223a6b9-760d-6902-3415-000000002e00}14860C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.640{8223a6b9-760d-6902-3515-000000002e00}1492C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.821{8223a6b9-760d-6902-3615-000000002e00}14624C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:13.885{8223a6b9-760d-6902-3715-000000002e00}14608C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.027{8223a6b9-760d-6902-3815-000000002e00}1068C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.140{8223a6b9-760e-6902-3915-000000002e00}13500C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.202{8223a6b9-760e-6902-3a15-000000002e00}14192C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.300{8223a6b9-760e-6902-3b15-000000002e00}15968C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.361{8223a6b9-760e-6902-3c15-000000002e00}12972C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.459{8223a6b9-760e-6902-3d15-000000002e00}15964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.550{8223a6b9-760e-6902-3e15-000000002e00}15816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.652{8223a6b9-760e-6902-4115-000000002e00}13772C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.732{8223a6b9-760e-6902-4215-000000002e00}7388C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.818{8223a6b9-760e-6902-4315-000000002e00}13632C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.894{8223a6b9-760e-6902-4415-000000002e00}15480C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:14.964{8223a6b9-760e-6902-4515-000000002e00}14372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.010{8223a6b9-760e-6902-4615-000000002e00}14908C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.074{8223a6b9-760f-6902-4715-000000002e00}4700C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.121{8223a6b9-760f-6902-4815-000000002e00}1848C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.201{8223a6b9-760f-6902-4a15-000000002e00}14964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.285{8223a6b9-760f-6902-4b15-000000002e00}15208C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.376{8223a6b9-760f-6902-4c15-000000002e00}16368C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.442{8223a6b9-760f-6902-4d15-000000002e00}10580C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.527{8223a6b9-760e-6902-3f15-000000002e00}12308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.530{8223a6b9-760e-6902-4015-000000002e00}11216C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.550{8223a6b9-760f-6902-4e15-000000002e00}15916C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:15.635{8223a6b9-760f-6902-4f15-000000002e00}14848C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:16.284{8223a6b9-760f-6902-5015-000000002e00}14824C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:16.362{8223a6b9-7610-6902-5115-000000002e00}1764C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:16.473{8223a6b9-7610-6902-5215-000000002e00}15552C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:16.522{8223a6b9-7610-6902-5315-000000002e00}16036C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:16.605{8223a6b9-7610-6902-5415-000000002e00}14668C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:16.680{8223a6b9-7610-6902-5515-000000002e00}16332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:16.918{8223a6b9-7610-6902-5615-000000002e00}2612C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:16.997{8223a6b9-7610-6902-5715-000000002e00}12920C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:17.333{8223a6b9-7611-6902-5815-000000002e00}15080C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:17.381{8223a6b9-7611-6902-5915-000000002e00}15024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:17.443{8223a6b9-7611-6902-5a15-000000002e00}2160C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:17.506{8223a6b9-7611-6902-5b15-000000002e00}15952C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:18.542{8223a6b9-760f-6902-4915-000000002e00}14744C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:19.309{8223a6b9-7611-6902-5c15-000000002e00}14980C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:19.364{8223a6b9-7613-6902-5d15-000000002e00}9292C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.173{8223a6b9-7613-6902-5e15-000000002e00}1552C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.236{8223a6b9-7614-6902-6215-000000002e00}15352C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.365{8223a6b9-7614-6902-6315-000000002e00}16044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.415{8223a6b9-7614-6902-6415-000000002e00}14224C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.477{8223a6b9-7614-6902-6515-000000002e00}2900C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.526{8223a6b9-7613-6902-5f15-000000002e00}14580C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.530{8223a6b9-7613-6902-6015-000000002e00}14364C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.536{8223a6b9-7614-6902-6615-000000002e00}15624C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.638{8223a6b9-7614-6902-6715-000000002e00}10112C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.729{8223a6b9-7614-6902-6815-000000002e00}13348C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.838{8223a6b9-7614-6902-6915-000000002e00}2028C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.902{8223a6b9-7614-6902-6a15-000000002e00}14900C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:20.979{8223a6b9-7614-6902-6b15-000000002e00}15712C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.124{8223a6b9-7614-6902-6c15-000000002e00}15172C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.220{8223a6b9-7615-6902-6d15-000000002e00}14660C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.528{8223a6b9-7615-6902-6e15-000000002e00}12924C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.585{8223a6b9-7615-6902-6f15-000000002e00}4084C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.647{8223a6b9-7615-6902-7015-000000002e00}15176C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.709{8223a6b9-7615-6902-7115-000000002e00}4540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.773{8223a6b9-7615-6902-7215-000000002e00}14072C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.856{8223a6b9-7615-6902-7315-000000002e00}14432C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.922{8223a6b9-7615-6902-7415-000000002e00}14928C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:21.983{8223a6b9-7615-6902-7515-000000002e00}13644C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:22.062{8223a6b9-7615-6902-7615-000000002e00}13120C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:22.142{8223a6b9-7616-6902-7715-000000002e00}14896C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:23.535{8223a6b9-7614-6902-6115-000000002e00}15796C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:25.527{8223a6b9-7618-6902-7915-000000002e00}4160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:25.531{8223a6b9-7618-6902-7a15-000000002e00}16232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:28.539{8223a6b9-7619-6902-7b15-000000002e00}10468C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:30.527{8223a6b9-761d-6902-7c15-000000002e00}6992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:30.532{8223a6b9-761d-6902-7d15-000000002e00}13376C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:33.555{8223a6b9-761e-6902-7e15-000000002e00}13500C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.138{8223a6b9-7616-6902-7815-000000002e00}14524C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.204{8223a6b9-7622-6902-7f15-000000002e00}14408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.286{8223a6b9-7622-6902-8015-000000002e00}15644C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.345{8223a6b9-7622-6902-8115-000000002e00}7704C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.413{8223a6b9-7622-6902-8215-000000002e00}5476C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.533{8223a6b9-7622-6902-8315-000000002e00}13776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.609{8223a6b9-7622-6902-8615-000000002e00}16376C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.663{8223a6b9-7622-6902-8715-000000002e00}15504C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.751{8223a6b9-7622-6902-8815-000000002e00}8300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.806{8223a6b9-7622-6902-8915-000000002e00}5600C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.870{8223a6b9-7622-6902-8a15-000000002e00}16240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.933{8223a6b9-7622-6902-8b15-000000002e00}9236C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:34.996{8223a6b9-7622-6902-8c15-000000002e00}15800C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.076{8223a6b9-7622-6902-8d15-000000002e00}14796C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.244{8223a6b9-7623-6902-8e15-000000002e00}3400C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.309{8223a6b9-7623-6902-9015-000000002e00}10088C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.439{8223a6b9-7623-6902-9115-000000002e00}15540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.471{8223a6b9-7623-6902-9215-000000002e00}15960C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.512{8223a6b9-7623-6902-9315-000000002e00}10804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.526{8223a6b9-7622-6902-8415-000000002e00}13772C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.529{8223a6b9-7622-6902-8515-000000002e00}11016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.554{8223a6b9-7623-6902-9415-000000002e00}13176C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.590{8223a6b9-7623-6902-9515-000000002e00}1720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.632{8223a6b9-7623-6902-9615-000000002e00}5676C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.672{8223a6b9-7623-6902-9715-000000002e00}14360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.710{8223a6b9-7623-6902-9815-000000002e00}13508C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.741{8223a6b9-7623-6902-9915-000000002e00}14840C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.773{8223a6b9-7623-6902-9a15-000000002e00}11932C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.820{8223a6b9-7623-6902-9b15-000000002e00}14288C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.852{8223a6b9-7623-6902-9c15-000000002e00}15648C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.899{8223a6b9-7623-6902-9d15-000000002e00}2068C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.933{8223a6b9-7623-6902-9e15-000000002e00}2416C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:35.966{8223a6b9-7623-6902-9f15-000000002e00}16016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.010{8223a6b9-7623-6902-a015-000000002e00}13972C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.043{8223a6b9-7624-6902-a115-000000002e00}12112C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.074{8223a6b9-7624-6902-a215-000000002e00}12408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.125{8223a6b9-7624-6902-a315-000000002e00}15692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.165{8223a6b9-7624-6902-a415-000000002e00}9884C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.200{8223a6b9-7624-6902-a515-000000002e00}13884C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.232{8223a6b9-7624-6902-a615-000000002e00}15388C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.264{8223a6b9-7624-6902-a715-000000002e00}5912C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.314{8223a6b9-7624-6902-a815-000000002e00}16028C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.349{8223a6b9-7624-6902-a915-000000002e00}11936C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.391{8223a6b9-7624-6902-aa15-000000002e00}14780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.427{8223a6b9-7624-6902-ab15-000000002e00}11456C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.457{8223a6b9-7624-6902-ac15-000000002e00}3720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.503{8223a6b9-7624-6902-ad15-000000002e00}14816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.542{8223a6b9-7624-6902-ae15-000000002e00}8304C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.575{8223a6b9-7624-6902-af15-000000002e00}15192C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.618{8223a6b9-7624-6902-b015-000000002e00}15624C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.649{8223a6b9-7624-6902-b115-000000002e00}11416C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.685{8223a6b9-7624-6902-b215-000000002e00}68C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.726{8223a6b9-7624-6902-b315-000000002e00}9808C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.760{8223a6b9-7624-6902-b415-000000002e00}11764C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.805{8223a6b9-7624-6902-b515-000000002e00}14900C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.836{8223a6b9-7624-6902-b615-000000002e00}9588C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.884{8223a6b9-7624-6902-b715-000000002e00}16040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.931{8223a6b9-7624-6902-b815-000000002e00}10296C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:36.963{8223a6b9-7624-6902-b915-000000002e00}16032C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.011{8223a6b9-7624-6902-ba15-000000002e00}13248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.042{8223a6b9-7625-6902-bb15-000000002e00}7092C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.078{8223a6b9-7625-6902-bc15-000000002e00}3480C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.121{8223a6b9-7625-6902-bd15-000000002e00}7588C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.152{8223a6b9-7625-6902-be15-000000002e00}13420C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.199{8223a6b9-7625-6902-bf15-000000002e00}5404C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.231{8223a6b9-7625-6902-c015-000000002e00}9056C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.263{8223a6b9-7625-6902-c115-000000002e00}7132C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.310{8223a6b9-7625-6902-c215-000000002e00}13812C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.343{8223a6b9-7625-6902-c315-000000002e00}16308C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.374{8223a6b9-7625-6902-c415-000000002e00}16264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.427{8223a6b9-7625-6902-c515-000000002e00}16372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.464{8223a6b9-7625-6902-c615-000000002e00}6736C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.502{8223a6b9-7625-6902-c715-000000002e00}11372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.538{8223a6b9-7625-6902-c815-000000002e00}16232C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.565{8223a6b9-7625-6902-c915-000000002e00}1816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.613{8223a6b9-7625-6902-ca15-000000002e00}13720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.645{8223a6b9-7625-6902-cb15-000000002e00}14124C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.677{8223a6b9-7625-6902-cc15-000000002e00}13864C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.729{8223a6b9-7625-6902-cd15-000000002e00}2092C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.772{8223a6b9-7625-6902-ce15-000000002e00}15248C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.809{8223a6b9-7625-6902-cf15-000000002e00}11040C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.836{8223a6b9-7625-6902-d015-000000002e00}15104C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.884{8223a6b9-7625-6902-d115-000000002e00}15064C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.926{8223a6b9-7625-6902-d215-000000002e00}14628C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.962{8223a6b9-7625-6902-d315-000000002e00}13536C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:37.995{8223a6b9-7625-6902-d415-000000002e00}12804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.035{8223a6b9-7626-6902-d515-000000002e00}14892C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.074{8223a6b9-7626-6902-d615-000000002e00}14028C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.106{8223a6b9-7626-6902-d715-000000002e00}14344C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.137{8223a6b9-7626-6902-d815-000000002e00}12876C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.169{8223a6b9-7626-6902-d915-000000002e00}14944C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.217{8223a6b9-7626-6902-da15-000000002e00}16240C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.249{8223a6b9-7626-6902-db15-000000002e00}13072C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.280{8223a6b9-7626-6902-dc15-000000002e00}10212C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.328{8223a6b9-7626-6902-dd15-000000002e00}15292C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.361{8223a6b9-7626-6902-de15-000000002e00}15696C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.407{8223a6b9-7626-6902-df15-000000002e00}12752C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.449{8223a6b9-7626-6902-e015-000000002e00}11216C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.485{8223a6b9-7626-6902-e115-000000002e00}15424C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.523{8223a6b9-7626-6902-e215-000000002e00}13860C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.539{8223a6b9-7623-6902-8f15-000000002e00}10592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.565{8223a6b9-7626-6902-e315-000000002e00}14788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.601{8223a6b9-7626-6902-e415-000000002e00}5592C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.637{8223a6b9-7626-6902-e515-000000002e00}14960C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.673{8223a6b9-7626-6902-e615-000000002e00}11864C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.709{8223a6b9-7626-6902-e715-000000002e00}868C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.745{8223a6b9-7626-6902-e815-000000002e00}14300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.785{8223a6b9-7626-6902-e915-000000002e00}14656C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.823{8223a6b9-7626-6902-ea15-000000002e00}15268C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.855{8223a6b9-7626-6902-eb15-000000002e00}13428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.886{8223a6b9-7626-6902-ec15-000000002e00}16332C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.934{8223a6b9-7626-6902-ed15-000000002e00}14684C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:38.965{8223a6b9-7626-6902-ee15-000000002e00}14652C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.013{8223a6b9-7626-6902-ef15-000000002e00}2668C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.044{8223a6b9-7627-6902-f015-000000002e00}13696C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.091{8223a6b9-7627-6902-f115-000000002e00}15024C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.138{8223a6b9-7627-6902-f215-000000002e00}15384C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.171{8223a6b9-7627-6902-f315-000000002e00}10508C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.203{8223a6b9-7627-6902-f415-000000002e00}10692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.250{8223a6b9-7627-6902-f515-000000002e00}13992C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.282{8223a6b9-7627-6902-f615-000000002e00}7180C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.314{8223a6b9-7627-6902-f715-000000002e00}888C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.361{8223a6b9-7627-6902-f815-000000002e00}1592C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.393{8223a6b9-7627-6902-f915-000000002e00}8512C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.440{8223a6b9-7627-6902-fa15-000000002e00}13156C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.476{8223a6b9-7627-6902-fb15-000000002e00}13408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.504{8223a6b9-7627-6902-fc15-000000002e00}13188C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.551{8223a6b9-7627-6902-fd15-000000002e00}16044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.605{8223a6b9-7627-6902-0016-000000002e00}16124C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.641{8223a6b9-7627-6902-0116-000000002e00}8416C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.679{8223a6b9-7627-6902-0216-000000002e00}1428C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.713{8223a6b9-7627-6902-0316-000000002e00}3464C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.742{8223a6b9-7627-6902-0416-000000002e00}2592C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.775{8223a6b9-7627-6902-0516-000000002e00}2028C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.823{8223a6b9-7627-6902-0616-000000002e00}10812C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.865{8223a6b9-7627-6902-0716-000000002e00}11616C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.903{8223a6b9-7627-6902-0816-000000002e00}15412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.941{8223a6b9-7627-6902-0916-000000002e00}15204C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:39.966{8223a6b9-7627-6902-0a16-000000002e00}4308C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.014{8223a6b9-7627-6902-0b16-000000002e00}12924C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.045{8223a6b9-7628-6902-0c16-000000002e00}4084C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.077{8223a6b9-7628-6902-0d16-000000002e00}9856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.125{8223a6b9-7628-6902-0e16-000000002e00}14440C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.164{8223a6b9-7628-6902-0f16-000000002e00}2760C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.204{8223a6b9-7628-6902-1116-000000002e00}14704C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.236{8223a6b9-7628-6902-1216-000000002e00}14020C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.284{8223a6b9-7628-6902-1316-000000002e00}15660C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.315{8223a6b9-7628-6902-1416-000000002e00}9432C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.358{8223a6b9-7628-6902-1516-000000002e00}3664C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.395{8223a6b9-7628-6902-1616-000000002e00}16264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.427{8223a6b9-7628-6902-1716-000000002e00}16372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.459{8223a6b9-7628-6902-1816-000000002e00}4560C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.490{8223a6b9-7628-6902-1916-000000002e00}14624C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.527{8223a6b9-7627-6902-fe15-000000002e00}16068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.530{8223a6b9-7627-6902-ff15-000000002e00}15612C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000027909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.537{8223a6b9-7628-6902-1a16-000000002e00}13592C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.569{8223a6b9-7628-6902-1b16-000000002e00}15640C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.616{8223a6b9-7628-6902-1c16-000000002e00}14688C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.648{8223a6b9-7628-6902-1d16-000000002e00}10324C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.681{8223a6b9-7628-6902-1e16-000000002e00}13372C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.774{8223a6b9-7628-6902-1f16-000000002e00}14524C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.805{8223a6b9-7628-6902-2016-000000002e00}9788C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.839{8223a6b9-7628-6902-2116-000000002e00}15212C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.885{8223a6b9-7628-6902-2216-000000002e00}15108C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.916{8223a6b9-7628-6902-2316-000000002e00}11828C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.974{8223a6b9-7628-6902-2416-000000002e00}15880C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:40.997{8223a6b9-7628-6902-2516-000000002e00}13980C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.044{8223a6b9-7629-6902-2616-000000002e00}13776C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.093{8223a6b9-7629-6902-2716-000000002e00}6560C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.123{8223a6b9-7629-6902-2816-000000002e00}14092C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.155{8223a6b9-7629-6902-2916-000000002e00}4700C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.206{8223a6b9-7629-6902-2a16-000000002e00}7520C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.234{8223a6b9-7629-6902-2b16-000000002e00}14152C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.282{8223a6b9-7629-6902-2c16-000000002e00}15808C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.319{8223a6b9-7629-6902-2d16-000000002e00}16192C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.361{8223a6b9-7629-6902-2e16-000000002e00}16368C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.392{8223a6b9-7629-6902-2f16-000000002e00}6228C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.440{8223a6b9-7629-6902-3016-000000002e00}14772C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.472{8223a6b9-7629-6902-3116-000000002e00}15540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.519{8223a6b9-7629-6902-3216-000000002e00}15960C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.554{8223a6b9-7629-6902-3316-000000002e00}15984C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.583{8223a6b9-7629-6902-3416-000000002e00}11832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.614{8223a6b9-7629-6902-3516-000000002e00}10804C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.662{8223a6b9-7629-6902-3616-000000002e00}13176C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.694{8223a6b9-7629-6902-3716-000000002e00}1720C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.742{8223a6b9-7629-6902-3816-000000002e00}2128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.773{8223a6b9-7629-6902-3916-000000002e00}16236C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.805{8223a6b9-7629-6902-3a16-000000002e00}13508C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.853{8223a6b9-7629-6902-3b16-000000002e00}14840C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.900{8223a6b9-7629-6902-3c16-000000002e00}11932C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.932{8223a6b9-7629-6902-3d16-000000002e00}15056C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:41.964{8223a6b9-7629-6902-3e16-000000002e00}5816C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.011{8223a6b9-7629-6902-3f16-000000002e00}16280C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.050{8223a6b9-762a-6902-4016-000000002e00}12920C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.075{8223a6b9-762a-6902-4116-000000002e00}16016C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.107{8223a6b9-762a-6902-4216-000000002e00}15856C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.155{8223a6b9-762a-6902-4316-000000002e00}12112C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.187{8223a6b9-762a-6902-4416-000000002e00}12408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.218{8223a6b9-762a-6902-4516-000000002e00}15692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.266{8223a6b9-762a-6902-4616-000000002e00}14744C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.298{8223a6b9-762a-6902-4716-000000002e00}6872C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.332{8223a6b9-762a-6902-4816-000000002e00}14692C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.378{8223a6b9-762a-6902-4916-000000002e00}11288C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.411{8223a6b9-762a-6902-4a16-000000002e00}4072C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.441{8223a6b9-762a-6902-4b16-000000002e00}1940C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.488{8223a6b9-762a-6902-4c16-000000002e00}4916C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.520{8223a6b9-762a-6902-4d16-000000002e00}15044C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.561{8223a6b9-762a-6902-4e16-000000002e00}6440C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.583{8223a6b9-762a-6902-4f16-000000002e00}16328C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.630{8223a6b9-762a-6902-5016-000000002e00}13404C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.663{8223a6b9-762a-6902-5116-000000002e00}15868C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.695{8223a6b9-762a-6902-5216-000000002e00}10112C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.742{8223a6b9-762a-6902-5316-000000002e00}15548C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.776{8223a6b9-762a-6902-5416-000000002e00}15076C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.805{8223a6b9-762a-6902-5516-000000002e00}1964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.856{8223a6b9-762a-6902-5616-000000002e00}8088C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.884{8223a6b9-762a-6902-5716-000000002e00}14948C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.928{8223a6b9-762a-6902-5816-000000002e00}15072C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.964{8223a6b9-762a-6902-5916-000000002e00}1300C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:42.997{8223a6b9-762a-6902-5a16-000000002e00}13448C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.028{8223a6b9-762b-6902-5b16-000000002e00}11360C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.074{8223a6b9-762b-6902-5c16-000000002e00}14160C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.106{8223a6b9-762b-6902-5d16-000000002e00}7708C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.154{8223a6b9-762b-6902-5e16-000000002e00}5104C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.185{8223a6b9-762b-6902-5f16-000000002e00}15544C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.234{8223a6b9-762b-6902-6016-000000002e00}620C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.265{8223a6b9-762b-6902-6116-000000002e00}14576C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.311{8223a6b9-762b-6902-6216-000000002e00}8140C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.345{8223a6b9-762b-6902-6316-000000002e00}14928C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.391{8223a6b9-762b-6902-6416-000000002e00}1568C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.422{8223a6b9-762b-6902-6516-000000002e00}8128C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.470{8223a6b9-762b-6902-6616-000000002e00}15512C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.506{8223a6b9-762b-6902-6716-000000002e00}14876C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.534{8223a6b9-7628-6902-1016-000000002e00}15168C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000027988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.550{8223a6b9-762b-6902-6816-000000002e00}14868C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.597{8223a6b9-762b-6902-6916-000000002e00}5964C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.629{8223a6b9-762b-6902-6a16-000000002e00}14580C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.677{8223a6b9-762b-6902-6b16-000000002e00}13264C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.711{8223a6b9-762b-6902-6c16-000000002e00}6508C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.755{8223a6b9-762b-6902-6d16-000000002e00}2540C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.803{8223a6b9-762b-6902-6e16-000000002e00}13116C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.834{8223a6b9-762b-6902-6f16-000000002e00}14120C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.866{8223a6b9-762b-6902-7016-000000002e00}14408C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000027997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:43.898{8223a6b9-7536-6902-c213-000000002e00}14312C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000027998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:45.526{8223a6b9-762c-6902-7216-000000002e00}11652C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000027999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:45.529{8223a6b9-762c-6902-7316-000000002e00}13652C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:45.656{8223a6b9-762d-6902-7516-000000002e00}1508C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:45.724{8223a6b9-762d-6902-7616-000000002e00}13980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:45.849{8223a6b9-762d-6902-7716-000000002e00}13668C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:46.096{8223a6b9-762d-6902-7816-000000002e00}14908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:46.183{8223a6b9-762e-6902-7916-000000002e00}9852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:46.562{8223a6b9-762e-6902-7a16-000000002e00}280C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:46.658{8223a6b9-762e-6902-7b16-000000002e00}10212C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:47.258{8223a6b9-762e-6902-7c16-000000002e00}12856C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:47.324{8223a6b9-762f-6902-7d16-000000002e00}16368C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:47.588{8223a6b9-762f-6902-7e16-000000002e00}13692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:47.657{8223a6b9-762f-6902-7f16-000000002e00}16100C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:47.800{8223a6b9-762f-6902-8016-000000002e00}5296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:47.927{8223a6b9-762f-6902-8116-000000002e00}15364C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:48.452{8223a6b9-762f-6902-8216-000000002e00}13772C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:48.531{8223a6b9-762d-6902-7416-000000002e00}4456C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:48.547{8223a6b9-7630-6902-8316-000000002e00}5868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:48.747{8223a6b9-7630-6902-8416-000000002e00}15948C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:48.817{8223a6b9-7630-6902-8516-000000002e00}10560C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:48.920{8223a6b9-7630-6902-8616-000000002e00}16236C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:48.977{8223a6b9-7630-6902-8716-000000002e00}15268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:49.133{8223a6b9-7630-6902-8816-000000002e00}14384C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:49.359{8223a6b9-7631-6902-8916-000000002e00}2612C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:49.453{8223a6b9-7631-6902-8a16-000000002e00}1572C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:49.516{8223a6b9-7631-6902-8b16-000000002e00}5760C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:49.621{8223a6b9-7631-6902-8c16-000000002e00}5872C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:49.937{8223a6b9-7631-6902-8f16-000000002e00}5116C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.016{8223a6b9-7631-6902-9016-000000002e00}10692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.120{8223a6b9-7632-6902-9116-000000002e00}13992C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.207{8223a6b9-7632-6902-9216-000000002e00}14980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.319{8223a6b9-7632-6902-9416-000000002e00}5912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.375{8223a6b9-7632-6902-9516-000000002e00}11900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.526{8223a6b9-7631-6902-8d16-000000002e00}2360C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.530{8223a6b9-7631-6902-8e16-000000002e00}1004C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.749{8223a6b9-7632-6902-9616-000000002e00}13408C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.822{8223a6b9-7632-6902-9716-000000002e00}3784C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:50.904{8223a6b9-7632-6902-9816-000000002e00}14196C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:51.261{8223a6b9-7632-6902-9916-000000002e00}15920C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:51.328{8223a6b9-7633-6902-9a16-000000002e00}14816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:51.616{8223a6b9-7633-6902-9b16-000000002e00}11416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:51.689{8223a6b9-7633-6902-9c16-000000002e00}3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:51.839{8223a6b9-7633-6902-9d16-000000002e00}14884C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:51.902{8223a6b9-7633-6902-9e16-000000002e00}10272C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:52.170{8223a6b9-7633-6902-9f16-000000002e00}14044C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:52.279{8223a6b9-7634-6902-a016-000000002e00}14948C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:53.553{8223a6b9-7632-6902-9316-000000002e00}4740C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:54.940{8223a6b9-7634-6902-a116-000000002e00}11000C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:55.024{8223a6b9-7636-6902-a416-000000002e00}11360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:55.529{8223a6b9-7636-6902-a216-000000002e00}4308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:55.532{8223a6b9-7636-6902-a316-000000002e00}14532C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:55.608{8223a6b9-7637-6902-a516-000000002e00}4084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:55.688{8223a6b9-7637-6902-a716-000000002e00}2808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:55.762{8223a6b9-7637-6902-a816-000000002e00}5404C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:55.830{8223a6b9-7637-6902-a916-000000002e00}14568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:55.926{8223a6b9-7637-6902-aa16-000000002e00}8140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:56.005{8223a6b9-7637-6902-ab16-000000002e00}14852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:56.528{8223a6b9-7638-6902-ac16-000000002e00}3664C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:57.204{8223a6b9-7638-6902-ad16-000000002e00}16264C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:57.473{8223a6b9-7639-6902-ae16-000000002e00}14632C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:57.889{8223a6b9-7639-6902-af16-000000002e00}1492C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:58.129{8223a6b9-7639-6902-b016-000000002e00}11096C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:58.489{8223a6b9-763a-6902-b116-000000002e00}16068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:58.537{8223a6b9-7637-6902-a616-000000002e00}13452C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:58.679{8223a6b9-763a-6902-b216-000000002e00}13264C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:58.920{8223a6b9-763a-6902-b316-000000002e00}14124C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:59.060{8223a6b9-763a-6902-b416-000000002e00}14688C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:59.298{8223a6b9-763b-6902-b516-000000002e00}13880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:16:59.933{8223a6b9-763b-6902-b616-000000002e00}8164C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:00.526{8223a6b9-763b-6902-b716-000000002e00}15816C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:00.531{8223a6b9-763b-6902-b816-000000002e00}13768C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:00.920{8223a6b9-763b-6902-b916-000000002e00}11652C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:01.254{8223a6b9-763c-6902-bb16-000000002e00}15160C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:01.908{8223a6b9-763d-6902-bc16-000000002e00}4340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:02.141{8223a6b9-763d-6902-bd16-000000002e00}6788C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:02.407{8223a6b9-763e-6902-be16-000000002e00}14512C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:02.690{8223a6b9-763e-6902-bf16-000000002e00}9576C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:03.529{8223a6b9-763c-6902-ba16-000000002e00}14228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:03.935{8223a6b9-763e-6902-c016-000000002e00}15832C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:04.101{8223a6b9-763f-6902-c116-000000002e00}15296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:04.572{8223a6b9-7640-6902-c216-000000002e00}13576C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:04.690{8223a6b9-7640-6902-c516-000000002e00}14732C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:04.817{8223a6b9-7640-6902-c616-000000002e00}16104C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:04.962{8223a6b9-7640-6902-c716-000000002e00}5024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:05.293{8223a6b9-7640-6902-c816-000000002e00}16112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:05.405{8223a6b9-7641-6902-ca16-000000002e00}1720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:05.526{8223a6b9-7640-6902-c316-000000002e00}2992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:05.529{8223a6b9-7640-6902-c416-000000002e00}15052C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:06.034{8223a6b9-7641-6902-cb16-000000002e00}14300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:06.120{8223a6b9-7642-6902-cc16-000000002e00}12944C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:06.314{8223a6b9-7642-6902-cd16-000000002e00}10520C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:06.471{8223a6b9-7642-6902-ce16-000000002e00}14288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:07.627{8223a6b9-7642-6902-cf16-000000002e00}15056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:07.728{8223a6b9-7643-6902-d016-000000002e00}3180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:07.952{8223a6b9-7643-6902-d116-000000002e00}6728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:08.036{8223a6b9-7643-6902-d216-000000002e00}5340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:08.318{8223a6b9-7644-6902-d316-000000002e00}13732C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:08.379{8223a6b9-7644-6902-d416-000000002e00}10692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:08.482{8223a6b9-7644-6902-d516-000000002e00}13992C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:08.538{8223a6b9-7641-6902-c916-000000002e00}5652C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:08.601{8223a6b9-7644-6902-d616-000000002e00}14980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:09.839{8223a6b9-7644-6902-d716-000000002e00}15940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:09.922{8223a6b9-7645-6902-da16-000000002e00}13408C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:10.032{8223a6b9-7645-6902-db16-000000002e00}6440C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:10.185{8223a6b9-7646-6902-dd16-000000002e00}16124C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:10.300{8223a6b9-7646-6902-de16-000000002e00}15868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:10.528{8223a6b9-7645-6902-d816-000000002e00}2360C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:10.531{8223a6b9-7645-6902-d916-000000002e00}4536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:10.628{8223a6b9-7646-6902-df16-000000002e00}9248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:10.751{8223a6b9-7646-6902-e016-000000002e00}11416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:10.885{8223a6b9-7646-6902-e116-000000002e00}14884C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:11.468{8223a6b9-7646-6902-e216-000000002e00}10272C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:11.550{8223a6b9-7647-6902-e316-000000002e00}14044C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:12.139{8223a6b9-7647-6902-e416-000000002e00}14948C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:12.235{8223a6b9-7648-6902-e516-000000002e00}13448C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:13.243{8223a6b9-7648-6902-e616-000000002e00}7924C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:13.303{8223a6b9-7649-6902-e716-000000002e00}13636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:13.414{8223a6b9-7649-6902-e816-000000002e00}2852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:13.502{8223a6b9-7649-6902-e916-000000002e00}7588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:13.541{8223a6b9-7645-6902-dc16-000000002e00}12968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:13.576{8223a6b9-7649-6902-ea16-000000002e00}11124C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:13.685{8223a6b9-7649-6902-eb16-000000002e00}4744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:13.780{8223a6b9-7649-6902-ec16-000000002e00}14768C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:14.989{8223a6b9-7649-6902-ed16-000000002e00}9432C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:15.164{8223a6b9-764b-6902-f016-000000002e00}16372C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:15.527{8223a6b9-764a-6902-ee16-000000002e00}15796C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:15.531{8223a6b9-764a-6902-ef16-000000002e00}13872C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:15.967{8223a6b9-764b-6902-f216-000000002e00}1068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.023{8223a6b9-764b-6902-f316-000000002e00}16096C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.118{8223a6b9-764c-6902-f416-000000002e00}10648C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.197{8223a6b9-764c-6902-f516-000000002e00}15300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.444{8223a6b9-764c-6902-f616-000000002e00}9024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.516{8223a6b9-764c-6902-f716-000000002e00}3672C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.605{8223a6b9-764c-6902-f816-000000002e00}10324C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.659{8223a6b9-764c-6902-f916-000000002e00}14548C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.849{8223a6b9-764c-6902-fa16-000000002e00}16316C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.928{8223a6b9-764c-6902-fb16-000000002e00}13684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:16.992{8223a6b9-764c-6902-fc16-000000002e00}15816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:17.072{8223a6b9-764c-6902-fd16-000000002e00}14892C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:17.135{8223a6b9-764d-6902-fe16-000000002e00}9172C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:17.214{8223a6b9-764d-6902-ff16-000000002e00}5600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:17.280{8223a6b9-764d-6902-0017-000000002e00}1848C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:17.357{8223a6b9-764d-6902-0117-000000002e00}16132C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:17.473{8223a6b9-764d-6902-0217-000000002e00}14736C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:17.643{8223a6b9-764d-6902-0317-000000002e00}13588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:17.711{8223a6b9-764d-6902-0417-000000002e00}15036C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:18.174{8223a6b9-764d-6902-0517-000000002e00}11692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:18.251{8223a6b9-764e-6902-0617-000000002e00}14756C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:18.363{8223a6b9-764e-6902-0717-000000002e00}13412C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:18.537{8223a6b9-764b-6902-f116-000000002e00}11372C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:18.727{8223a6b9-764e-6902-0817-000000002e00}16248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:19.330{8223a6b9-764e-6902-0917-000000002e00}4012C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:19.530{8223a6b9-764f-6902-0a17-000000002e00}1476C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:20.527{8223a6b9-764f-6902-0c17-000000002e00}14116C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:20.530{8223a6b9-764f-6902-0d17-000000002e00}8196C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:20.795{8223a6b9-764f-6902-0b17-000000002e00}15948C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:20.923{8223a6b9-7650-6902-0f17-000000002e00}12944C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:21.256{8223a6b9-7650-6902-1017-000000002e00}12904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:21.448{8223a6b9-7651-6902-1117-000000002e00}1240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:22.480{8223a6b9-7651-6902-1217-000000002e00}15648C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:22.740{8223a6b9-7652-6902-1317-000000002e00}15884C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:23.537{8223a6b9-7650-6902-0e17-000000002e00}15680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:23.983{8223a6b9-7652-6902-1417-000000002e00}13484C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:24.142{8223a6b9-7653-6902-1517-000000002e00}15952C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:24.398{8223a6b9-7654-6902-1617-000000002e00}2584C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:24.780{8223a6b9-7654-6902-1717-000000002e00}16152C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:25.529{8223a6b9-7654-6902-1817-000000002e00}3064C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:25.533{8223a6b9-7654-6902-1917-000000002e00}15532C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:25.684{8223a6b9-7654-6902-1a17-000000002e00}8512C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:26.046{8223a6b9-7655-6902-1c17-000000002e00}14544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:26.475{8223a6b9-7656-6902-1d17-000000002e00}156C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:26.682{8223a6b9-7656-6902-1e17-000000002e00}11524C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:27.017{8223a6b9-7656-6902-1f17-000000002e00}15944C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:27.461{8223a6b9-7657-6902-2017-000000002e00}14728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:28.547{8223a6b9-7655-6902-1b17-000000002e00}9572C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:28.719{8223a6b9-7657-6902-2117-000000002e00}5612C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:28.932{8223a6b9-7658-6902-2217-000000002e00}9248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:29.650{8223a6b9-7658-6902-2317-000000002e00}11416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:29.714{8223a6b9-7659-6902-2617-000000002e00}11616C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:29.796{8223a6b9-7659-6902-2717-000000002e00}14212C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:29.962{8223a6b9-7659-6902-2817-000000002e00}2132C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:30.526{8223a6b9-7659-6902-2417-000000002e00}14884C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:30.530{8223a6b9-7659-6902-2517-000000002e00}16072C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:30.557{8223a6b9-7659-6902-2917-000000002e00}10296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:30.827{8223a6b9-765a-6902-2b17-000000002e00}7924C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:32.432{8223a6b9-765a-6902-2c17-000000002e00}9856C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:32.636{8223a6b9-765c-6902-2d17-000000002e00}5484C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:32.902{8223a6b9-765c-6902-2e17-000000002e00}1752C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:33.140{8223a6b9-765c-6902-2f17-000000002e00}15752C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:33.542{8223a6b9-765a-6902-2a17-000000002e00}13728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:33.857{8223a6b9-765d-6902-3017-000000002e00}16276C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:33.983{8223a6b9-765d-6902-3117-000000002e00}8140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:34.636{8223a6b9-765d-6902-3217-000000002e00}15304C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:34.764{8223a6b9-765e-6902-3517-000000002e00}15600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:35.528{8223a6b9-765e-6902-3317-000000002e00}13120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:35.530{8223a6b9-765e-6902-3417-000000002e00}9432C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:38.320{8223a6b9-765e-6902-3617-000000002e00}13872C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:38.543{8223a6b9-765f-6902-3717-000000002e00}11096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:38.633{8223a6b9-7662-6902-3817-000000002e00}14584C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:39.207{8223a6b9-7662-6902-3917-000000002e00}13500C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:39.403{8223a6b9-7663-6902-3a17-000000002e00}7228C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:40.323{8223a6b9-7663-6902-3b17-000000002e00}14688C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:40.482{8223a6b9-7664-6902-3f17-000000002e00}13624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:40.527{8223a6b9-7663-6902-3c17-000000002e00}13880C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:40.530{8223a6b9-7663-6902-3d17-000000002e00}5744C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:41.264{8223a6b9-7664-6902-4017-000000002e00}15816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:41.405{8223a6b9-7665-6902-4117-000000002e00}9172C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:41.757{8223a6b9-7665-6902-4217-000000002e00}5600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:41.975{8223a6b9-7665-6902-4317-000000002e00}16240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:42.645{8223a6b9-7665-6902-4417-000000002e00}15336C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:42.905{8223a6b9-7666-6902-4517-000000002e00}16300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:43.309{8223a6b9-7666-6902-4617-000000002e00}2240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:43.532{8223a6b9-7664-6902-3e17-000000002e00}7024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:43.900{8223a6b9-7667-6902-4717-000000002e00}5420C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:44.994{8223a6b9-7667-6902-4817-000000002e00}12308C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:45.485{8223a6b9-7668-6902-4b17-000000002e00}11832C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:45.529{8223a6b9-7668-6902-4917-000000002e00}5296C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:45.532{8223a6b9-7668-6902-4a17-000000002e00}6832C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:46.507{8223a6b9-7669-6902-4d17-000000002e00}5576C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:47.012{8223a6b9-766a-6902-4e17-000000002e00}3596C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:48.016{8223a6b9-766b-6902-4f17-000000002e00}15340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:48.533{8223a6b9-7669-6902-4c17-000000002e00}13600C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:48.533{8223a6b9-766c-6902-5017-000000002e00}2128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:49.623{8223a6b9-766c-6902-5117-000000002e00}16200C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:50.092{8223a6b9-766d-6902-5417-000000002e00}10520C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:50.527{8223a6b9-766d-6902-5217-000000002e00}14668C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:50.530{8223a6b9-766d-6902-5317-000000002e00}14840C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:51.270{8223a6b9-766e-6902-5617-000000002e00}2612C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:51.398{8223a6b9-766f-6902-5717-000000002e00}15536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:51.676{8223a6b9-766f-6902-5817-000000002e00}14096C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:51.813{8223a6b9-766f-6902-5917-000000002e00}15680C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:52.035{8223a6b9-766f-6902-5a17-000000002e00}10508C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:52.306{8223a6b9-7670-6902-5b17-000000002e00}5340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:53.550{8223a6b9-766d-6902-5517-000000002e00}8352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:53.569{8223a6b9-7670-6902-5c17-000000002e00}13884C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:53.941{8223a6b9-7671-6902-5d17-000000002e00}15116C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:55.049{8223a6b9-7671-6902-5e17-000000002e00}11092C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:55.166{8223a6b9-7673-6902-6117-000000002e00}15156C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:55.309{8223a6b9-7673-6902-6317-000000002e00}16328C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:55.527{8223a6b9-7672-6902-5f17-000000002e00}15532C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:55.530{8223a6b9-7672-6902-6017-000000002e00}7508C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:55.625{8223a6b9-7673-6902-6417-000000002e00}13840C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:57.461{8223a6b9-7673-6902-6517-000000002e00}13404C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:57.587{8223a6b9-7675-6902-6617-000000002e00}13156C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:57.809{8223a6b9-7675-6902-6717-000000002e00}15408C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:58.553{8223a6b9-7673-6902-6217-000000002e00}6568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:17:58.664{8223a6b9-7675-6902-6817-000000002e00}14500C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:00.527{8223a6b9-7677-6902-6a17-000000002e00}15412C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:00.532{8223a6b9-7677-6902-6b17-000000002e00}12636C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:01.918{8223a6b9-7676-6902-6917-000000002e00}6340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:02.199{8223a6b9-7679-6902-6d17-000000002e00}9588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:02.671{8223a6b9-767a-6902-6e17-000000002e00}14948C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:03.262{8223a6b9-767a-6902-6f17-000000002e00}7016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:03.539{8223a6b9-7678-6902-6c17-000000002e00}14324C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:05.527{8223a6b9-767c-6902-7117-000000002e00}16172C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:05.531{8223a6b9-767c-6902-7217-000000002e00}1128C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:06.150{8223a6b9-767b-6902-7017-000000002e00}7708C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:06.383{8223a6b9-767e-6902-7417-000000002e00}14496C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:07.267{8223a6b9-767e-6902-7517-000000002e00}15088C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:07.410{8223a6b9-767f-6902-7617-000000002e00}9412C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:08.053{8223a6b9-767f-6902-7717-000000002e00}5624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:08.207{8223a6b9-7680-6902-7817-000000002e00}16108C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:08.547{8223a6b9-767d-6902-7317-000000002e00}15980C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:09.663{8223a6b9-7680-6902-7917-000000002e00}15568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:09.914{8223a6b9-7681-6902-7c17-000000002e00}11908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:10.482{8223a6b9-7681-6902-7d17-000000002e00}13452C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:10.529{8223a6b9-7681-6902-7a17-000000002e00}15028C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:10.533{8223a6b9-7681-6902-7b17-000000002e00}16312C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:10.751{8223a6b9-7682-6902-7f17-000000002e00}14016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:11.295{8223a6b9-7682-6902-8017-000000002e00}12720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:11.400{8223a6b9-7683-6902-8117-000000002e00}5328C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:11.650{8223a6b9-7683-6902-8217-000000002e00}12972C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:11.824{8223a6b9-7683-6902-8317-000000002e00}9416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:13.194{8223a6b9-7683-6902-8417-000000002e00}14716C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:13.291{8223a6b9-7685-6902-8517-000000002e00}11652C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:13.544{8223a6b9-7682-6902-7e17-000000002e00}10004C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:13.686{8223a6b9-7685-6902-8617-000000002e00}8300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:14.131{8223a6b9-7685-6902-8717-000000002e00}14916C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:14.959{8223a6b9-7686-6902-8817-000000002e00}2264C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:15.133{8223a6b9-7686-6902-8b17-000000002e00}14796C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:15.528{8223a6b9-7686-6902-8917-000000002e00}9952C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:15.531{8223a6b9-7686-6902-8a17-000000002e00}3032C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:16.425{8223a6b9-7687-6902-8d17-000000002e00}15036C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:16.518{8223a6b9-7688-6902-8e17-000000002e00}16368C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:16.854{8223a6b9-7688-6902-8f17-000000002e00}4560C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:17.601{8223a6b9-7688-6902-9017-000000002e00}15908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:18.555{8223a6b9-7687-6902-8c17-000000002e00}15964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:19.604{8223a6b9-7689-6902-9117-000000002e00}12880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:19.733{8223a6b9-768b-6902-9417-000000002e00}5576C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:19.874{8223a6b9-768b-6902-9517-000000002e00}16164C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:20.126{8223a6b9-768b-6902-9617-000000002e00}4596C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:20.430{8223a6b9-768c-6902-9717-000000002e00}16104C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:20.527{8223a6b9-768b-6902-9217-000000002e00}392C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:20.530{8223a6b9-768b-6902-9317-000000002e00}11832C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:20.693{8223a6b9-768c-6902-9917-000000002e00}15988C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:21.081{8223a6b9-768c-6902-9a17-000000002e00}15764C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:21.335{8223a6b9-768d-6902-9b17-000000002e00}14684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:22.091{8223a6b9-768d-6902-9c17-000000002e00}14216C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:22.474{8223a6b9-768e-6902-9d17-000000002e00}14720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:23.063{8223a6b9-768e-6902-9e17-000000002e00}8356C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:23.490{8223a6b9-768f-6902-9f17-000000002e00}14656C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:23.543{8223a6b9-768c-6902-9817-000000002e00}14116C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:25.527{8223a6b9-7690-6902-a117-000000002e00}15000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:25.531{8223a6b9-7690-6902-a217-000000002e00}15692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:27.306{8223a6b9-768f-6902-a017-000000002e00}3552C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:27.717{8223a6b9-7693-6902-a417-000000002e00}6572C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:28.537{8223a6b9-7691-6902-a317-000000002e00}9888C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:30.371{8223a6b9-7693-6902-a517-000000002e00}16152C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:30.527{8223a6b9-7695-6902-a617-000000002e00}11092C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:30.530{8223a6b9-7695-6902-a717-000000002e00}15524C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:30.613{8223a6b9-7696-6902-a917-000000002e00}15928C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:33.271{8223a6b9-74f4-6902-9213-000000002e00}14388C:\Windows\System32\wbem\WmiPrvSE.exeNT AUTHORITY\SYSTEM +534500x800000000000000028310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:33.423{8223a6b9-7696-6902-aa17-000000002e00}16328C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:33.525{8223a6b9-7699-6902-ab17-000000002e00}15112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:33.541{8223a6b9-7695-6902-a817-000000002e00}6440C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:33.716{8223a6b9-7699-6902-ac17-000000002e00}15488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:33.963{8223a6b9-7699-6902-ad17-000000002e00}5612C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:35.528{8223a6b9-769a-6902-af17-000000002e00}16284C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:35.530{8223a6b9-769a-6902-b017-000000002e00}9248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:35.745{8223a6b9-7699-6902-ae17-000000002e00}15940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:35.851{8223a6b9-769b-6902-b217-000000002e00}14640C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:35.963{8223a6b9-769b-6902-b317-000000002e00}6340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:36.410{8223a6b9-769b-6902-b417-000000002e00}9588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:37.060{8223a6b9-769c-6902-b517-000000002e00}14808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:37.366{8223a6b9-769d-6902-b617-000000002e00}14212C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:37.951{8223a6b9-769d-6902-b717-000000002e00}2900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:38.540{8223a6b9-769b-6902-b117-000000002e00}11680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:38.556{8223a6b9-769d-6902-b817-000000002e00}4540C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:40.527{8223a6b9-769f-6902-ba17-000000002e00}14576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:40.532{8223a6b9-769f-6902-bb17-000000002e00}10164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:40.561{8223a6b9-769e-6902-b917-000000002e00}14608C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:41.016{8223a6b9-76a0-6902-bd17-000000002e00}6012C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:41.818{8223a6b9-76a1-6902-be17-000000002e00}5404C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:42.627{8223a6b9-76a1-6902-bf17-000000002e00}15672C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:43.540{8223a6b9-769f-6902-bc17-000000002e00}9240C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:44.632{8223a6b9-76a2-6902-c017-000000002e00}16228C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:44.908{8223a6b9-76a4-6902-c317-000000002e00}14692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:45.281{8223a6b9-76a4-6902-c417-000000002e00}15376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:45.527{8223a6b9-76a4-6902-c117-000000002e00}8148C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:45.531{8223a6b9-76a4-6902-c217-000000002e00}13452C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:45.539{8223a6b9-76a5-6902-c617-000000002e00}13072C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:45.866{8223a6b9-76a5-6902-c717-000000002e00}15152C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:46.124{8223a6b9-76a5-6902-c817-000000002e00}15500C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:46.618{8223a6b9-76a6-6902-c917-000000002e00}3672C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:46.857{8223a6b9-76a6-6902-ca17-000000002e00}13684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:47.198{8223a6b9-76a6-6902-cb17-000000002e00}9056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:47.421{8223a6b9-76a7-6902-cc17-000000002e00}6560C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:47.716{8223a6b9-76a7-6902-cd17-000000002e00}5500C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:48.196{8223a6b9-76a7-6902-ce17-000000002e00}14152C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:48.535{8223a6b9-76a5-6902-c517-000000002e00}14172C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:48.935{8223a6b9-76a8-6902-cf17-000000002e00}15068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:49.164{8223a6b9-76a8-6902-d017-000000002e00}14628C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:49.542{8223a6b9-76a9-6902-d117-000000002e00}10852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:49.667{8223a6b9-76a9-6902-d417-000000002e00}14868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:50.163{8223a6b9-76a9-6902-d517-000000002e00}4456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:50.529{8223a6b9-76a9-6902-d217-000000002e00}15036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:50.532{8223a6b9-76a9-6902-d317-000000002e00}10588C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:50.581{8223a6b9-76aa-6902-d717-000000002e00}14812C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:51.894{8223a6b9-76aa-6902-d817-000000002e00}13564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:52.212{8223a6b9-76ab-6902-d917-000000002e00}5872C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:52.775{8223a6b9-76ac-6902-da17-000000002e00}14588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:53.127{8223a6b9-76ac-6902-db17-000000002e00}13600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:53.530{8223a6b9-76a9-6902-d617-000000002e00}1804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:53.888{8223a6b9-76ad-6902-dc17-000000002e00}868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:53.944{8223a6b9-76ad-6902-dd17-000000002e00}1112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:54.023{8223a6b9-76ad-6902-de17-000000002e00}6832C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:54.271{8223a6b9-76ae-6902-df17-000000002e00}16200C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:54.739{8223a6b9-76ae-6902-e017-000000002e00}11816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:55.024{8223a6b9-76ae-6902-e317-000000002e00}14720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:55.526{8223a6b9-76ae-6902-e117-000000002e00}15096C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:55.529{8223a6b9-76ae-6902-e217-000000002e00}8204C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:55.691{8223a6b9-76af-6902-e417-000000002e00}3180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:55.937{8223a6b9-76af-6902-e617-000000002e00}16036C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:56.247{8223a6b9-76af-6902-e717-000000002e00}14976C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:56.784{8223a6b9-76b0-6902-e817-000000002e00}14060C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:58.105{8223a6b9-76b0-6902-e917-000000002e00}13456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:58.381{8223a6b9-76b2-6902-ea17-000000002e00}10692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:58.533{8223a6b9-76af-6902-e517-000000002e00}15856C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:58.786{8223a6b9-76b2-6902-eb17-000000002e00}15144C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:58.865{8223a6b9-76b2-6902-ec17-000000002e00}15720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:58.961{8223a6b9-76b2-6902-ed17-000000002e00}10620C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:59.104{8223a6b9-76b2-6902-ee17-000000002e00}11936C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:59.342{8223a6b9-76b3-6902-ef17-000000002e00}5868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:18:59.865{8223a6b9-76b3-6902-f017-000000002e00}11204C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:00.527{8223a6b9-76b3-6902-f117-000000002e00}15868C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:00.531{8223a6b9-76b3-6902-f217-000000002e00}15404C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:00.888{8223a6b9-76b3-6902-f317-000000002e00}15996C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:00.977{8223a6b9-76b4-6902-f517-000000002e00}4860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:01.168{8223a6b9-76b4-6902-f617-000000002e00}10536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:01.281{8223a6b9-76b5-6902-f717-000000002e00}15420C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:01.455{8223a6b9-76b5-6902-f817-000000002e00}728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:01.792{8223a6b9-76b5-6902-f917-000000002e00}14888C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:02.186{8223a6b9-76b5-6902-fa17-000000002e00}13448C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:02.425{8223a6b9-76b6-6902-fb17-000000002e00}16024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:02.871{8223a6b9-76b6-6902-fc17-000000002e00}13636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:02.966{8223a6b9-76b6-6902-fd17-000000002e00}14324C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:03.381{8223a6b9-76b6-6902-fe17-000000002e00}14292C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:03.460{8223a6b9-76b7-6902-ff17-000000002e00}12636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:03.539{8223a6b9-76b7-6902-0018-000000002e00}2416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:03.543{8223a6b9-76b3-6902-f417-000000002e00}13404C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:03.682{8223a6b9-76b7-6902-0118-000000002e00}13652C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:04.032{8223a6b9-76b7-6902-0218-000000002e00}14372C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:04.139{8223a6b9-76b8-6902-0318-000000002e00}14540C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:05.529{8223a6b9-76b8-6902-0518-000000002e00}14608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:05.533{8223a6b9-76b8-6902-0618-000000002e00}9576C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:06.485{8223a6b9-76b8-6902-0418-000000002e00}10164C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:06.781{8223a6b9-76ba-6902-0818-000000002e00}14860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:07.353{8223a6b9-76ba-6902-0918-000000002e00}16372C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:07.436{8223a6b9-76bb-6902-0a18-000000002e00}1568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:07.856{8223a6b9-76bb-6902-0b18-000000002e00}1860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:07.963{8223a6b9-76bb-6902-0c18-000000002e00}14692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:08.094{8223a6b9-76bb-6902-0d18-000000002e00}3372C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:08.356{8223a6b9-76bc-6902-0e18-000000002e00}10140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:08.534{8223a6b9-76b9-6902-0718-000000002e00}6012C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:08.756{8223a6b9-76bc-6902-0f18-000000002e00}13768C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:08.850{8223a6b9-76bc-6902-1018-000000002e00}924C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:08.962{8223a6b9-76bc-6902-1118-000000002e00}14688C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:09.042{8223a6b9-76bc-6902-1218-000000002e00}12800C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:09.325{8223a6b9-76bd-6902-1318-000000002e00}13684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:09.553{8223a6b9-76bd-6902-1418-000000002e00}6920C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:09.977{8223a6b9-76bd-6902-1718-000000002e00}11216C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:10.058{8223a6b9-76bd-6902-1818-000000002e00}16168C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:10.142{8223a6b9-76be-6902-1a18-000000002e00}14240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:10.423{8223a6b9-76be-6902-1b18-000000002e00}13436C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:10.526{8223a6b9-76bd-6902-1518-000000002e00}14536C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:10.529{8223a6b9-76bd-6902-1618-000000002e00}13764C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:11.143{8223a6b9-76be-6902-1c18-000000002e00}14868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:11.459{8223a6b9-76bf-6902-1d18-000000002e00}6036C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:12.252{8223a6b9-76bf-6902-1e18-000000002e00}13780C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:12.331{8223a6b9-76c0-6902-1f18-000000002e00}10664C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:12.425{8223a6b9-76c0-6902-2018-000000002e00}15512C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:12.507{8223a6b9-76c0-6902-2118-000000002e00}5592C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:12.634{8223a6b9-76c0-6902-2218-000000002e00}13860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:13.100{8223a6b9-76c0-6902-2318-000000002e00}13412C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:13.537{8223a6b9-76be-6902-1918-000000002e00}14960C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:13.987{8223a6b9-76c1-6902-2418-000000002e00}11832C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:14.128{8223a6b9-76c1-6902-2518-000000002e00}14676C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:14.472{8223a6b9-76c2-6902-2618-000000002e00}12904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:14.650{8223a6b9-76c2-6902-2718-000000002e00}14216C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:14.830{8223a6b9-76c2-6902-2a18-000000002e00}7288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:14.905{8223a6b9-76c2-6902-2b18-000000002e00}2668C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:15.049{8223a6b9-76c2-6902-2c18-000000002e00}9884C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:15.260{8223a6b9-76c3-6902-2d18-000000002e00}2948C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:15.529{8223a6b9-76c2-6902-2818-000000002e00}14684C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:15.532{8223a6b9-76c2-6902-2918-000000002e00}11348C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:15.623{8223a6b9-76c3-6902-2f18-000000002e00}15092C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:15.962{8223a6b9-76c3-6902-3018-000000002e00}1240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:16.814{8223a6b9-76c3-6902-3118-000000002e00}8196C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:16.910{8223a6b9-76c4-6902-3218-000000002e00}13532C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:17.021{8223a6b9-76c4-6902-3318-000000002e00}14220C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:17.291{8223a6b9-76c5-6902-3418-000000002e00}15044C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:18.027{8223a6b9-76c5-6902-3518-000000002e00}15532C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:18.124{8223a6b9-76c6-6902-3618-000000002e00}8112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:18.342{8223a6b9-76c6-6902-3718-000000002e00}14816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:18.531{8223a6b9-76c6-6902-3818-000000002e00}12988C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:18.536{8223a6b9-76c3-6902-2e18-000000002e00}14452C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:18.954{8223a6b9-76c6-6902-3918-000000002e00}15868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:19.042{8223a6b9-76c6-6902-3a18-000000002e00}6440C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:19.201{8223a6b9-76c7-6902-3b18-000000002e00}2080C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:19.296{8223a6b9-76c7-6902-3c18-000000002e00}4052C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:19.486{8223a6b9-76c7-6902-3d18-000000002e00}16048C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:19.696{8223a6b9-76c7-6902-3e18-000000002e00}16052C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:20.526{8223a6b9-76c7-6902-3f18-000000002e00}16088C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:20.530{8223a6b9-76c7-6902-4018-000000002e00}14888C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:21.080{8223a6b9-76c7-6902-4118-000000002e00}10296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:21.287{8223a6b9-76c9-6902-4318-000000002e00}13700C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:21.542{8223a6b9-76c9-6902-4418-000000002e00}15560C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:21.621{8223a6b9-76c9-6902-4518-000000002e00}10272C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:22.241{8223a6b9-76c9-6902-4618-000000002e00}15488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:22.562{8223a6b9-76ca-6902-4718-000000002e00}12788C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:22.972{8223a6b9-76ca-6902-4818-000000002e00}14940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:23.068{8223a6b9-76ca-6902-4918-000000002e00}13668C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:23.243{8223a6b9-76cb-6902-4a18-000000002e00}15088C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:23.323{8223a6b9-76cb-6902-4b18-000000002e00}3664C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:23.429{8223a6b9-76cb-6902-4c18-000000002e00}5816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:23.529{8223a6b9-76c8-6902-4218-000000002e00}15824C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:23.545{8223a6b9-76cb-6902-4d18-000000002e00}6736C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:23.894{8223a6b9-76cb-6902-4e18-000000002e00}14860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:24.175{8223a6b9-76cb-6902-4f18-000000002e00}15568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:24.572{8223a6b9-76cc-6902-5018-000000002e00}13912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:24.664{8223a6b9-76cc-6902-5318-000000002e00}14692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:24.752{8223a6b9-76cc-6902-5418-000000002e00}4160C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:24.815{8223a6b9-76cc-6902-5518-000000002e00}10140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:24.917{8223a6b9-76cc-6902-5618-000000002e00}15880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:25.007{8223a6b9-76cc-6902-5718-000000002e00}9416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:25.419{8223a6b9-76cd-6902-5818-000000002e00}13880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:25.527{8223a6b9-76cc-6902-5118-000000002e00}15788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:25.531{8223a6b9-76cc-6902-5218-000000002e00}14516C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:25.577{8223a6b9-76cd-6902-5a18-000000002e00}13264C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:26.010{8223a6b9-76cd-6902-5b18-000000002e00}13376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:26.101{8223a6b9-76ce-6902-5c18-000000002e00}8300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:27.090{8223a6b9-76ce-6902-5d18-000000002e00}16316C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:27.442{8223a6b9-76cf-6902-5e18-000000002e00}14748C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:27.851{8223a6b9-76cf-6902-5f18-000000002e00}13692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:27.931{8223a6b9-76cf-6902-6018-000000002e00}14992C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.020{8223a6b9-76cf-6902-6118-000000002e00}6680C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.142{8223a6b9-76d0-6902-6218-000000002e00}8340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.217{8223a6b9-76d0-6902-6318-000000002e00}14560C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.470{8223a6b9-76d0-6902-6418-000000002e00}16148C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.518{8223a6b9-76d0-6902-6518-000000002e00}15380C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.539{8223a6b9-76cd-6902-5918-000000002e00}16260C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.614{8223a6b9-76d0-6902-6618-000000002e00}14724C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.774{8223a6b9-76d0-6902-6718-000000002e00}13696C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:28.853{8223a6b9-76d0-6902-6818-000000002e00}5024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:29.025{8223a6b9-76d0-6902-6918-000000002e00}5780C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:29.781{8223a6b9-76d1-6902-6a18-000000002e00}10204C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:29.865{8223a6b9-76d1-6902-6d18-000000002e00}15016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:29.973{8223a6b9-76d1-6902-6e18-000000002e00}14572C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:30.111{8223a6b9-76d1-6902-6f18-000000002e00}15932C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:30.527{8223a6b9-76d1-6902-6b18-000000002e00}1996C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:30.533{8223a6b9-76d1-6902-6c18-000000002e00}6216C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:31.298{8223a6b9-76d2-6902-7118-000000002e00}2068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:31.377{8223a6b9-76d3-6902-7218-000000002e00}3180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:31.472{8223a6b9-76d3-6902-7318-000000002e00}14116C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:31.775{8223a6b9-76d3-6902-7418-000000002e00}7472C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:31.869{8223a6b9-76d3-6902-7518-000000002e00}14684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:32.013{8223a6b9-76d3-6902-7618-000000002e00}15288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:32.093{8223a6b9-76d4-6902-7718-000000002e00}10692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:32.176{8223a6b9-76d4-6902-7818-000000002e00}15856C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:32.252{8223a6b9-76d4-6902-7918-000000002e00}488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:32.333{8223a6b9-76d4-6902-7a18-000000002e00}14544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:32.425{8223a6b9-76d4-6902-7b18-000000002e00}10620C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:32.536{8223a6b9-76d4-6902-7c18-000000002e00}5912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:32.694{8223a6b9-76d4-6902-7d18-000000002e00}15604C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:33.080{8223a6b9-76d4-6902-7e18-000000002e00}15944C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:33.267{8223a6b9-76d5-6902-7f18-000000002e00}16328C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:33.537{8223a6b9-76d2-6902-7018-000000002e00}6532C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:33.755{8223a6b9-76d5-6902-8018-000000002e00}15384C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:33.968{8223a6b9-76d5-6902-8118-000000002e00}15024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:34.355{8223a6b9-76d5-6902-8218-000000002e00}5612C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:34.495{8223a6b9-76d6-6902-8318-000000002e00}6860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:34.576{8223a6b9-76d6-6902-8418-000000002e00}6568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:34.764{8223a6b9-76d6-6902-8718-000000002e00}728C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:35.300{8223a6b9-76d6-6902-8818-000000002e00}3380C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:35.378{8223a6b9-76d7-6902-8a18-000000002e00}3480C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:35.456{8223a6b9-76d7-6902-8b18-000000002e00}9024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:35.529{8223a6b9-76d6-6902-8518-000000002e00}14148C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:35.531{8223a6b9-76d6-6902-8618-000000002e00}15460C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:35.560{8223a6b9-76d7-6902-8c18-000000002e00}1128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:35.671{8223a6b9-76d7-6902-8d18-000000002e00}4084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:36.014{8223a6b9-76d7-6902-8e18-000000002e00}13540C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:36.485{8223a6b9-76d8-6902-8f18-000000002e00}13492C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:36.613{8223a6b9-76d8-6902-9018-000000002e00}15236C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:37.324{8223a6b9-76d8-6902-9118-000000002e00}7132C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:37.457{8223a6b9-76d9-6902-9218-000000002e00}13668C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:37.746{8223a6b9-76d9-6902-9318-000000002e00}13544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:37.828{8223a6b9-76d9-6902-9418-000000002e00}4024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:37.919{8223a6b9-76d9-6902-9518-000000002e00}14808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:38.236{8223a6b9-76d9-6902-9618-000000002e00}2844C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:38.315{8223a6b9-76da-6902-9718-000000002e00}4568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:38.543{8223a6b9-76d7-6902-8918-000000002e00}16008C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:38.776{8223a6b9-76da-6902-9818-000000002e00}15300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:38.997{8223a6b9-76da-6902-9918-000000002e00}3768C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:40.526{8223a6b9-76db-6902-9b18-000000002e00}5328C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:40.530{8223a6b9-76db-6902-9c18-000000002e00}12720C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:40.585{8223a6b9-76da-6902-9a18-000000002e00}15836C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:40.701{8223a6b9-76dc-6902-9e18-000000002e00}2092C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:41.467{8223a6b9-76dc-6902-9f18-000000002e00}9260C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:41.691{8223a6b9-76dd-6902-a018-000000002e00}14516C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:42.103{8223a6b9-76dd-6902-a118-000000002e00}14352C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:42.214{8223a6b9-76de-6902-a218-000000002e00}13684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:42.438{8223a6b9-76de-6902-a318-000000002e00}11360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:42.692{8223a6b9-76de-6902-a418-000000002e00}14736C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:43.538{8223a6b9-76dc-6902-9d18-000000002e00}15584C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:44.241{8223a6b9-76de-6902-a518-000000002e00}13936C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:44.466{8223a6b9-76e0-6902-a618-000000002e00}10808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:45.529{8223a6b9-76e0-6902-a818-000000002e00}14128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:45.532{8223a6b9-76e0-6902-a918-000000002e00}9776C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:46.373{8223a6b9-76e0-6902-a718-000000002e00}280C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:46.437{8223a6b9-76e2-6902-ab18-000000002e00}14272C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:46.516{8223a6b9-76e2-6902-ac18-000000002e00}15328C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:46.768{8223a6b9-76e2-6902-ad18-000000002e00}14376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:48.133{8223a6b9-76e2-6902-ae18-000000002e00}15052C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:48.336{8223a6b9-76e4-6902-af18-000000002e00}1804C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:48.554{8223a6b9-76e1-6902-aa18-000000002e00}12984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:48.838{8223a6b9-76e4-6902-b018-000000002e00}13412C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:49.027{8223a6b9-76e4-6902-b118-000000002e00}14444C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:49.396{8223a6b9-76e5-6902-b218-000000002e00}15456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:49.542{8223a6b9-76e5-6902-b318-000000002e00}13984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:49.939{8223a6b9-76e5-6902-b618-000000002e00}13440C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:50.144{8223a6b9-76e5-6902-b718-000000002e00}4976C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:50.528{8223a6b9-76e5-6902-b418-000000002e00}10560C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:50.530{8223a6b9-76e5-6902-b518-000000002e00}1140C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:50.752{8223a6b9-76e6-6902-b918-000000002e00}2068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:50.877{8223a6b9-76e6-6902-ba18-000000002e00}7472C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:51.436{8223a6b9-76e6-6902-bb18-000000002e00}14684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:51.567{8223a6b9-76e7-6902-bc18-000000002e00}15288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:51.659{8223a6b9-76e7-6902-bd18-000000002e00}10692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:51.834{8223a6b9-76e7-6902-be18-000000002e00}13532C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:51.961{8223a6b9-76e7-6902-bf18-000000002e00}15856C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:52.296{8223a6b9-76e7-6902-c018-000000002e00}14544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:52.565{8223a6b9-76e8-6902-c118-000000002e00}10620C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:52.934{8223a6b9-76e8-6902-c218-000000002e00}5912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:53.147{8223a6b9-76e8-6902-c318-000000002e00}15604C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:53.412{8223a6b9-76e9-6902-c418-000000002e00}14332C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:53.537{8223a6b9-76e6-6902-b818-000000002e00}13484C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:53.723{8223a6b9-76e9-6902-c518-000000002e00}1732C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:54.535{8223a6b9-76e9-6902-c618-000000002e00}14616C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:54.607{8223a6b9-76ea-6902-c818-000000002e00}1676C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:54.681{8223a6b9-76ea-6902-ca18-000000002e00}16284C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:54.737{8223a6b9-76ea-6902-cb18-000000002e00}11588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:54.816{8223a6b9-76ea-6902-cc18-000000002e00}4912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:54.874{8223a6b9-76ea-6902-cd18-000000002e00}13452C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:54.937{8223a6b9-76ea-6902-ce18-000000002e00}14900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.001{8223a6b9-76ea-6902-cf18-000000002e00}10296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.085{8223a6b9-76eb-6902-d018-000000002e00}1104C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.144{8223a6b9-76eb-6902-d118-000000002e00}8088C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.216{8223a6b9-76eb-6902-d318-000000002e00}11084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.284{8223a6b9-76eb-6902-d418-000000002e00}10272C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.352{8223a6b9-76eb-6902-d518-000000002e00}14196C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.415{8223a6b9-76eb-6902-d618-000000002e00}13316C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.495{8223a6b9-76eb-6902-d718-000000002e00}12776C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.527{8223a6b9-76ea-6902-c718-000000002e00}11616C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.530{8223a6b9-76ea-6902-c918-000000002e00}14800C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.558{8223a6b9-76eb-6902-d818-000000002e00}15780C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.627{8223a6b9-76eb-6902-d918-000000002e00}15256C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.689{8223a6b9-76eb-6902-da18-000000002e00}16308C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.750{8223a6b9-76eb-6902-db18-000000002e00}10164C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.811{8223a6b9-76eb-6902-dc18-000000002e00}7016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.894{8223a6b9-76eb-6902-dd18-000000002e00}14320C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:55.959{8223a6b9-76eb-6902-de18-000000002e00}5080C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.034{8223a6b9-76eb-6902-df18-000000002e00}14888C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.113{8223a6b9-76ec-6902-e018-000000002e00}15568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.180{8223a6b9-76ec-6902-e118-000000002e00}15528C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.244{8223a6b9-76ec-6902-e218-000000002e00}14176C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.305{8223a6b9-76ec-6902-e318-000000002e00}14568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.369{8223a6b9-76ec-6902-e418-000000002e00}14708C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.439{8223a6b9-76ec-6902-e518-000000002e00}5328C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.496{8223a6b9-76ec-6902-e618-000000002e00}13912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.570{8223a6b9-76ec-6902-e718-000000002e00}9416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.640{8223a6b9-76ec-6902-e818-000000002e00}5836C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.703{8223a6b9-76ec-6902-e918-000000002e00}1584C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.767{8223a6b9-76ec-6902-ea18-000000002e00}10004C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.846{8223a6b9-76ec-6902-eb18-000000002e00}15108C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.910{8223a6b9-76ec-6902-ec18-000000002e00}14584C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:56.982{8223a6b9-76ec-6902-ed18-000000002e00}3032C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.036{8223a6b9-76ec-6902-ee18-000000002e00}6228C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.115{8223a6b9-76ed-6902-ef18-000000002e00}15584C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.178{8223a6b9-76ed-6902-f018-000000002e00}13936C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.264{8223a6b9-76ed-6902-f118-000000002e00}15036C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.322{8223a6b9-76ed-6902-f218-000000002e00}16252C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.386{8223a6b9-76ed-6902-f318-000000002e00}15296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.449{8223a6b9-76ed-6902-f418-000000002e00}16076C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.554{8223a6b9-76ed-6902-f518-000000002e00}16144C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.619{8223a6b9-76ed-6902-f618-000000002e00}8272C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.687{8223a6b9-76ed-6902-f718-000000002e00}14376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.751{8223a6b9-76ed-6902-f818-000000002e00}13504C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.814{8223a6b9-76ed-6902-f918-000000002e00}7024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.877{8223a6b9-76ed-6902-fa18-000000002e00}15700C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:57.957{8223a6b9-76ed-6902-fb18-000000002e00}13412C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.029{8223a6b9-76ed-6902-fc18-000000002e00}14444C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.100{8223a6b9-76ee-6902-fd18-000000002e00}15456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.170{8223a6b9-76ee-6902-fe18-000000002e00}15932C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.256{8223a6b9-76ee-6902-ff18-000000002e00}13464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.307{8223a6b9-76ee-6902-0019-000000002e00}5628C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.394{8223a6b9-76ee-6902-0119-000000002e00}6216C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.449{8223a6b9-76ee-6902-0219-000000002e00}14720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.539{8223a6b9-76eb-6902-d218-000000002e00}15712C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.544{8223a6b9-76ee-6902-0319-000000002e00}16208C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.592{8223a6b9-76ee-6902-0419-000000002e00}3056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.671{8223a6b9-76ee-6902-0519-000000002e00}2228C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.734{8223a6b9-76ee-6902-0619-000000002e00}15276C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.814{8223a6b9-76ee-6902-0719-000000002e00}1940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.877{8223a6b9-76ee-6902-0819-000000002e00}14980C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:58.957{8223a6b9-76ee-6902-0919-000000002e00}15044C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.020{8223a6b9-76ee-6902-0a19-000000002e00}2796C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.091{8223a6b9-76ef-6902-0b19-000000002e00}5956C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.147{8223a6b9-76ef-6902-0c19-000000002e00}15624C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.226{8223a6b9-76ef-6902-0d19-000000002e00}7348C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.289{8223a6b9-76ef-6902-0e19-000000002e00}13416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.377{8223a6b9-76ef-6902-0f19-000000002e00}15268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.432{8223a6b9-76ef-6902-1019-000000002e00}13156C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.511{8223a6b9-76ef-6902-1119-000000002e00}1004C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.616{8223a6b9-76ef-6902-1219-000000002e00}7320C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.685{8223a6b9-76ef-6902-1519-000000002e00}16280C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.749{8223a6b9-76ef-6902-1619-000000002e00}13452C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.828{8223a6b9-76ef-6902-1719-000000002e00}14900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.892{8223a6b9-76ef-6902-1819-000000002e00}10296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:19:59.955{8223a6b9-76ef-6902-1919-000000002e00}1104C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.038{8223a6b9-76ef-6902-1a19-000000002e00}15124C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.115{8223a6b9-76f0-6902-1c19-000000002e00}2560C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.193{8223a6b9-76f0-6902-1d19-000000002e00}14196C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.320{8223a6b9-76f0-6902-1e19-000000002e00}13316C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.449{8223a6b9-76f0-6902-1f19-000000002e00}15412C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.527{8223a6b9-76ef-6902-1319-000000002e00}1068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.532{8223a6b9-76ef-6902-1419-000000002e00}15924C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.632{8223a6b9-76f0-6902-2019-000000002e00}12776C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.770{8223a6b9-76f0-6902-2119-000000002e00}15780C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:00.859{8223a6b9-76f0-6902-2219-000000002e00}15256C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:01.517{8223a6b9-76f0-6902-2319-000000002e00}16308C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:01.611{8223a6b9-76f1-6902-2419-000000002e00}5404C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:01.837{8223a6b9-76f1-6902-2519-000000002e00}15672C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:01.995{8223a6b9-76f1-6902-2619-000000002e00}5852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.137{8223a6b9-76f1-6902-2719-000000002e00}16088C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.232{8223a6b9-76f2-6902-2819-000000002e00}7808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.391{8223a6b9-76f2-6902-2919-000000002e00}16140C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.488{8223a6b9-76f2-6902-2a19-000000002e00}504C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.581{8223a6b9-76f2-6902-2b19-000000002e00}5608C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.650{8223a6b9-76f2-6902-2c19-000000002e00}15972C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.727{8223a6b9-76f2-6902-2d19-000000002e00}3372C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.806{8223a6b9-76f2-6902-2e19-000000002e00}15836C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.882{8223a6b9-76f2-6902-2f19-000000002e00}2092C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:02.945{8223a6b9-76f2-6902-3019-000000002e00}7388C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.009{8223a6b9-76f2-6902-3119-000000002e00}14416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.072{8223a6b9-76f3-6902-3219-000000002e00}14428C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.163{8223a6b9-76f3-6902-3319-000000002e00}13684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.216{8223a6b9-76f3-6902-3419-000000002e00}11360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.332{8223a6b9-76f3-6902-3519-000000002e00}14736C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.397{8223a6b9-76f3-6902-3619-000000002e00}13692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.482{8223a6b9-76f3-6902-3719-000000002e00}14536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.541{8223a6b9-76f0-6902-1b19-000000002e00}15212C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.556{8223a6b9-76f3-6902-3819-000000002e00}15984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.636{8223a6b9-76f3-6902-3919-000000002e00}6036C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.699{8223a6b9-76f3-6902-3a19-000000002e00}6680C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.778{8223a6b9-76f3-6902-3b19-000000002e00}13616C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.841{8223a6b9-76f3-6902-3c19-000000002e00}13360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.918{8223a6b9-76f3-6902-3d19-000000002e00}15340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:03.983{8223a6b9-76f3-6902-3e19-000000002e00}14512C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.065{8223a6b9-76f3-6902-3f19-000000002e00}15052C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.128{8223a6b9-76f4-6902-4019-000000002e00}1804C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.208{8223a6b9-76f4-6902-4119-000000002e00}12040C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.287{8223a6b9-76f4-6902-4219-000000002e00}11832C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.367{8223a6b9-76f4-6902-4319-000000002e00}10520C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.430{8223a6b9-76f4-6902-4419-000000002e00}1996C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.512{8223a6b9-76f4-6902-4519-000000002e00}9300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.600{8223a6b9-76f4-6902-4619-000000002e00}13904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.668{8223a6b9-76f4-6902-4919-000000002e00}12920C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.746{8223a6b9-76f4-6902-4a19-000000002e00}7180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.810{8223a6b9-76f4-6902-4b19-000000002e00}15712C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.874{8223a6b9-76f4-6902-4c19-000000002e00}16208C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:04.998{8223a6b9-76f4-6902-4d19-000000002e00}3056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:05.529{8223a6b9-76f4-6902-4719-000000002e00}3180C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:05.532{8223a6b9-76f4-6902-4819-000000002e00}6728C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:05.609{8223a6b9-76f4-6902-4e19-000000002e00}2228C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:05.745{8223a6b9-76f5-6902-5019-000000002e00}8416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:06.105{8223a6b9-76f5-6902-5119-000000002e00}8512C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:06.166{8223a6b9-76f6-6902-5219-000000002e00}13840C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:06.263{8223a6b9-76f6-6902-5319-000000002e00}13124C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:06.484{8223a6b9-76f6-6902-5419-000000002e00}14816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:06.532{8223a6b9-76f6-6902-5519-000000002e00}15112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:06.643{8223a6b9-76f6-6902-5619-000000002e00}15692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:06.801{8223a6b9-76f6-6902-5719-000000002e00}15000C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:06.934{8223a6b9-76f6-6902-5819-000000002e00}6532C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:07.931{8223a6b9-76f6-6902-5919-000000002e00}9564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.027{8223a6b9-76f7-6902-5a19-000000002e00}10812C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.135{8223a6b9-76f8-6902-5b19-000000002e00}14880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.254{8223a6b9-76f8-6902-5c19-000000002e00}13452C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.327{8223a6b9-76f8-6902-5d19-000000002e00}14900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.413{8223a6b9-76f8-6902-5e19-000000002e00}5484C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.485{8223a6b9-76f8-6902-5f19-000000002e00}620C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.539{8223a6b9-76f5-6902-4f19-000000002e00}15276C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.564{8223a6b9-76f8-6902-6019-000000002e00}13860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.628{8223a6b9-76f8-6902-6119-000000002e00}5024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.719{8223a6b9-76f8-6902-6219-000000002e00}10720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.773{8223a6b9-76f8-6902-6319-000000002e00}5128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.853{8223a6b9-76f8-6902-6419-000000002e00}15384C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.924{8223a6b9-76f8-6902-6519-000000002e00}1068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:08.993{8223a6b9-76f8-6902-6619-000000002e00}14432C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.057{8223a6b9-76f8-6902-6719-000000002e00}13668C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.135{8223a6b9-76f9-6902-6819-000000002e00}8128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.203{8223a6b9-76f9-6902-6919-000000002e00}15180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.279{8223a6b9-76f9-6902-6a19-000000002e00}14808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.342{8223a6b9-76f9-6902-6b19-000000002e00}15168C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.437{8223a6b9-76f9-6902-6c19-000000002e00}2844C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.501{8223a6b9-76f9-6902-6d19-000000002e00}16372C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.604{8223a6b9-76f9-6902-6e19-000000002e00}7808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.675{8223a6b9-76f9-6902-7119-000000002e00}15080C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.752{8223a6b9-76f9-6902-7219-000000002e00}10324C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.819{8223a6b9-76f9-6902-7319-000000002e00}15032C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.882{8223a6b9-76f9-6902-7419-000000002e00}14548C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:09.962{8223a6b9-76f9-6902-7519-000000002e00}14580C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.051{8223a6b9-76f9-6902-7619-000000002e00}9260C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.129{8223a6b9-76fa-6902-7819-000000002e00}12752C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.209{8223a6b9-76fa-6902-7919-000000002e00}14584C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.277{8223a6b9-76fa-6902-7a19-000000002e00}10200C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.361{8223a6b9-76fa-6902-7b19-000000002e00}12972C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.423{8223a6b9-76fa-6902-7c19-000000002e00}14348C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.503{8223a6b9-76fa-6902-7d19-000000002e00}11636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.528{8223a6b9-76f9-6902-6f19-000000002e00}14244C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.531{8223a6b9-76f9-6902-7019-000000002e00}4728C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.572{8223a6b9-76fa-6902-7e19-000000002e00}10352C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.645{8223a6b9-76fa-6902-7f19-000000002e00}2540C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.707{8223a6b9-76fa-6902-8019-000000002e00}13040C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.775{8223a6b9-76fa-6902-8119-000000002e00}12876C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.826{8223a6b9-76fa-6902-8219-000000002e00}14600C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.889{8223a6b9-76fa-6902-8319-000000002e00}10904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:10.951{8223a6b9-76fa-6902-8419-000000002e00}16104C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.014{8223a6b9-76fa-6902-8519-000000002e00}14856C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.091{8223a6b9-76fb-6902-8619-000000002e00}13568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.141{8223a6b9-76fb-6902-8719-000000002e00}11004C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.220{8223a6b9-76fb-6902-8819-000000002e00}15016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.277{8223a6b9-76fb-6902-8919-000000002e00}16296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.332{8223a6b9-76fb-6902-8a19-000000002e00}1576C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.395{8223a6b9-76fb-6902-8b19-000000002e00}14848C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.459{8223a6b9-76fb-6902-8c19-000000002e00}13464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.538{8223a6b9-76fb-6902-8d19-000000002e00}13904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.597{8223a6b9-76fb-6902-8e19-000000002e00}15560C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.669{8223a6b9-76fb-6902-8f19-000000002e00}8352C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.733{8223a6b9-76fb-6902-9019-000000002e00}14684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.781{8223a6b9-76fb-6902-9119-000000002e00}888C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.860{8223a6b9-76fb-6902-9219-000000002e00}14896C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:11.923{8223a6b9-76fb-6902-9319-000000002e00}3180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.002{8223a6b9-76fb-6902-9419-000000002e00}15116C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.052{8223a6b9-76fc-6902-9519-000000002e00}15856C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.113{8223a6b9-76fc-6902-9619-000000002e00}4468C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.178{8223a6b9-76fc-6902-9719-000000002e00}14388C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.240{8223a6b9-76fc-6902-9819-000000002e00}16300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.306{8223a6b9-76fc-6902-9919-000000002e00}16268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.384{8223a6b9-76fc-6902-9a19-000000002e00}14976C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.448{8223a6b9-76fc-6902-9b19-000000002e00}9956C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.521{8223a6b9-76fc-6902-9c19-000000002e00}14380C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.583{8223a6b9-76fc-6902-9d19-000000002e00}11764C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.656{8223a6b9-76fc-6902-9e19-000000002e00}1676C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.724{8223a6b9-76fc-6902-9f19-000000002e00}11040C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.787{8223a6b9-76fc-6902-a019-000000002e00}2296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.862{8223a6b9-76fc-6902-a119-000000002e00}14912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.920{8223a6b9-76fc-6902-a219-000000002e00}2304C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:12.992{8223a6b9-76fc-6902-a319-000000002e00}14356C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.053{8223a6b9-76fc-6902-a419-000000002e00}15884C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.101{8223a6b9-76fd-6902-a519-000000002e00}7468C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.170{8223a6b9-76fd-6902-a619-000000002e00}11212C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.227{8223a6b9-76fd-6902-a719-000000002e00}15352C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.322{8223a6b9-76fd-6902-a819-000000002e00}11896C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.433{8223a6b9-76fd-6902-a919-000000002e00}156C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.544{8223a6b9-76fa-6902-7719-000000002e00}16240C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.544{8223a6b9-76fd-6902-aa19-000000002e00}12952C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.623{8223a6b9-76fd-6902-ab19-000000002e00}14528C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.687{8223a6b9-76fd-6902-ac19-000000002e00}14652C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.782{8223a6b9-76fd-6902-ad19-000000002e00}3664C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.846{8223a6b9-76fd-6902-ae19-000000002e00}14564C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:13.957{8223a6b9-76fd-6902-af19-000000002e00}2760C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.027{8223a6b9-76fd-6902-b019-000000002e00}9432C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.148{8223a6b9-76fe-6902-b119-000000002e00}15776C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.508{8223a6b9-76fe-6902-b219-000000002e00}6340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.598{8223a6b9-76fe-6902-b319-000000002e00}14408C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.680{8223a6b9-76fe-6902-b619-000000002e00}7808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.752{8223a6b9-76fe-6902-b719-000000002e00}14708C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.813{8223a6b9-76fe-6902-b819-000000002e00}5328C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.868{8223a6b9-76fe-6902-b919-000000002e00}13912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:14.931{8223a6b9-76fe-6902-ba19-000000002e00}9416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.011{8223a6b9-76fe-6902-bb19-000000002e00}13068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.074{8223a6b9-76ff-6902-bc19-000000002e00}15264C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.150{8223a6b9-76ff-6902-bd19-000000002e00}14732C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.212{8223a6b9-76ff-6902-bf19-000000002e00}11360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.350{8223a6b9-76ff-6902-c019-000000002e00}14736C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.446{8223a6b9-76ff-6902-c119-000000002e00}13692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.527{8223a6b9-76fe-6902-b419-000000002e00}9588C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.531{8223a6b9-76fe-6902-b519-000000002e00}14360C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:15.567{8223a6b9-76ff-6902-c219-000000002e00}10808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:16.771{8223a6b9-7700-6902-c419-000000002e00}14128C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeNT AUTHORITY\SYSTEM +534500x800000000000000028848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:18.538{8223a6b9-76ff-6902-be19-000000002e00}5532C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:19.479{8223a6b9-76ff-6902-c319-000000002e00}11016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:19.553{8223a6b9-7703-6902-c619-000000002e00}10904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:19.682{8223a6b9-7703-6902-c919-000000002e00}14828C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:19.755{8223a6b9-7703-6902-ca19-000000002e00}15128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:19.841{8223a6b9-7703-6902-cb19-000000002e00}16200C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:19.906{8223a6b9-7703-6902-cc19-000000002e00}14288C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:19.954{8223a6b9-7703-6902-cd19-000000002e00}15456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.027{8223a6b9-7703-6902-ce19-000000002e00}15796C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.093{8223a6b9-7704-6902-cf19-000000002e00}8204C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.161{8223a6b9-7704-6902-d119-000000002e00}3552C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.224{8223a6b9-7704-6902-d219-000000002e00}14264C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.293{8223a6b9-7704-6902-d319-000000002e00}10772C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.398{8223a6b9-7704-6902-d419-000000002e00}2128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.489{8223a6b9-7704-6902-d519-000000002e00}11524C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.527{8223a6b9-7703-6902-c719-000000002e00}16104C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.530{8223a6b9-7703-6902-c819-000000002e00}15224C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.588{8223a6b9-7704-6902-d619-000000002e00}13732C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.640{8223a6b9-7704-6902-d719-000000002e00}15312C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.731{8223a6b9-7704-6902-d819-000000002e00}1552C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.872{8223a6b9-7704-6902-d919-000000002e00}13256C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:20.953{8223a6b9-7704-6902-da19-000000002e00}11052C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.017{8223a6b9-7704-6902-db19-000000002e00}11204C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.081{8223a6b9-7705-6902-dc19-000000002e00}13124C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.144{8223a6b9-7705-6902-dd19-000000002e00}8112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.207{8223a6b9-7705-6902-de19-000000002e00}6252C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.270{8223a6b9-7705-6902-df19-000000002e00}12988C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.333{8223a6b9-7705-6902-e019-000000002e00}13416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.397{8223a6b9-7705-6902-e119-000000002e00}15268C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.461{8223a6b9-7705-6902-e219-000000002e00}16040C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.524{8223a6b9-7705-6902-e319-000000002e00}15580C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.581{8223a6b9-7705-6902-e419-000000002e00}7092C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.635{8223a6b9-7705-6902-e519-000000002e00}14324C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.712{8223a6b9-7705-6902-e619-000000002e00}16172C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.778{8223a6b9-7705-6902-e719-000000002e00}14660C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.841{8223a6b9-7705-6902-e819-000000002e00}11084C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.905{8223a6b9-7705-6902-e919-000000002e00}488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:21.952{8223a6b9-7705-6902-ea19-000000002e00}16180C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:22.048{8223a6b9-7705-6902-eb19-000000002e00}13696C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:22.206{8223a6b9-7706-6902-ec19-000000002e00}15868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:22.396{8223a6b9-7706-6902-ed19-000000002e00}14800C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:22.937{8223a6b9-7706-6902-ee19-000000002e00}3052C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:23.017{8223a6b9-7706-6902-ef19-000000002e00}9964C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:23.114{8223a6b9-7707-6902-f019-000000002e00}14160C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:23.254{8223a6b9-7707-6902-f119-000000002e00}14496C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:23.450{8223a6b9-7707-6902-f219-000000002e00}3000C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:23.540{8223a6b9-7707-6902-f319-000000002e00}7588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:23.540{8223a6b9-7704-6902-d019-000000002e00}3412C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:23.679{8223a6b9-7707-6902-f419-000000002e00}5404C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:24.064{8223a6b9-7707-6902-f519-000000002e00}16344C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:24.365{8223a6b9-7708-6902-f619-000000002e00}16008C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:24.915{8223a6b9-7708-6902-f719-000000002e00}12112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:25.162{8223a6b9-7708-6902-fa19-000000002e00}12720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:25.528{8223a6b9-7708-6902-f819-000000002e00}15528C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:25.535{8223a6b9-7708-6902-f919-000000002e00}10252C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:25.783{8223a6b9-7709-6902-fc19-000000002e00}5328C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:25.955{8223a6b9-7709-6902-fd19-000000002e00}13880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:26.344{8223a6b9-7709-6902-fe19-000000002e00}9416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:26.501{8223a6b9-770a-6902-ff19-000000002e00}2592C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:26.759{8223a6b9-770a-6902-001a-000000002e00}16100C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:26.880{8223a6b9-770a-6902-011a-000000002e00}14732C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:27.199{8223a6b9-770a-6902-021a-000000002e00}11360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:27.602{8223a6b9-770b-6902-031a-000000002e00}5500C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:28.458{8223a6b9-770b-6902-041a-000000002e00}14008C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:28.538{8223a6b9-7709-6902-fb19-000000002e00}16312C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:28.767{8223a6b9-770c-6902-051a-000000002e00}14364C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:29.676{8223a6b9-770c-6902-061a-000000002e00}16380C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:29.905{8223a6b9-770d-6902-091a-000000002e00}10352C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:30.180{8223a6b9-770d-6902-0a1a-000000002e00}16164C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:30.490{8223a6b9-770e-6902-0c1a-000000002e00}16332C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:30.528{8223a6b9-770d-6902-071a-000000002e00}10544C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:30.532{8223a6b9-770d-6902-081a-000000002e00}15324C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:32.139{8223a6b9-770e-6902-0d1a-000000002e00}15188C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:32.267{8223a6b9-7710-6902-0e1a-000000002e00}15040C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:33.161{8223a6b9-7710-6902-0f1a-000000002e00}6200C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:33.408{8223a6b9-7711-6902-101a-000000002e00}13524C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:33.543{8223a6b9-770e-6902-0b1a-000000002e00}12984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:33.758{8223a6b9-7711-6902-111a-000000002e00}6524C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:33.959{8223a6b9-7711-6902-121a-000000002e00}13904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:34.190{8223a6b9-7711-6902-131a-000000002e00}14396C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:34.830{8223a6b9-7712-6902-141a-000000002e00}15648C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:35.529{8223a6b9-7712-6902-151a-000000002e00}9888C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:35.531{8223a6b9-7712-6902-161a-000000002e00}6572C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:38.558{8223a6b9-7713-6902-181a-000000002e00}11372C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:40.527{8223a6b9-7717-6902-191a-000000002e00}16340C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:40.530{8223a6b9-7717-6902-1a1a-000000002e00}3856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:41.032{8223a6b9-7712-6902-171a-000000002e00}12408C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:41.144{8223a6b9-7719-6902-1c1a-000000002e00}4536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:41.408{8223a6b9-7719-6902-1d1a-000000002e00}1112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:41.605{8223a6b9-7719-6902-1e1a-000000002e00}15184C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:42.831{8223a6b9-7719-6902-1f1a-000000002e00}13116C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:42.990{8223a6b9-771a-6902-201a-000000002e00}2360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:43.469{8223a6b9-771a-6902-211a-000000002e00}10256C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:43.538{8223a6b9-7718-6902-1b1a-000000002e00}8416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:43.558{8223a6b9-771b-6902-221a-000000002e00}10536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:43.643{8223a6b9-771b-6902-231a-000000002e00}16048C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:43.965{8223a6b9-771b-6902-241a-000000002e00}10648C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:45.527{8223a6b9-771c-6902-261a-000000002e00}10296C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:45.533{8223a6b9-771c-6902-271a-000000002e00}13704C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:48.543{8223a6b9-771d-6902-281a-000000002e00}14072C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:50.527{8223a6b9-7721-6902-291a-000000002e00}13404C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:50.530{8223a6b9-7721-6902-2a1a-000000002e00}2416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:53.533{8223a6b9-7722-6902-2b1a-000000002e00}16096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:54.906{8223a6b9-771b-6902-251a-000000002e00}14276C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:55.034{8223a6b9-7726-6902-2e1a-000000002e00}13872C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:55.527{8223a6b9-7726-6902-2c1a-000000002e00}14196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:55.532{8223a6b9-7726-6902-2d1a-000000002e00}15344C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:57.041{8223a6b9-7727-6902-2f1a-000000002e00}14152C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:57.250{8223a6b9-7729-6902-311a-000000002e00}7132C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:57.948{8223a6b9-7729-6902-321a-000000002e00}15468C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:58.078{8223a6b9-7729-6902-331a-000000002e00}9576C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:58.537{8223a6b9-7727-6902-301a-000000002e00}1068C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:59.399{8223a6b9-772a-6902-341a-000000002e00}13544C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:20:59.556{8223a6b9-772b-6902-351a-000000002e00}15824C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:00.527{8223a6b9-772b-6902-361a-000000002e00}6736C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:00.530{8223a6b9-772b-6902-371a-000000002e00}8240C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:00.928{8223a6b9-772b-6902-381a-000000002e00}15248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:01.073{8223a6b9-772c-6902-3a1a-000000002e00}6340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:01.444{8223a6b9-772d-6902-3b1a-000000002e00}6788C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:01.692{8223a6b9-772d-6902-3c1a-000000002e00}1572C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:01.993{8223a6b9-772d-6902-3d1a-000000002e00}5136C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:02.301{8223a6b9-772d-6902-3e1a-000000002e00}13596C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:03.201{8223a6b9-772e-6902-3f1a-000000002e00}13880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:03.536{8223a6b9-772c-6902-391a-000000002e00}14456C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:03.566{8223a6b9-772f-6902-401a-000000002e00}14516C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:04.848{8223a6b9-772f-6902-411a-000000002e00}2592C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:04.974{8223a6b9-7730-6902-451a-000000002e00}5500C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.261{8223a6b9-7730-6902-461a-000000002e00}14008C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.441{8223a6b9-7730-6902-421a-000000002e00}14584C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.447{8223a6b9-7730-6902-431a-000000002e00}15960C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.556{8223a6b9-7731-6902-491a-000000002e00}14128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.559{8223a6b9-7731-6902-4a1a-000000002e00}9852C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.790{8223a6b9-7731-6902-4c1a-000000002e00}12984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.801{8223a6b9-7249-6902-c911-000000002e00}14144C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000028982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.883{8223a6b9-7731-6902-4b1a-000000002e00}15476C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000028983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:05.897{8223a6b9-7731-6902-471a-000000002e00}504C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:06.493{8223a6b9-7731-6902-4e1a-000000002e00}1104C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:06.649{8223a6b9-7732-6902-4f1a-000000002e00}11216C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:06.847{8223a6b9-7732-6902-501a-000000002e00}11616C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:21:07.280{8223a6b9-7732-6902-511a-000000002e00}14372C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000028988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:22.794{8223a6b9-7731-6902-481a-000000002e00}10140C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:22.970{8223a6b9-799a-6902-541a-000000002e00}15536C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:22.970{8223a6b9-799a-6902-531a-000000002e00}9688C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000028991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:23.537{8223a6b9-799b-6902-591a-000000002e00}14568C:\Windows\System32\ipconfig.exeNT AUTHORITY\SYSTEM +534500x800000000000000028992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:23.551{8223a6b9-799b-6902-571a-000000002e00}6920C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000028993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:23.555{8223a6b9-799b-6902-581a-000000002e00}13880C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000028994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:24.178{8223a6b9-799b-6902-5a1a-000000002e00}15032C:\Windows\System32\wermgr.exeNT AUTHORITY\SYSTEM +534500x800000000000000028995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:24.350{8223a6b9-799a-6902-551a-000000002e00}10252C:\Windows\System32\taskhostw.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000028996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:24.830{8223a6b9-799c-6902-5f1a-000000002e00}15172C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000028997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:24.840{8223a6b9-799c-6902-601a-000000002e00}14800C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000028998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:24.905{8223a6b9-762c-6902-7116-000000002e00}16136C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000028999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:24.976{8223a6b9-799c-6902-621a-000000002e00}15644C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:24.981{8223a6b9-799c-6902-631a-000000002e00}9964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:25.196{8223a6b9-7536-6902-bd13-000000002e00}10472C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000029002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:25.243{8223a6b9-7536-6902-be13-000000002e00}15572C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:25.397{8223a6b9-7536-6902-c313-000000002e00}16092C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000029004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:25.476{8223a6b9-799c-6902-641a-000000002e00}3552C:\Windows\System32\taskhostw.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000029005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:25.632{8223a6b9-7733-6902-521a-000000002e00}15256C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:25.662{8223a6b9-7536-6902-bc13-000000002e00}7636C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000029007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:27.998{8223a6b9-799c-6902-611a-000000002e00}14112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:28.035{8223a6b9-7536-6902-bf13-000000002e00}15472C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:28.082{8223a6b9-799c-6902-5d1a-000000002e00}12932C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000029010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:28.118{8223a6b9-7536-6902-bb13-000000002e00}15348C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:28.523{8223a6b9-799d-6902-661a-000000002e00}14652C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000029012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:28.569{8223a6b9-799d-6902-671a-000000002e00}1572C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000029013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:29.764{8223a6b9-79a1-6902-681a-000000002e00}15696C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:29.778{8223a6b9-79a1-6902-691a-000000002e00}11896C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:30.445{8223a6b9-7700-6902-c519-000000002e00}15804C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000029016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:32.786{8223a6b9-79a1-6902-6a1a-000000002e00}16272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +11241100x800000000000000029017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:33.403{8223a6b9-378f-6902-0c00-000000002e00}872C:\WINDOWS\system32\lsass.exeC:\Users\Administrator\AppData\Local\Microsoft\Windows\SFAP\cache0.bin2024-11-11 17:13:25.488NT AUTHORITY\SYSTEM +534500x800000000000000029018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:33.876{8223a6b9-79a5-6902-6c1a-000000002e00}11908C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:33.903{8223a6b9-7730-6902-441a-000000002e00}13936C:\Windows\System32\LogonUI.exeNT AUTHORITY\SYSTEM +534500x800000000000000029020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:34.104{8223a6b9-79a5-6902-6d1a-000000002e00}14992C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000029021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:34.208{8223a6b9-79a5-6902-6b1a-000000002e00}13448C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:34.829{8223a6b9-79a6-6902-6e1a-000000002e00}3892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:34.832{8223a6b9-79a6-6902-6f1a-000000002e00}15256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:36.896{8223a6b9-799d-6902-651a-000000002e00}16180C:\Windows\System32\ctfmon.exeNT AUTHORITY\SYSTEM +534500x800000000000000029025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:37.824{8223a6b9-79a6-6902-701a-000000002e00}7636C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:39.817{8223a6b9-79ab-6902-711a-000000002e00}13944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:39.821{8223a6b9-79ab-6902-721a-000000002e00}14364C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:42.824{8223a6b9-79ab-6902-731a-000000002e00}14696C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:44.844{8223a6b9-79b0-6902-741a-000000002e00}9964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:44.861{8223a6b9-79b0-6902-751a-000000002e00}6492C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:47.879{8223a6b9-79b0-6902-761a-000000002e00}15792C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:49.809{8223a6b9-79b5-6902-771a-000000002e00}14760C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:49.814{8223a6b9-79b5-6902-781a-000000002e00}15804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:52.800{8223a6b9-79b5-6902-791a-000000002e00}7616C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:54.805{8223a6b9-79ba-6902-7a1a-000000002e00}7316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:54.821{8223a6b9-79ba-6902-7b1a-000000002e00}6920C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:57.807{8223a6b9-79ba-6902-7c1a-000000002e00}6200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:59.768{8223a6b9-79bf-6902-7d1a-000000002e00}15488C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:31:59.780{8223a6b9-79bf-6902-7e1a-000000002e00}14428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:02.772{8223a6b9-79bf-6902-7f1a-000000002e00}11428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:03.952{8223a6b9-79c3-6902-811a-000000002e00}1992C:\Windows\System32\taskhostw.exesoc101win11\Administrator +534500x800000000000000029042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:04.780{8223a6b9-79c4-6902-821a-000000002e00}9432C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:04.785{8223a6b9-79c4-6902-831a-000000002e00}5080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:07.790{8223a6b9-79c4-6902-841a-000000002e00}15220C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:09.817{8223a6b9-79c9-6902-851a-000000002e00}7636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:09.822{8223a6b9-79c9-6902-861a-000000002e00}2984C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:12.812{8223a6b9-79c9-6902-871a-000000002e00}14708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:14.805{8223a6b9-79ce-6902-881a-000000002e00}3752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:14.829{8223a6b9-79ce-6902-891a-000000002e00}15344C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:17.817{8223a6b9-79ce-6902-8a1a-000000002e00}14628C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:19.798{8223a6b9-79d3-6902-8d1a-000000002e00}16136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:19.803{8223a6b9-79d3-6902-8e1a-000000002e00}15232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:22.788{8223a6b9-79d3-6902-8f1a-000000002e00}6908C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:23.743{8223a6b9-799b-6902-561a-000000002e00}13776C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exesoc101win11\Administrator +534500x800000000000000029055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:23.962{8223a6b9-799b-6902-5c1a-000000002e00}16380C:\Program Files\WindowsApps\Microsoft.WindowsStore_22509.1401.11.0_x64__8wekyb3d8bbwe\WinStore.DesktopExtension\StoreDesktopExtension.exesoc101win11\Administrator +534500x800000000000000029056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:24.883{8223a6b9-79d8-6902-901a-000000002e00}13176C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:24.888{8223a6b9-79d8-6902-911a-000000002e00}13328C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:27.933{8223a6b9-79d8-6902-921a-000000002e00}15488C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:29.809{8223a6b9-79dd-6902-941a-000000002e00}15356C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:29.813{8223a6b9-79dd-6902-951a-000000002e00}3892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:32.816{8223a6b9-79dd-6902-961a-000000002e00}1552C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:34.778{8223a6b9-79e2-6902-971a-000000002e00}6788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:34.784{8223a6b9-79e2-6902-981a-000000002e00}1568C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:37.771{8223a6b9-79e2-6902-991a-000000002e00}13932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:39.764{8223a6b9-79e7-6902-9a1a-000000002e00}10232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:39.767{8223a6b9-79e7-6902-9b1a-000000002e00}13472C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:42.771{8223a6b9-79e7-6902-9c1a-000000002e00}14604C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:44.839{8223a6b9-79ec-6902-9d1a-000000002e00}14364C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:44.851{8223a6b9-79ec-6902-9e1a-000000002e00}5816C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:47.867{8223a6b9-79ec-6902-9f1a-000000002e00}12932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:48.303{8223a6b9-79da-6902-931a-000000002e00}16064C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000029072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:49.979{8223a6b9-79f1-6902-a01a-000000002e00}5424C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:49.989{8223a6b9-79f1-6902-a11a-000000002e00}12968C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:52.985{8223a6b9-79f1-6902-a21a-000000002e00}14236C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:54.796{8223a6b9-79f6-6902-a31a-000000002e00}7316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:54.799{8223a6b9-79f6-6902-a41a-000000002e00}14160C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:57.806{8223a6b9-79f6-6902-a51a-000000002e00}14404C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:59.803{8223a6b9-79fb-6902-a61a-000000002e00}14952C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:32:59.807{8223a6b9-79fb-6902-a71a-000000002e00}14120C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:02.793{8223a6b9-79fb-6902-a81a-000000002e00}9596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:04.767{8223a6b9-7a00-6902-a91a-000000002e00}15488C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:04.779{8223a6b9-7a00-6902-aa1a-000000002e00}15964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:07.780{8223a6b9-7a00-6902-ab1a-000000002e00}14284C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:09.782{8223a6b9-7a05-6902-ac1a-000000002e00}5128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:09.788{8223a6b9-7a05-6902-ad1a-000000002e00}13428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:12.841{8223a6b9-7a05-6902-ae1a-000000002e00}14576C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:14.791{8223a6b9-7a0a-6902-af1a-000000002e00}15472C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:14.796{8223a6b9-7a0a-6902-b01a-000000002e00}12988C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:17.849{8223a6b9-7a0a-6902-b11a-000000002e00}15348C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:19.769{8223a6b9-7a0f-6902-b21a-000000002e00}11516C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:19.775{8223a6b9-7a0f-6902-b31a-000000002e00}68C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:22.766{8223a6b9-7a0f-6902-b41a-000000002e00}5432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:24.795{8223a6b9-7a14-6902-b51a-000000002e00}15876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:24.800{8223a6b9-7a14-6902-b61a-000000002e00}1576C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:27.787{8223a6b9-7a14-6902-b71a-000000002e00}14848C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:29.782{8223a6b9-7a19-6902-b81a-000000002e00}8340C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:29.785{8223a6b9-7a19-6902-b91a-000000002e00}13536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:32.795{8223a6b9-7a19-6902-ba1a-000000002e00}10508C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:34.885{8223a6b9-7a1e-6902-bb1a-000000002e00}13572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:34.893{8223a6b9-7a1e-6902-bc1a-000000002e00}16296C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:37.885{8223a6b9-7a1e-6902-bd1a-000000002e00}1104C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:39.766{8223a6b9-7a23-6902-be1a-000000002e00}15616C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:39.772{8223a6b9-7a23-6902-bf1a-000000002e00}2068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:42.772{8223a6b9-7a23-6902-c01a-000000002e00}16272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:44.773{8223a6b9-7a28-6902-c11a-000000002e00}8248C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:44.778{8223a6b9-7a28-6902-c21a-000000002e00}15132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:45.284{8223a6b9-7a29-6902-c51a-000000002e00}14120C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000029108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:46.212{8223a6b9-7a28-6902-c41a-000000002e00}13328C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:47.793{8223a6b9-7a28-6902-c31a-000000002e00}16000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:49.773{8223a6b9-7a2d-6902-c71a-000000002e00}15116C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:49.783{8223a6b9-7a2d-6902-c81a-000000002e00}11068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:51.083{8223a6b9-7a2e-6902-ca1a-000000002e00}16360C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000029113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:52.787{8223a6b9-7a2d-6902-c91a-000000002e00}9400C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:54.827{8223a6b9-7a32-6902-cb1a-000000002e00}15896C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:54.830{8223a6b9-7a32-6902-cc1a-000000002e00}1240C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:56.077{8223a6b9-7a34-6902-ce1a-000000002e00}10664C:\Windows\System32\sdbinst.exeNT AUTHORITY\SYSTEM +534500x800000000000000029117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:56.086{8223a6b9-7a34-6902-cf1a-000000002e00}13896C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:57.843{8223a6b9-7a32-6902-cd1a-000000002e00}4860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:59.759{8223a6b9-7a37-6902-d01a-000000002e00}14700C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:33:59.763{8223a6b9-7a37-6902-d11a-000000002e00}13248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:02.764{8223a6b9-7a37-6902-d21a-000000002e00}15680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:04.773{8223a6b9-7a3c-6902-d31a-000000002e00}2892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:04.783{8223a6b9-7a3c-6902-d41a-000000002e00}15304C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:07.765{8223a6b9-7a3c-6902-d51a-000000002e00}3196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:09.778{8223a6b9-7a41-6902-d61a-000000002e00}11480C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:09.788{8223a6b9-7a41-6902-d71a-000000002e00}14092C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:12.766{8223a6b9-7a41-6902-d81a-000000002e00}15656C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:14.752{8223a6b9-7a46-6902-d91a-000000002e00}16020C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:14.756{8223a6b9-7a46-6902-da1a-000000002e00}10580C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:17.763{8223a6b9-7a46-6902-db1a-000000002e00}2080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:19.767{8223a6b9-7a4b-6902-dd1a-000000002e00}12904C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:19.777{8223a6b9-7a4b-6902-de1a-000000002e00}6384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:22.785{8223a6b9-7a4b-6902-df1a-000000002e00}1764C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:24.762{8223a6b9-7a50-6902-e01a-000000002e00}15984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:24.772{8223a6b9-7a50-6902-e11a-000000002e00}9892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:25.301{8223a6b9-7a29-6902-c61a-000000002e00}10140C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000029137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:27.762{8223a6b9-7a50-6902-e21a-000000002e00}13892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:29.774{8223a6b9-7a55-6902-e31a-000000002e00}16096C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:29.778{8223a6b9-7a55-6902-e41a-000000002e00}12000C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:32.785{8223a6b9-7a55-6902-e51a-000000002e00}15500C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:34.777{8223a6b9-7a5a-6902-e61a-000000002e00}13572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:34.780{8223a6b9-7a5a-6902-e71a-000000002e00}1068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:37.782{8223a6b9-7a5a-6902-e81a-000000002e00}14408C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:39.782{8223a6b9-7a5f-6902-e91a-000000002e00}16164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:39.787{8223a6b9-7a5f-6902-ea1a-000000002e00}14852C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:42.832{8223a6b9-7a5f-6902-eb1a-000000002e00}16216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:44.821{8223a6b9-7a64-6902-ec1a-000000002e00}14008C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:44.826{8223a6b9-7a64-6902-ed1a-000000002e00}9048C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:47.863{8223a6b9-7a64-6902-ee1a-000000002e00}4352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:49.836{8223a6b9-7a69-6902-ef1a-000000002e00}11096C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:49.839{8223a6b9-7a69-6902-f01a-000000002e00}14404C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:52.887{8223a6b9-7a69-6902-f11a-000000002e00}13484C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:54.778{8223a6b9-7a6e-6902-f21a-000000002e00}13620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:54.780{8223a6b9-7a6e-6902-f31a-000000002e00}14140C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:57.772{8223a6b9-7a6e-6902-f41a-000000002e00}1992C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:59.805{8223a6b9-7a73-6902-f51a-000000002e00}2264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:34:59.815{8223a6b9-7a73-6902-f61a-000000002e00}9572C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:02.813{8223a6b9-7a73-6902-f71a-000000002e00}15748C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:04.815{8223a6b9-7a78-6902-f81a-000000002e00}14380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:04.818{8223a6b9-7a78-6902-f91a-000000002e00}15572C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:07.806{8223a6b9-7a78-6902-fa1a-000000002e00}7092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:09.821{8223a6b9-7a7d-6902-fb1a-000000002e00}13416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:09.828{8223a6b9-7a7d-6902-fc1a-000000002e00}14348C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:12.815{8223a6b9-7a7d-6902-fd1a-000000002e00}15708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:14.769{8223a6b9-7a82-6902-fe1a-000000002e00}6052C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:14.779{8223a6b9-7a82-6902-ff1a-000000002e00}14820C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:17.769{8223a6b9-7a82-6902-001b-000000002e00}13336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:19.822{8223a6b9-7a87-6902-011b-000000002e00}4740C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:19.827{8223a6b9-7a87-6902-021b-000000002e00}7332C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:22.840{8223a6b9-7a87-6902-031b-000000002e00}13188C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:24.621{8223a6b9-75cf-6902-a414-000000002e00}5048C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:24.812{8223a6b9-7a8c-6902-041b-000000002e00}15144C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:24.827{8223a6b9-7a8c-6902-051b-000000002e00}14576C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:27.833{8223a6b9-7a8c-6902-061b-000000002e00}16032C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:29.777{8223a6b9-7a91-6902-071b-000000002e00}7472C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:29.783{8223a6b9-7a91-6902-081b-000000002e00}15480C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:32.788{8223a6b9-7a91-6902-091b-000000002e00}15052C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:34.805{8223a6b9-7a96-6902-0a1b-000000002e00}2260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:34.822{8223a6b9-7a96-6902-0b1b-000000002e00}14932C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:37.812{8223a6b9-7a96-6902-0c1b-000000002e00}10860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:39.814{8223a6b9-7a9b-6902-0d1b-000000002e00}14740C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:39.825{8223a6b9-7a9b-6902-0e1b-000000002e00}12848C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:42.882{8223a6b9-7a9b-6902-0f1b-000000002e00}15080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:44.806{8223a6b9-7aa0-6902-101b-000000002e00}16308C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:44.812{8223a6b9-7aa0-6902-111b-000000002e00}15824C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:47.796{8223a6b9-7aa0-6902-121b-000000002e00}10768C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:49.800{8223a6b9-7aa5-6902-131b-000000002e00}13368C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:49.805{8223a6b9-7aa5-6902-141b-000000002e00}4712C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:52.800{8223a6b9-7aa5-6902-151b-000000002e00}16296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:54.701{8223a6b9-79cf-6902-8c1a-000000002e00}11864C:\Windows\System32\SearchFilterHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:54.765{8223a6b9-7aaa-6902-161b-000000002e00}15108C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:54.769{8223a6b9-7aaa-6902-171b-000000002e00}10112C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:57.782{8223a6b9-7aaa-6902-181b-000000002e00}10760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:59.758{8223a6b9-7aaf-6902-191b-000000002e00}16304C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:35:59.761{8223a6b9-7aaf-6902-1a1b-000000002e00}280C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:02.747{8223a6b9-7aaf-6902-1b1b-000000002e00}9960C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:04.761{8223a6b9-7ab4-6902-1c1b-000000002e00}15444C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:04.774{8223a6b9-7ab4-6902-1d1b-000000002e00}15616C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:05.089{8223a6b9-79cf-6902-8b1a-000000002e00}14448C:\Windows\System32\SearchProtocolHost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:07.788{8223a6b9-7ab4-6902-1e1b-000000002e00}3000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:09.770{8223a6b9-7ab9-6902-1f1b-000000002e00}15636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:09.775{8223a6b9-7ab9-6902-201b-000000002e00}5992C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:12.833{8223a6b9-7ab9-6902-211b-000000002e00}16132C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:14.783{8223a6b9-7abe-6902-221b-000000002e00}1732C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:14.789{8223a6b9-7abe-6902-231b-000000002e00}2844C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:17.828{8223a6b9-7abe-6902-241b-000000002e00}12872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:19.761{8223a6b9-7ac3-6902-251b-000000002e00}15556C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:19.764{8223a6b9-7ac3-6902-261b-000000002e00}14892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:22.755{8223a6b9-7ac3-6902-271b-000000002e00}504C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:24.780{8223a6b9-7ac8-6902-281b-000000002e00}11212C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:24.786{8223a6b9-7ac8-6902-291b-000000002e00}5116C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:26.473{8223a6b9-7ac9-6902-2c1b-000000002e00}7092C:\Windows\System32\slui.exesoc101win11\Administrator +534500x800000000000000029213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:26.504{8223a6b9-7ac9-6902-2b1b-000000002e00}6560C:\Windows\System32\slui.exeNT AUTHORITY\NETWORK SERVICE +534500x800000000000000029214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:27.794{8223a6b9-7ac8-6902-2a1b-000000002e00}15748C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:29.846{8223a6b9-7acd-6902-2d1b-000000002e00}11040C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:29.857{8223a6b9-7acd-6902-2e1b-000000002e00}15708C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:32.839{8223a6b9-7acd-6902-2f1b-000000002e00}14172C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:34.769{8223a6b9-7ad2-6902-301b-000000002e00}14988C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:34.779{8223a6b9-7ad2-6902-311b-000000002e00}15056C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:37.795{8223a6b9-7ad2-6902-321b-000000002e00}13632C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:39.764{8223a6b9-7ad7-6902-331b-000000002e00}13612C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:39.770{8223a6b9-7ad7-6902-341b-000000002e00}13348C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:42.773{8223a6b9-7ad7-6902-351b-000000002e00}1080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:44.771{8223a6b9-7adc-6902-361b-000000002e00}14876C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:44.780{8223a6b9-7adc-6902-371b-000000002e00}7008C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:47.777{8223a6b9-7adc-6902-381b-000000002e00}1720C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:49.771{8223a6b9-7ae1-6902-391b-000000002e00}5936C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:49.780{8223a6b9-7ae1-6902-3a1b-000000002e00}8644C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:52.779{8223a6b9-7ae1-6902-3b1b-000000002e00}10852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:54.778{8223a6b9-7ae6-6902-3d1b-000000002e00}15112C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:54.783{8223a6b9-7ae6-6902-3e1b-000000002e00}15296C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:57.794{8223a6b9-7ae6-6902-3f1b-000000002e00}12200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:59.793{8223a6b9-7aeb-6902-401b-000000002e00}14932C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:36:59.807{8223a6b9-7aeb-6902-411b-000000002e00}13868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:02.797{8223a6b9-7aeb-6902-421b-000000002e00}9236C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:04.828{8223a6b9-7af0-6902-431b-000000002e00}15600C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:04.831{8223a6b9-7af0-6902-441b-000000002e00}15080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:07.826{8223a6b9-7af0-6902-451b-000000002e00}9888C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:09.755{8223a6b9-7af5-6902-461b-000000002e00}16096C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:09.759{8223a6b9-7af5-6902-471b-000000002e00}7132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:12.751{8223a6b9-7af5-6902-481b-000000002e00}11904C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:14.761{8223a6b9-7afa-6902-491b-000000002e00}15500C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:14.765{8223a6b9-7afa-6902-4a1b-000000002e00}13120C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:17.766{8223a6b9-7afa-6902-4b1b-000000002e00}16332C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:19.790{8223a6b9-7aff-6902-4c1b-000000002e00}3280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:19.793{8223a6b9-7aff-6902-4d1b-000000002e00}2596C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:22.804{8223a6b9-7aff-6902-4e1b-000000002e00}14320C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:24.816{8223a6b9-7b04-6902-4f1b-000000002e00}11524C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:24.820{8223a6b9-7b04-6902-501b-000000002e00}13372C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:26.890{8223a6b9-79c3-6902-801a-000000002e00}5420C:\Windows\System32\audiodg.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000029251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:27.831{8223a6b9-7b04-6902-511b-000000002e00}12380C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:29.795{8223a6b9-7b09-6902-521b-000000002e00}16140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:29.802{8223a6b9-7b09-6902-531b-000000002e00}2912C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:32.796{8223a6b9-7b09-6902-541b-000000002e00}13948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:34.773{8223a6b9-7b0e-6902-551b-000000002e00}16132C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:34.780{8223a6b9-7b0e-6902-561b-000000002e00}16124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:37.761{8223a6b9-7b0e-6902-571b-000000002e00}15596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:39.792{8223a6b9-7b13-6902-581b-000000002e00}15260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:39.795{8223a6b9-7b13-6902-591b-000000002e00}8276C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:42.786{8223a6b9-7b13-6902-5a1b-000000002e00}15964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:44.765{8223a6b9-7b18-6902-5b1b-000000002e00}16316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:44.768{8223a6b9-7b18-6902-5c1b-000000002e00}15792C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:47.770{8223a6b9-7b18-6902-5d1b-000000002e00}14432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:49.756{8223a6b9-7b1d-6902-5e1b-000000002e00}13732C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:49.759{8223a6b9-7b1d-6902-5f1b-000000002e00}8100C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:52.760{8223a6b9-7b1d-6902-601b-000000002e00}15336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:54.797{8223a6b9-7b22-6902-611b-000000002e00}13896C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:54.801{8223a6b9-7b22-6902-621b-000000002e00}10472C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:57.791{8223a6b9-7b22-6902-631b-000000002e00}15320C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:59.768{8223a6b9-7b27-6902-641b-000000002e00}2956C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:37:59.772{8223a6b9-7b27-6902-651b-000000002e00}14360C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:02.771{8223a6b9-7b27-6902-661b-000000002e00}11164C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:04.779{8223a6b9-7b2c-6902-671b-000000002e00}16220C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:04.784{8223a6b9-7b2c-6902-681b-000000002e00}15460C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:07.790{8223a6b9-7b2c-6902-691b-000000002e00}13916C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:09.796{8223a6b9-7b31-6902-6a1b-000000002e00}13984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:09.800{8223a6b9-7b31-6902-6b1b-000000002e00}5068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:12.841{8223a6b9-7b31-6902-6c1b-000000002e00}14988C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:14.789{8223a6b9-7b36-6902-6d1b-000000002e00}5196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:14.793{8223a6b9-7b36-6902-6e1b-000000002e00}2100C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:17.778{8223a6b9-7b36-6902-6f1b-000000002e00}13472C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:19.775{8223a6b9-7b3b-6902-701b-000000002e00}6992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:19.780{8223a6b9-7b3b-6902-711b-000000002e00}10296C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:22.775{8223a6b9-7b3b-6902-721b-000000002e00}10836C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:24.792{8223a6b9-7b40-6902-731b-000000002e00}8120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:24.797{8223a6b9-7b40-6902-741b-000000002e00}1068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:27.792{8223a6b9-7b40-6902-751b-000000002e00}15356C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:29.958{8223a6b9-7b45-6902-761b-000000002e00}14452C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:29.963{8223a6b9-7b45-6902-771b-000000002e00}15060C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:32.961{8223a6b9-7b45-6902-781b-000000002e00}2080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:34.857{8223a6b9-7b4a-6902-791b-000000002e00}10000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:34.860{8223a6b9-7b4a-6902-7a1b-000000002e00}14672C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:37.875{8223a6b9-7b4a-6902-7b1b-000000002e00}11200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:40.013{8223a6b9-7b4f-6902-7c1b-000000002e00}14632C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:40.032{8223a6b9-7b4f-6902-7d1b-000000002e00}14628C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:43.013{8223a6b9-7b4f-6902-7e1b-000000002e00}13892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:44.788{8223a6b9-7b54-6902-7f1b-000000002e00}13988C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:44.792{8223a6b9-7b54-6902-801b-000000002e00}7132C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:47.803{8223a6b9-7b54-6902-811b-000000002e00}9316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:49.813{8223a6b9-7b59-6902-821b-000000002e00}2540C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:49.818{8223a6b9-7b59-6902-831b-000000002e00}15888C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:52.828{8223a6b9-7b59-6902-841b-000000002e00}15976C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:54.848{8223a6b9-7b5e-6902-851b-000000002e00}14388C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:54.854{8223a6b9-7b5e-6902-861b-000000002e00}13488C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:57.856{8223a6b9-7b5e-6902-871b-000000002e00}10396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:59.817{8223a6b9-7b63-6902-881b-000000002e00}5476C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:38:59.821{8223a6b9-7b63-6902-891b-000000002e00}12984C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:02.811{8223a6b9-7b63-6902-8a1b-000000002e00}6968C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:04.777{8223a6b9-7b68-6902-8b1b-000000002e00}976C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:04.782{8223a6b9-7b68-6902-8c1b-000000002e00}16228C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:07.771{8223a6b9-7b68-6902-8d1b-000000002e00}15484C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:09.785{8223a6b9-7b6d-6902-8e1b-000000002e00}13592C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:09.791{8223a6b9-7b6d-6902-8f1b-000000002e00}9300C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:12.796{8223a6b9-7b6d-6902-901b-000000002e00}4428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:14.842{8223a6b9-7b72-6902-911b-000000002e00}16124C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:14.850{8223a6b9-7b72-6902-921b-000000002e00}14676C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:17.880{8223a6b9-7b72-6902-931b-000000002e00}14404C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:19.887{8223a6b9-7b77-6902-941b-000000002e00}14364C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:19.893{8223a6b9-7b77-6902-951b-000000002e00}14376C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:22.929{8223a6b9-7b77-6902-961b-000000002e00}1996C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:24.973{8223a6b9-7b7c-6902-971b-000000002e00}14080C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:24.980{8223a6b9-7b7c-6902-981b-000000002e00}14716C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:27.985{8223a6b9-7b7c-6902-991b-000000002e00}6736C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:29.954{8223a6b9-7b81-6902-9a1b-000000002e00}15456C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:29.961{8223a6b9-7b81-6902-9b1b-000000002e00}14608C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:32.962{8223a6b9-7b81-6902-9c1b-000000002e00}10416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:34.836{8223a6b9-7b86-6902-9d1b-000000002e00}13428C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:34.839{8223a6b9-7b86-6902-9e1b-000000002e00}11164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:37.835{8223a6b9-7b86-6902-9f1b-000000002e00}9376C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:39.824{8223a6b9-7b8b-6902-a01b-000000002e00}15820C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:39.829{8223a6b9-7b8b-6902-a11b-000000002e00}14124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:42.828{8223a6b9-7b8b-6902-a21b-000000002e00}16288C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:44.821{8223a6b9-7b90-6902-a31b-000000002e00}9356C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:44.831{8223a6b9-7b90-6902-a41b-000000002e00}8164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:47.832{8223a6b9-7b90-6902-a51b-000000002e00}15932C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:49.951{8223a6b9-7b95-6902-a61b-000000002e00}14764C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:49.960{8223a6b9-7b95-6902-a71b-000000002e00}11416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:52.950{8223a6b9-7b95-6902-a81b-000000002e00}14128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:54.787{8223a6b9-7b9a-6902-a91b-000000002e00}1508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:54.793{8223a6b9-7b9a-6902-aa1b-000000002e00}7520C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:57.781{8223a6b9-7b9a-6902-ab1b-000000002e00}10252C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:59.746{8223a6b9-7b9f-6902-ac1b-000000002e00}9728C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:39:59.751{8223a6b9-7b9f-6902-ad1b-000000002e00}14368C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:02.767{8223a6b9-7b9f-6902-ae1b-000000002e00}1488C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:04.917{8223a6b9-7ba4-6902-af1b-000000002e00}15344C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:04.921{8223a6b9-7ba4-6902-b01b-000000002e00}10904C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:07.934{8223a6b9-7ba4-6902-b11b-000000002e00}2080C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:09.884{8223a6b9-7ba9-6902-b21b-000000002e00}15816C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:09.893{8223a6b9-7ba9-6902-b31b-000000002e00}13332C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:12.886{8223a6b9-7ba9-6902-b41b-000000002e00}13868C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:14.792{8223a6b9-7bae-6902-b51b-000000002e00}1964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:14.798{8223a6b9-7bae-6902-b61b-000000002e00}15248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:17.793{8223a6b9-7bae-6902-b71b-000000002e00}16308C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:19.806{8223a6b9-7bb3-6902-b81b-000000002e00}14628C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029355Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:19.810{8223a6b9-7bb3-6902-b91b-000000002e00}1476C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029356Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:22.804{8223a6b9-7bb3-6902-ba1b-000000002e00}14768C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029357Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:24.822{8223a6b9-7bb8-6902-bb1b-000000002e00}784C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029358Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:24.826{8223a6b9-7bb8-6902-bc1b-000000002e00}1572C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029359Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:27.816{8223a6b9-7bb8-6902-bd1b-000000002e00}13684C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029360Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:29.764{8223a6b9-7bbd-6902-be1b-000000002e00}13768C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029361Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:29.767{8223a6b9-7bbd-6902-bf1b-000000002e00}16096C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029362Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:32.757{8223a6b9-7bbd-6902-c01b-000000002e00}14884C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029363Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:34.769{8223a6b9-7bc2-6902-c11b-000000002e00}6200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029364Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:34.777{8223a6b9-7bc2-6902-c21b-000000002e00}13116C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029365Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:37.770{8223a6b9-7bc2-6902-c31b-000000002e00}12984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029366Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:39.816{8223a6b9-7bc7-6902-c41b-000000002e00}14508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029367Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:39.820{8223a6b9-7bc7-6902-c51b-000000002e00}15736C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029368Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:42.810{8223a6b9-7bc7-6902-c61b-000000002e00}13504C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029369Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:44.770{8223a6b9-7bcc-6902-c71b-000000002e00}13536C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029370Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:44.774{8223a6b9-7bcc-6902-c81b-000000002e00}13948C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029371Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:47.767{8223a6b9-7bcc-6902-c91b-000000002e00}14024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029372Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:49.789{8223a6b9-7bd1-6902-ca1b-000000002e00}13176C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029373Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:49.793{8223a6b9-7bd1-6902-cb1b-000000002e00}15380C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029374Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:52.776{8223a6b9-7bd1-6902-cc1b-000000002e00}14808C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029375Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:54.795{8223a6b9-7bd6-6902-cd1b-000000002e00}10520C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029376Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:54.797{8223a6b9-7bd6-6902-ce1b-000000002e00}13944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029377Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:57.802{8223a6b9-7bd6-6902-cf1b-000000002e00}12804C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029378Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:59.831{8223a6b9-7bdb-6902-d01b-000000002e00}10496C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029379Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:40:59.845{8223a6b9-7bdb-6902-d11b-000000002e00}15104C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029380Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:02.853{8223a6b9-7bdb-6902-d21b-000000002e00}15980C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029381Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:04.765{8223a6b9-7be0-6902-d31b-000000002e00}14620C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029382Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:04.771{8223a6b9-7be0-6902-d41b-000000002e00}15296C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029383Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:07.768{8223a6b9-7be0-6902-d51b-000000002e00}15212C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029384Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:09.814{8223a6b9-7be5-6902-d61b-000000002e00}2988C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029385Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:09.819{8223a6b9-7be5-6902-d71b-000000002e00}15372C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029386Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:12.834{8223a6b9-7be5-6902-d81b-000000002e00}14360C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029387Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:14.782{8223a6b9-7bea-6902-d91b-000000002e00}4568C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029388Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:14.791{8223a6b9-7bea-6902-da1b-000000002e00}10204C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029389Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:17.790{8223a6b9-7bea-6902-db1b-000000002e00}15228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029390Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:19.834{8223a6b9-7bef-6902-dc1b-000000002e00}14724C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029391Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:19.837{8223a6b9-7bef-6902-dd1b-000000002e00}15780C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029392Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:21.893{8223a6b9-7bf1-6902-df1b-000000002e00}9024C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000029393Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:22.027{8223a6b9-7bf1-6902-e11b-000000002e00}12720C:\Windows\System32\SecurityHealth\10.0.29429.1000-0\SecurityHealthHost.exesoc101win11\Administrator +534500x800000000000000029394Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:22.855{8223a6b9-7bef-6902-de1b-000000002e00}13644C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029395Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:24.779{8223a6b9-7bf4-6902-e21b-000000002e00}9892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029396Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:24.782{8223a6b9-7bf4-6902-e31b-000000002e00}15784C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029397Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:26.042{8223a6b9-799c-6902-5e1a-000000002e00}2560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029398Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:27.783{8223a6b9-7bf4-6902-e41b-000000002e00}14420C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029399Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:29.780{8223a6b9-7bf9-6902-e51b-000000002e00}16060C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029400Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:29.789{8223a6b9-7bf9-6902-e61b-000000002e00}3064C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029401Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:32.784{8223a6b9-7bf9-6902-e71b-000000002e00}15544C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029402Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:34.776{8223a6b9-7bfe-6902-e81b-000000002e00}15312C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029403Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:34.779{8223a6b9-7bfe-6902-e91b-000000002e00}5744C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029404Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:37.779{8223a6b9-7bfe-6902-ea1b-000000002e00}10904C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029405Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:39.762{8223a6b9-7c03-6902-eb1b-000000002e00}9624C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029406Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:39.770{8223a6b9-7c03-6902-ec1b-000000002e00}16168C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029407Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:42.772{8223a6b9-7c03-6902-ed1b-000000002e00}14728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029408Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:44.774{8223a6b9-7c08-6902-ee1b-000000002e00}1964C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029409Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:44.784{8223a6b9-7c08-6902-ef1b-000000002e00}868C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029410Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:47.788{8223a6b9-7c08-6902-f01b-000000002e00}16308C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029411Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:49.801{8223a6b9-7c0d-6902-f11b-000000002e00}1216C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029412Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:49.812{8223a6b9-7c0d-6902-f21b-000000002e00}13940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029413Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:52.862{8223a6b9-7c0d-6902-f31b-000000002e00}11456C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029414Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:54.760{8223a6b9-7c12-6902-f41b-000000002e00}13092C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029415Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:54.767{8223a6b9-7c12-6902-f51b-000000002e00}2028C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029416Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:57.759{8223a6b9-7c12-6902-f61b-000000002e00}16224C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029417Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:59.771{8223a6b9-7c17-6902-f71b-000000002e00}6036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029418Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:41:59.778{8223a6b9-7c17-6902-f81b-000000002e00}7316C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029419Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:02.772{8223a6b9-7c17-6902-f91b-000000002e00}16096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029420Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:04.760{8223a6b9-7c1c-6902-fa1b-000000002e00}13656C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029421Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:04.768{8223a6b9-7c1c-6902-fb1b-000000002e00}15792C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029422Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:07.753{8223a6b9-7c1c-6902-fc1b-000000002e00}10560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029423Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:09.833{8223a6b9-7c21-6902-fd1b-000000002e00}1240C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029424Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:09.841{8223a6b9-7c21-6902-fe1b-000000002e00}6052C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029425Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:12.839{8223a6b9-7c21-6902-ff1b-000000002e00}16196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029426Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:14.820{8223a6b9-7c26-6902-001c-000000002e00}8148C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029427Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:14.828{8223a6b9-7c26-6902-011c-000000002e00}15276C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029428Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:17.818{8223a6b9-7c26-6902-021c-000000002e00}10092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029429Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:19.445{8223a6b9-7731-6902-4d1a-000000002e00}15948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029430Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:19.802{8223a6b9-7c2b-6902-031c-000000002e00}15864C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029431Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:19.810{8223a6b9-7c2b-6902-041c-000000002e00}14116C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029432Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:22.853{8223a6b9-7c2b-6902-051c-000000002e00}2224C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029433Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:24.773{8223a6b9-7c30-6902-061c-000000002e00}2844C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029434Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:24.780{8223a6b9-7c30-6902-071c-000000002e00}14224C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029435Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:27.787{8223a6b9-7c30-6902-081c-000000002e00}13880C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029436Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:29.764{8223a6b9-7c35-6902-091c-000000002e00}15208C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029437Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:29.772{8223a6b9-7c35-6902-0a1c-000000002e00}16056C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029438Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:32.770{8223a6b9-7c35-6902-0b1c-000000002e00}1232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029439Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:34.770{8223a6b9-7c3a-6902-0c1c-000000002e00}10496C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029440Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:34.783{8223a6b9-7c3a-6902-0d1c-000000002e00}8152C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029441Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:37.771{8223a6b9-7c3a-6902-0e1c-000000002e00}16072C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029442Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:39.756{8223a6b9-7c3f-6902-0f1c-000000002e00}7180C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029443Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:39.762{8223a6b9-7c3f-6902-101c-000000002e00}10580C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029444Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:42.778{8223a6b9-7c3f-6902-111c-000000002e00}13896C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029445Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:44.854{8223a6b9-7c44-6902-121c-000000002e00}16268C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029446Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:44.866{8223a6b9-7c44-6902-131c-000000002e00}1552C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029447Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:47.848{8223a6b9-7c44-6902-141c-000000002e00}14580C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029448Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:49.800{8223a6b9-7c49-6902-151c-000000002e00}15288C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029449Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:49.805{8223a6b9-7c49-6902-161c-000000002e00}14892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029450Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:52.799{8223a6b9-7c49-6902-171c-000000002e00}14700C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029451Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:54.767{8223a6b9-7c4e-6902-181c-000000002e00}15232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029452Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:54.773{8223a6b9-7c4e-6902-191c-000000002e00}15780C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029453Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:57.769{8223a6b9-7c4e-6902-1a1c-000000002e00}15708C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029454Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:59.771{8223a6b9-7c53-6902-1b1c-000000002e00}14532C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029455Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:42:59.779{8223a6b9-7c53-6902-1c1c-000000002e00}11972C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029456Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:02.833{8223a6b9-7c53-6902-1d1c-000000002e00}10588C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029457Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:04.770{8223a6b9-7c58-6902-1e1c-000000002e00}15956C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029458Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:04.773{8223a6b9-7c58-6902-1f1c-000000002e00}16332C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029459Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:07.761{8223a6b9-7c58-6902-201c-000000002e00}1592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029460Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:09.757{8223a6b9-7c5d-6902-211c-000000002e00}14344C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029461Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:09.768{8223a6b9-7c5d-6902-221c-000000002e00}15536C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029462Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:12.768{8223a6b9-7c5d-6902-231c-000000002e00}15844C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029463Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:14.787{8223a6b9-7c62-6902-241c-000000002e00}15940C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029464Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:14.792{8223a6b9-7c62-6902-251c-000000002e00}1068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029465Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:17.798{8223a6b9-7c62-6902-261c-000000002e00}4432C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029466Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:19.849{8223a6b9-7c67-6902-271c-000000002e00}13852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029467Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:19.857{8223a6b9-7c67-6902-281c-000000002e00}9404C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029468Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:22.855{8223a6b9-7c67-6902-291c-000000002e00}14000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029469Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:24.771{8223a6b9-7c6c-6902-2a1c-000000002e00}14948C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029470Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:24.780{8223a6b9-7c6c-6902-2b1c-000000002e00}16328C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029471Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:27.789{8223a6b9-7c6c-6902-2c1c-000000002e00}16308C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029472Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:29.799{8223a6b9-7c71-6902-2d1c-000000002e00}14092C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029473Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:29.803{8223a6b9-7c71-6902-2e1c-000000002e00}11880C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029474Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:32.804{8223a6b9-7c71-6902-2f1c-000000002e00}15936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029475Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:34.777{8223a6b9-7c76-6902-301c-000000002e00}15040C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029476Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:34.783{8223a6b9-7c76-6902-311c-000000002e00}15384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029477Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:37.782{8223a6b9-7c76-6902-321c-000000002e00}14760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029478Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:39.814{8223a6b9-7c7b-6902-341c-000000002e00}14348C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029479Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:39.819{8223a6b9-7c7b-6902-351c-000000002e00}13712C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029480Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:42.812{8223a6b9-7c7b-6902-361c-000000002e00}10560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029481Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:44.816{8223a6b9-7c80-6902-371c-000000002e00}16228C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029482Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:44.826{8223a6b9-7c80-6902-381c-000000002e00}15736C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029483Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:47.813{8223a6b9-7c80-6902-391c-000000002e00}15036C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029484Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:49.532{8223a6b9-7c7a-6902-331c-000000002e00}1336C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exesoc101win11\Administrator +534500x800000000000000029485Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:49.852{8223a6b9-7c85-6902-3a1c-000000002e00}16164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029486Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:49.855{8223a6b9-7c85-6902-3b1c-000000002e00}1816C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029487Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:52.908{8223a6b9-7c85-6902-3c1c-000000002e00}11852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029488Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:54.798{8223a6b9-7c8a-6902-3d1c-000000002e00}14252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029489Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:54.806{8223a6b9-7c8a-6902-3e1c-000000002e00}12856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029490Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:57.796{8223a6b9-7c8a-6902-3f1c-000000002e00}5760C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029491Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:59.765{8223a6b9-7c8f-6902-401c-000000002e00}12800C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029492Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:43:59.770{8223a6b9-7c8f-6902-411c-000000002e00}16056C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029493Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:02.756{8223a6b9-7c8f-6902-421c-000000002e00}14944C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029494Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:04.765{8223a6b9-7c94-6902-431c-000000002e00}10496C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029495Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:04.771{8223a6b9-7c94-6902-441c-000000002e00}4456C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029496Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:07.758{8223a6b9-7c94-6902-451c-000000002e00}13936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029497Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:09.826{8223a6b9-7c99-6902-461c-000000002e00}11212C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029498Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:09.830{8223a6b9-7c99-6902-471c-000000002e00}14612C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029499Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:12.839{8223a6b9-7c99-6902-481c-000000002e00}15944C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029500Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:14.781{8223a6b9-7c9e-6902-491c-000000002e00}12944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029501Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:14.788{8223a6b9-7c9e-6902-4a1c-000000002e00}12752C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029502Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:17.794{8223a6b9-7c9e-6902-4b1c-000000002e00}8196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029503Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:19.805{8223a6b9-7ca3-6902-4c1c-000000002e00}10028C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029504Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:19.812{8223a6b9-7ca3-6902-4d1c-000000002e00}14892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029505Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:22.817{8223a6b9-7ca3-6902-4e1c-000000002e00}15460C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029506Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:24.635{8223a6b9-7a4a-6902-dc1a-000000002e00}6340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029507Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:24.760{8223a6b9-7ca8-6902-4f1c-000000002e00}16300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029508Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:24.771{8223a6b9-7ca8-6902-501c-000000002e00}13624C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029509Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:27.759{8223a6b9-7ca8-6902-511c-000000002e00}3596C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029510Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:29.837{8223a6b9-7cad-6902-521c-000000002e00}13572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029511Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:29.845{8223a6b9-7cad-6902-531c-000000002e00}14732C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029512Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:32.838{8223a6b9-7cad-6902-541c-000000002e00}620C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029513Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:34.825{8223a6b9-7cb2-6902-551c-000000002e00}14344C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029514Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:34.833{8223a6b9-7cb2-6902-561c-000000002e00}12948C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029515Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:37.862{8223a6b9-7cb2-6902-571c-000000002e00}10112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029516Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:39.822{8223a6b9-7cb7-6902-581c-000000002e00}15648C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029517Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:39.828{8223a6b9-7cb7-6902-591c-000000002e00}6372C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029518Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:42.867{8223a6b9-7cb7-6902-5a1c-000000002e00}13328C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029519Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:44.772{8223a6b9-7cbc-6902-5b1c-000000002e00}10852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029520Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:44.776{8223a6b9-7cbc-6902-5c1c-000000002e00}13620C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029521Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:47.762{8223a6b9-7cbc-6902-5d1c-000000002e00}7508C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029522Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:49.754{8223a6b9-7cc1-6902-5e1c-000000002e00}14072C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029523Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:49.756{8223a6b9-7cc1-6902-5f1c-000000002e00}5744C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029524Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:52.762{8223a6b9-7cc1-6902-601c-000000002e00}10692C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029525Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:54.773{8223a6b9-7cc6-6902-611c-000000002e00}14120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029526Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:54.781{8223a6b9-7cc6-6902-621c-000000002e00}12920C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029527Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:57.782{8223a6b9-7cc6-6902-631c-000000002e00}3032C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029528Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:59.823{8223a6b9-7ccb-6902-641c-000000002e00}4744C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029529Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:44:59.834{8223a6b9-7ccb-6902-651c-000000002e00}15448C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029530Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:02.835{8223a6b9-7ccb-6902-661c-000000002e00}15620C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029531Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:04.863{8223a6b9-7cd0-6902-671c-000000002e00}11680C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029532Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:04.874{8223a6b9-7cd0-6902-681c-000000002e00}14416C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029533Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:07.871{8223a6b9-7cd0-6902-691c-000000002e00}3004C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029534Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:09.944{8223a6b9-7cd5-6902-6a1c-000000002e00}6004C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029535Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:09.958{8223a6b9-7cd5-6902-6b1c-000000002e00}10256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029536Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:12.950{8223a6b9-7cd5-6902-6c1c-000000002e00}15696C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029537Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:14.870{8223a6b9-7cda-6902-701c-000000002e00}5064C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029538Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:14.880{8223a6b9-7cda-6902-711c-000000002e00}5428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029539Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:14.965{8223a6b9-7cda-6902-731c-000000002e00}13484C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000029540Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:15.151{8223a6b9-7cda-6902-6d1c-000000002e00}9940C:\Windows\System32\UsoClient.exeNT AUTHORITY\SYSTEM +534500x800000000000000029541Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:17.882{8223a6b9-7cda-6902-721c-000000002e00}16152C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029542Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:19.516{8223a6b9-7cde-6902-771c-000000002e00}14748C:\Windows\System32\UIEOrchestrator.exeNT AUTHORITY\SYSTEM +534500x800000000000000029543Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:19.835{8223a6b9-7cdf-6902-781c-000000002e00}1720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029544Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:19.840{8223a6b9-7cdf-6902-791c-000000002e00}13316C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029545Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:20.329{8223a6b9-724f-6902-e211-000000002e00}16116C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exesoc101win11\Administrator +534500x800000000000000029546Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:22.834{8223a6b9-7cdf-6902-7a1c-000000002e00}14196C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029547Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:24.821{8223a6b9-7ce4-6902-7c1c-000000002e00}14992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029548Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:24.830{8223a6b9-7ce4-6902-7d1c-000000002e00}14672C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029549Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:27.818{8223a6b9-7ce4-6902-7e1c-000000002e00}6036C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029550Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:29.777{8223a6b9-7ce9-6902-7f1c-000000002e00}16272C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029551Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:29.783{8223a6b9-7ce9-6902-801c-000000002e00}15944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029552Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:32.763{8223a6b9-7ce9-6902-811c-000000002e00}13040C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029553Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:34.864{8223a6b9-7cee-6902-821c-000000002e00}8196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029554Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:34.866{8223a6b9-7cee-6902-831c-000000002e00}5328C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029555Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:37.870{8223a6b9-7cee-6902-841c-000000002e00}16260C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029556Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:39.769{8223a6b9-7cf3-6902-851c-000000002e00}15892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029557Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:39.774{8223a6b9-7cf3-6902-861c-000000002e00}15492C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029558Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:42.782{8223a6b9-7cf3-6902-871c-000000002e00}12924C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029559Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:44.759{8223a6b9-7cf8-6902-881c-000000002e00}11636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029560Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:44.765{8223a6b9-7cf8-6902-891c-000000002e00}14908C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029561Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:47.762{8223a6b9-7cf8-6902-8a1c-000000002e00}16200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029562Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:49.771{8223a6b9-7cfd-6902-8b1c-000000002e00}3752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029563Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:49.775{8223a6b9-7cfd-6902-8c1c-000000002e00}6228C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029564Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:52.826{8223a6b9-7cfd-6902-8d1c-000000002e00}2292C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029565Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:54.774{8223a6b9-7d02-6902-8e1c-000000002e00}15132C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029566Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:54.779{8223a6b9-7d02-6902-8f1c-000000002e00}1080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029567Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:54.984{8223a6b9-7cda-6902-741c-000000002e00}15484C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000029568Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:57.843{8223a6b9-7d02-6902-901c-000000002e00}15176C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029569Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:59.761{8223a6b9-7d07-6902-911c-000000002e00}1992C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029570Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:45:59.764{8223a6b9-7d07-6902-921c-000000002e00}13964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029571Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:02.756{8223a6b9-7d07-6902-931c-000000002e00}12948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029572Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:04.804{8223a6b9-7d0c-6902-941c-000000002e00}9840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029573Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:04.808{8223a6b9-7d0c-6902-951c-000000002e00}7604C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029574Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:07.812{8223a6b9-7d0c-6902-961c-000000002e00}5624C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029575Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:09.765{8223a6b9-7d11-6902-971c-000000002e00}15388C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029576Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:09.775{8223a6b9-7d11-6902-981c-000000002e00}5992C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029577Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:12.764{8223a6b9-7d11-6902-991c-000000002e00}14936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029578Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:14.780{8223a6b9-7d16-6902-9a1c-000000002e00}5804C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029579Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:14.787{8223a6b9-7d16-6902-9b1c-000000002e00}8552C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029580Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:15.394{8223a6b9-7cda-6902-6f1c-000000002e00}15340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029581Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:17.773{8223a6b9-7d16-6902-9c1c-000000002e00}8240C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029582Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:19.764{8223a6b9-7d1b-6902-9d1c-000000002e00}12380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029583Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:19.769{8223a6b9-7d1b-6902-9e1c-000000002e00}14860C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029584Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:21.004{8223a6b9-7cda-6902-6e1c-000000002e00}4200C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000029585Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:22.763{8223a6b9-7d1b-6902-9f1c-000000002e00}12200C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029586Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:22.975{8223a6b9-7bf1-6902-e01b-000000002e00}14776C:\Windows\System32\smartscreen.exesoc101win11\Administrator +534500x800000000000000029587Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:24.786{8223a6b9-7d20-6902-a11c-000000002e00}11680C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029588Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:24.792{8223a6b9-7d20-6902-a21c-000000002e00}12952C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029589Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:27.844{8223a6b9-7d20-6902-a31c-000000002e00}16224C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029590Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:29.776{8223a6b9-7d25-6902-a41c-000000002e00}784C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029591Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:29.786{8223a6b9-7d25-6902-a51c-000000002e00}988C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029592Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:32.785{8223a6b9-7d25-6902-a61c-000000002e00}13156C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029593Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:34.773{8223a6b9-7d2a-6902-a71c-000000002e00}10092C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029594Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:34.777{8223a6b9-7d2a-6902-a81c-000000002e00}15392C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029595Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:37.788{8223a6b9-7d2a-6902-a91c-000000002e00}15948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029596Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:39.823{8223a6b9-7d2f-6902-aa1c-000000002e00}1676C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029597Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:39.829{8223a6b9-7d2f-6902-ab1c-000000002e00}1720C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029598Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:42.838{8223a6b9-7d2f-6902-ac1c-000000002e00}15124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029599Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:44.772{8223a6b9-7d34-6902-ad1c-000000002e00}14244C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029600Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:44.775{8223a6b9-7d34-6902-ae1c-000000002e00}14020C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029601Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:47.779{8223a6b9-7d34-6902-af1c-000000002e00}11516C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029602Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:49.775{8223a6b9-7d39-6902-b01c-000000002e00}3672C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029603Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:49.782{8223a6b9-7d39-6902-b11c-000000002e00}10352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029604Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:52.766{8223a6b9-7d39-6902-b21c-000000002e00}16204C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029605Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:54.816{8223a6b9-7d3e-6902-b31c-000000002e00}16248C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029606Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:54.821{8223a6b9-7d3e-6902-b41c-000000002e00}13936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029607Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:57.839{8223a6b9-7d3e-6902-b51c-000000002e00}11092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029608Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:59.766{8223a6b9-7d43-6902-b61c-000000002e00}392C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029609Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:46:59.771{8223a6b9-7d43-6902-b71c-000000002e00}15876C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029610Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:02.770{8223a6b9-7d43-6902-b81c-000000002e00}1552C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029611Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:04.788{8223a6b9-7d48-6902-b91c-000000002e00}8196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029612Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:04.801{8223a6b9-7d48-6902-ba1c-000000002e00}16172C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029613Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:07.796{8223a6b9-7d48-6902-bb1c-000000002e00}8896C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029614Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:09.765{8223a6b9-7d4d-6902-bc1c-000000002e00}10664C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029615Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:09.768{8223a6b9-7d4d-6902-bd1c-000000002e00}2304C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029616Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:12.750{8223a6b9-7d4d-6902-be1c-000000002e00}14372C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029617Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:14.764{8223a6b9-7d52-6902-bf1c-000000002e00}5300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029618Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:14.772{8223a6b9-7d52-6902-c01c-000000002e00}15732C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029619Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:17.782{8223a6b9-7d52-6902-c11c-000000002e00}16364C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029620Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:17.996{8223a6b9-7cdc-6902-761c-000000002e00}11968C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.6893_none_a4fec8997769ca80\TiWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000029621Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:17.996{8223a6b9-7cdc-6902-751c-000000002e00}14424C:\Windows\servicing\TrustedInstaller.exeNT AUTHORITY\SYSTEM +534500x800000000000000029622Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:19.897{8223a6b9-7d57-6902-c21c-000000002e00}15228C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029623Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:19.910{8223a6b9-7d57-6902-c31c-000000002e00}9332C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029624Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:22.911{8223a6b9-7d57-6902-c41c-000000002e00}12852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029625Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:24.802{8223a6b9-7d5c-6902-c51c-000000002e00}5484C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029626Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:24.811{8223a6b9-7d5c-6902-c61c-000000002e00}13884C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029627Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:27.806{8223a6b9-7d5c-6902-c71c-000000002e00}2892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029628Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:29.775{8223a6b9-7d61-6902-c81c-000000002e00}13752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029629Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:29.784{8223a6b9-7d61-6902-c91c-000000002e00}10468C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029630Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:32.764{8223a6b9-7d61-6902-ca1c-000000002e00}3000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029631Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:34.785{8223a6b9-7d66-6902-cb1c-000000002e00}5780C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029632Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:34.792{8223a6b9-7d66-6902-cc1c-000000002e00}14492C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029633Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:37.787{8223a6b9-7d66-6902-cd1c-000000002e00}5052C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029634Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:39.768{8223a6b9-7d6b-6902-ce1c-000000002e00}2984C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029635Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:39.771{8223a6b9-7d6b-6902-cf1c-000000002e00}1068C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029636Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:42.766{8223a6b9-7d6b-6902-d01c-000000002e00}9564C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029637Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:44.778{8223a6b9-7d70-6902-d11c-000000002e00}1492C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029638Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:44.792{8223a6b9-7d70-6902-d21c-000000002e00}4728C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029639Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:47.799{8223a6b9-7d70-6902-d31c-000000002e00}3384C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029640Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:49.781{8223a6b9-7d75-6902-d41c-000000002e00}14840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029641Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:49.786{8223a6b9-7d75-6902-d51c-000000002e00}14940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029642Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:52.767{8223a6b9-7d75-6902-d61c-000000002e00}3480C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029643Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:54.760{8223a6b9-7d7a-6902-d71c-000000002e00}492C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029644Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:54.768{8223a6b9-7d7a-6902-d81c-000000002e00}15336C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029645Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:57.758{8223a6b9-7d7a-6902-d91c-000000002e00}15324C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029646Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:59.823{8223a6b9-7d7f-6902-da1c-000000002e00}1764C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029647Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:47:59.828{8223a6b9-7d7f-6902-db1c-000000002e00}16092C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029648Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:02.815{8223a6b9-7d7f-6902-dc1c-000000002e00}14712C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029649Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:04.824{8223a6b9-7d84-6902-dd1c-000000002e00}14016C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029650Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:04.829{8223a6b9-7d84-6902-de1c-000000002e00}14584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029651Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:07.831{8223a6b9-7d84-6902-df1c-000000002e00}14220C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029652Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:09.771{8223a6b9-7d89-6902-e01c-000000002e00}15276C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029653Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:09.781{8223a6b9-7d89-6902-e11c-000000002e00}15616C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029654Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:12.770{8223a6b9-7d89-6902-e21c-000000002e00}15488C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029655Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:14.760{8223a6b9-7d8e-6902-e31c-000000002e00}4380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029656Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:14.770{8223a6b9-7d8e-6902-e41c-000000002e00}16376C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029657Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:17.783{8223a6b9-7d8e-6902-e51c-000000002e00}15872C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029658Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:19.766{8223a6b9-7d93-6902-e61c-000000002e00}14120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029659Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:19.770{8223a6b9-7d93-6902-e71c-000000002e00}13452C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029660Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:22.760{8223a6b9-7d93-6902-e81c-000000002e00}11852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029661Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:24.786{8223a6b9-7d98-6902-ea1c-000000002e00}15996C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029662Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:24.789{8223a6b9-7d98-6902-eb1c-000000002e00}2080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029663Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:27.792{8223a6b9-7d98-6902-ec1c-000000002e00}9776C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029664Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:29.772{8223a6b9-7d9d-6902-ed1c-000000002e00}16268C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029665Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:29.780{8223a6b9-7d9d-6902-ee1c-000000002e00}1016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029666Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:32.782{8223a6b9-7d9d-6902-ef1c-000000002e00}16104C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029667Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:34.840{8223a6b9-7da2-6902-f01c-000000002e00}15424C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029668Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:34.846{8223a6b9-7da2-6902-f11c-000000002e00}14912C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029669Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:37.846{8223a6b9-7da2-6902-f21c-000000002e00}15312C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029670Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:39.762{8223a6b9-7da7-6902-f31c-000000002e00}2128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029671Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:39.772{8223a6b9-7da7-6902-f41c-000000002e00}8196C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029672Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:42.766{8223a6b9-7da7-6902-f51c-000000002e00}10028C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029673Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:44.758{8223a6b9-7dac-6902-f61c-000000002e00}13908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029674Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:44.762{8223a6b9-7dac-6902-f71c-000000002e00}12924C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029675Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:47.766{8223a6b9-7dac-6902-f81c-000000002e00}14096C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029676Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:49.757{8223a6b9-7db1-6902-f91c-000000002e00}6572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029677Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:49.770{8223a6b9-7db1-6902-fa1c-000000002e00}15160C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029678Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:52.823{8223a6b9-7db1-6902-fb1c-000000002e00}6680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029679Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:54.763{8223a6b9-7db6-6902-fc1c-000000002e00}13644C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029680Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:54.774{8223a6b9-7db6-6902-fd1c-000000002e00}16124C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029681Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:57.754{8223a6b9-7db6-6902-fe1c-000000002e00}7388C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029682Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:59.757{8223a6b9-7dbb-6902-ff1c-000000002e00}11780C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029683Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:48:59.770{8223a6b9-7dbb-6902-001d-000000002e00}8276C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029684Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:02.782{8223a6b9-7dbb-6902-011d-000000002e00}1592C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029685Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:04.767{8223a6b9-7dc0-6902-021d-000000002e00}15524C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029686Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:04.771{8223a6b9-7dc0-6902-031d-000000002e00}14760C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029687Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:07.764{8223a6b9-7dc0-6902-041d-000000002e00}3604C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029688Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:09.765{8223a6b9-7dc5-6902-051d-000000002e00}13752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029689Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:09.774{8223a6b9-7dc5-6902-061d-000000002e00}11764C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029690Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:12.764{8223a6b9-7dc5-6902-071d-000000002e00}8352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029691Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:14.764{8223a6b9-7dca-6902-081d-000000002e00}3420C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029692Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:14.769{8223a6b9-7dca-6902-091d-000000002e00}5836C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029693Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:17.769{8223a6b9-7dca-6902-0a1d-000000002e00}8296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029694Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:19.762{8223a6b9-7dcf-6902-0b1d-000000002e00}14820C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029695Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:19.770{8223a6b9-7dcf-6902-0c1d-000000002e00}13840C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029696Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:22.769{8223a6b9-7dcf-6902-0d1d-000000002e00}15680C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029697Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:24.758{8223a6b9-7dd4-6902-0e1d-000000002e00}15340C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029698Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:24.768{8223a6b9-7dd4-6902-0f1d-000000002e00}16080C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029699Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:27.772{8223a6b9-7dd4-6902-101d-000000002e00}14744C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029700Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:29.817{8223a6b9-7dd9-6902-111d-000000002e00}13508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029701Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:29.823{8223a6b9-7dd9-6902-121d-000000002e00}15828C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029702Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:32.867{8223a6b9-7dd9-6902-131d-000000002e00}14896C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029703Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:34.777{8223a6b9-7dde-6902-141d-000000002e00}4200C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029704Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:34.781{8223a6b9-7dde-6902-151d-000000002e00}5676C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029705Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:37.763{8223a6b9-7dde-6902-161d-000000002e00}1232C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029706Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:39.800{8223a6b9-7de3-6902-171d-000000002e00}11000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029707Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:39.806{8223a6b9-7de3-6902-181d-000000002e00}10804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029708Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:42.810{8223a6b9-7de3-6902-191d-000000002e00}15980C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029709Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:44.759{8223a6b9-7de8-6902-1a1d-000000002e00}13892C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029710Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:44.763{8223a6b9-7de8-6902-1b1d-000000002e00}14584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029711Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:47.766{8223a6b9-7de8-6902-1c1d-000000002e00}15308C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029712Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:49.755{8223a6b9-7ded-6902-1d1d-000000002e00}13616C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029713Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:49.761{8223a6b9-7ded-6902-1e1d-000000002e00}14176C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029714Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:52.184{8223a6b9-7df0-6902-221d-000000002e00}8204C:\Windows\System32\backgroundTaskHost.exesoc101win11\Administrator +534500x800000000000000029715Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:52.764{8223a6b9-7ded-6902-1f1d-000000002e00}15280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029716Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:54.772{8223a6b9-7df2-6902-241d-000000002e00}11516C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029717Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:54.775{8223a6b9-7df2-6902-251d-000000002e00}14356C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029718Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:57.772{8223a6b9-7df2-6902-261d-000000002e00}16360C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029719Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:59.776{8223a6b9-7df7-6902-271d-000000002e00}14532C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029720Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:49:59.781{8223a6b9-7df7-6902-281d-000000002e00}3672C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029721Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:02.767{8223a6b9-7df7-6902-291d-000000002e00}8088C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029722Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:04.780{8223a6b9-7dfc-6902-2a1d-000000002e00}9824C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029723Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:04.783{8223a6b9-7dfc-6902-2b1d-000000002e00}15444C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029724Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:07.773{8223a6b9-7dfc-6902-2c1d-000000002e00}14608C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029725Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:09.805{8223a6b9-7e01-6902-2d1d-000000002e00}15424C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029726Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:09.814{8223a6b9-7e01-6902-2e1d-000000002e00}12944C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029727Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:12.826{8223a6b9-7e01-6902-2f1d-000000002e00}15416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029728Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:14.759{8223a6b9-7e06-6902-301d-000000002e00}16036C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029729Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:14.767{8223a6b9-7e06-6902-311d-000000002e00}5956C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029730Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:17.753{8223a6b9-7e06-6902-321d-000000002e00}9960C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029731Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:19.753{8223a6b9-7e0b-6902-331d-000000002e00}15220C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029732Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:19.760{8223a6b9-7e0b-6902-341d-000000002e00}11900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029733Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:22.760{8223a6b9-7e0b-6902-351d-000000002e00}14928C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029734Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:24.767{8223a6b9-7e10-6902-361d-000000002e00}16164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029735Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:24.773{8223a6b9-7e10-6902-371d-000000002e00}15236C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029736Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:27.748{8223a6b9-7e10-6902-381d-000000002e00}11952C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029737Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:29.758{8223a6b9-7e15-6902-391d-000000002e00}15172C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029738Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:29.770{8223a6b9-7e15-6902-3a1d-000000002e00}16208C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029739Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:32.193{8223a6b9-7df0-6902-231d-000000002e00}15088C:\Windows\System32\RuntimeBroker.exesoc101win11\Administrator +534500x800000000000000029740Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:32.761{8223a6b9-7e15-6902-3b1d-000000002e00}11216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029741Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:34.770{8223a6b9-7e1a-6902-3c1d-000000002e00}16300C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029742Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:34.776{8223a6b9-7e1a-6902-3d1d-000000002e00}2584C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029743Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:37.771{8223a6b9-7e1a-6902-3e1d-000000002e00}14160C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029744Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:39.767{8223a6b9-7e1f-6902-3f1d-000000002e00}5116C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029745Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:39.775{8223a6b9-7e1f-6902-401d-000000002e00}14760C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029746Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:42.779{8223a6b9-7e1f-6902-411d-000000002e00}4352C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029747Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:44.763{8223a6b9-7e24-6902-421d-000000002e00}10808C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029748Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:44.775{8223a6b9-7e24-6902-431d-000000002e00}15352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029749Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:47.803{8223a6b9-7e24-6902-441d-000000002e00}7924C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029750Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:50.005{8223a6b9-7e29-6902-451d-000000002e00}15648C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029751Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:50.008{8223a6b9-7e29-6902-461d-000000002e00}15964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029752Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:52.393{8223a6b9-7def-6902-211d-000000002e00}16376C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029753Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.003{8223a6b9-7e29-6902-471d-000000002e00}14936C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029754Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.129{8223a6b9-7e2d-6902-511d-000000002e00}15304C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000029755Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.157{8223a6b9-7e2d-6902-4f1d-000000002e00}9248C:\Windows\System32\tasklist.exeNT AUTHORITY\SYSTEM +534500x800000000000000029756Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.159{8223a6b9-7e2d-6902-501d-000000002e00}16292C:\Windows\System32\findstr.exeNT AUTHORITY\SYSTEM +534500x800000000000000029757Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.171{8223a6b9-7e2c-6902-491d-000000002e00}1336C:\Windows\System32\cmd.exeNT AUTHORITY\SYSTEM +534500x800000000000000029758Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.175{8223a6b9-7e2c-6902-4a1d-000000002e00}14172C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029759Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.183{8223a6b9-7e2d-6902-521d-000000002e00}15496C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000029760Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.258{8223a6b9-7e2d-6902-531d-000000002e00}14564C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000029761Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.468{8223a6b9-7e2d-6902-561d-000000002e00}14832C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029762Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.468{8223a6b9-7e2d-6902-551d-000000002e00}16320C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000029763Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.792{8223a6b9-7e2d-6902-571d-000000002e00}16092C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exesoc101win11\Administrator +534500x800000000000000029764Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.796{8223a6b9-7e2d-6902-581d-000000002e00}13988C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029765Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.806{8223a6b9-7e2c-6902-4b1d-000000002e00}1780C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000029766Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.812{8223a6b9-7e2c-6902-4d1d-000000002e00}15204C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029767Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:53.826{8223a6b9-7def-6902-201d-000000002e00}4044C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exeNT AUTHORITY\SYSTEM +534500x800000000000000029768Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:54.294{8223a6b9-7e2e-6902-5b1d-000000002e00}15412C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000029769Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:55.526{8223a6b9-7e2e-6902-5e1d-000000002e00}4712C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029770Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:55.530{8223a6b9-7e2e-6902-5f1d-000000002e00}15368C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029771Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:56.533{8223a6b9-7e2f-6902-611d-000000002e00}15872C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029772Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:56.535{8223a6b9-7e2f-6902-621d-000000002e00}1428C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029773Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:58.627{8223a6b9-7e2e-6902-5c1d-000000002e00}15308C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029774Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:58.719{8223a6b9-7e32-6902-631d-000000002e00}11144C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029775Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:50:59.543{8223a6b9-7e2f-6902-601d-000000002e00}15020C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029776Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:00.527{8223a6b9-7e33-6902-651d-000000002e00}8340C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029777Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:00.530{8223a6b9-7e33-6902-661d-000000002e00}14356C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029778Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:00.741{8223a6b9-7e32-6902-641d-000000002e00}12852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029779Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:00.864{8223a6b9-7e34-6902-681d-000000002e00}11588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029780Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:01.212{8223a6b9-7e34-6902-691d-000000002e00}14708C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029781Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:01.343{8223a6b9-7e35-6902-6a1d-000000002e00}2900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029782Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:02.094{8223a6b9-7e35-6902-6b1d-000000002e00}8088C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029783Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:02.220{8223a6b9-7e36-6902-6c1d-000000002e00}15100C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029784Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:02.636{8223a6b9-7e36-6902-6d1d-000000002e00}15876C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029785Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:02.795{8223a6b9-7e36-6902-6e1d-000000002e00}8264C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029786Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:03.126{8223a6b9-7e36-6902-6f1d-000000002e00}16312C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029787Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:03.509{8223a6b9-7e37-6902-701d-000000002e00}13520C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029788Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:03.539{8223a6b9-7e34-6902-671d-000000002e00}16076C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029789Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:04.973{8223a6b9-7e37-6902-711d-000000002e00}14128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029790Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:05.388{8223a6b9-7e38-6902-741d-000000002e00}15220C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029791Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:05.528{8223a6b9-7e38-6902-721d-000000002e00}4072C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029792Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:05.532{8223a6b9-7e38-6902-731d-000000002e00}15884C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029793Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:06.600{8223a6b9-7e39-6902-761d-000000002e00}15068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029794Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:06.759{8223a6b9-7e3a-6902-771d-000000002e00}9588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029795Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:07.094{8223a6b9-7e3a-6902-781d-000000002e00}9820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029796Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:07.348{8223a6b9-7e3b-6902-791d-000000002e00}13248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029797Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:08.555{8223a6b9-7e39-6902-751d-000000002e00}16128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029798Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:09.436{8223a6b9-7e3b-6902-7a1d-000000002e00}8240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029799Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:09.606{8223a6b9-7e3d-6902-7b1d-000000002e00}9808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029800Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:09.980{8223a6b9-7e3d-6902-7e1d-000000002e00}16208C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029801Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:10.529{8223a6b9-7e3d-6902-7c1d-000000002e00}9568C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029802Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:10.532{8223a6b9-7e3d-6902-7d1d-000000002e00}16136C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029803Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:10.653{8223a6b9-7e3d-6902-7f1d-000000002e00}13452C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029804Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:13.562{8223a6b9-7e3e-6902-801d-000000002e00}11216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029805Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:13.622{8223a6b9-7e3e-6902-811d-000000002e00}6608C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029806Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:13.880{8223a6b9-7e41-6902-821d-000000002e00}2068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029807Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:15.527{8223a6b9-7e42-6902-841d-000000002e00}11924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029808Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:15.530{8223a6b9-7e42-6902-851d-000000002e00}11780C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029809Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:18.537{8223a6b9-7e43-6902-861d-000000002e00}11204C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029810Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:20.526{8223a6b9-7e47-6902-871d-000000002e00}6524C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029811Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:20.532{8223a6b9-7e47-6902-881d-000000002e00}16112C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029812Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:23.530{8223a6b9-7e48-6902-891d-000000002e00}4336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029813Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:25.528{8223a6b9-7e4c-6902-8a1d-000000002e00}1476C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029814Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:25.532{8223a6b9-7e4c-6902-8b1d-000000002e00}15108C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029815Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:28.540{8223a6b9-7e4d-6902-8c1d-000000002e00}13416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029816Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:30.527{8223a6b9-7e51-6902-8d1d-000000002e00}13824C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029817Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:30.534{8223a6b9-7e51-6902-8e1d-000000002e00}9248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029818Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:30.724{8223a6b9-7e41-6902-831d-000000002e00}15044C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029819Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:31.016{8223a6b9-7e52-6902-901d-000000002e00}6492C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029820Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:33.532{8223a6b9-7e52-6902-8f1d-000000002e00}9416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029821Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:35.528{8223a6b9-7e56-6902-921d-000000002e00}14456C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029822Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:35.530{8223a6b9-7e56-6902-931d-000000002e00}9856C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029823Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:38.538{8223a6b9-7e57-6902-941d-000000002e00}13788C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029824Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:40.528{8223a6b9-7e5b-6902-951d-000000002e00}12904C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029825Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:40.530{8223a6b9-7e5b-6902-961d-000000002e00}15396C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029826Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:41.326{8223a6b9-7e53-6902-911d-000000002e00}4020C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029827Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:41.580{8223a6b9-7e5d-6902-981d-000000002e00}9260C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029828Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:42.663{8223a6b9-7e5d-6902-991d-000000002e00}1240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029829Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:43.171{8223a6b9-7e5e-6902-9a1d-000000002e00}13136C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029830Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:43.542{8223a6b9-7e5c-6902-971d-000000002e00}11164C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029831Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:45.527{8223a6b9-7e60-6902-9c1d-000000002e00}4024C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029832Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:45.531{8223a6b9-7e60-6902-9d1d-000000002e00}15020C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029833Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:48.528{8223a6b9-7e61-6902-9e1d-000000002e00}10092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029834Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:50.526{8223a6b9-7e65-6902-9f1d-000000002e00}16100C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029835Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:50.529{8223a6b9-7e65-6902-a01d-000000002e00}5324C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029836Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:53.543{8223a6b9-7e66-6902-a11d-000000002e00}4384C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029837Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:54.383{8223a6b9-7e5f-6902-9b1d-000000002e00}3596C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029838Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:54.585{8223a6b9-7e6a-6902-a21d-000000002e00}2900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029839Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:55.527{8223a6b9-7e6a-6902-a31d-000000002e00}13940C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029840Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:55.530{8223a6b9-7e6a-6902-a41d-000000002e00}15844C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029841Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:56.458{8223a6b9-7e6a-6902-a51d-000000002e00}11212C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029842Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:56.708{8223a6b9-7e6c-6902-a71d-000000002e00}11040C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029843Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:57.842{8223a6b9-7e6c-6902-a81d-000000002e00}9400C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029844Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:58.097{8223a6b9-7e6d-6902-a91d-000000002e00}14660C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029845Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:58.527{8223a6b9-7e6b-6902-a61d-000000002e00}1552C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029846Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:58.702{8223a6b9-7e6e-6902-aa1d-000000002e00}11068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029847Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:58.856{8223a6b9-7e6e-6902-ab1d-000000002e00}15692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029848Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:59.196{8223a6b9-7e6e-6902-ac1d-000000002e00}6992C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029849Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:51:59.403{8223a6b9-7e6f-6902-ad1d-000000002e00}13908C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029850Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:00.526{8223a6b9-7e6f-6902-af1d-000000002e00}11896C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029851Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:00.530{8223a6b9-7e6f-6902-b01d-000000002e00}12984C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029852Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:00.901{8223a6b9-7e6f-6902-ae1d-000000002e00}15864C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029853Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:01.092{8223a6b9-7e70-6902-b21d-000000002e00}7588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029854Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:02.062{8223a6b9-7e71-6902-b31d-000000002e00}15984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029855Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:02.254{8223a6b9-7e72-6902-b41d-000000002e00}15940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029856Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:02.588{8223a6b9-7e72-6902-b51d-000000002e00}8936C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029857Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:02.681{8223a6b9-7e72-6902-b61d-000000002e00}15860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029858Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:03.000{8223a6b9-7e72-6902-b71d-000000002e00}6340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029859Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:03.212{8223a6b9-7e73-6902-b81d-000000002e00}14588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029860Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:03.537{8223a6b9-7e70-6902-b11d-000000002e00}15472C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029861Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:03.631{8223a6b9-7e73-6902-b91d-000000002e00}1752C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029862Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:04.047{8223a6b9-7e73-6902-ba1d-000000002e00}8236C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029863Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:05.527{8223a6b9-7e74-6902-bc1d-000000002e00}13484C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029864Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:05.531{8223a6b9-7e74-6902-bd1d-000000002e00}1804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029865Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:08.431{8223a6b9-7e74-6902-bb1d-000000002e00}14616C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029866Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:08.532{8223a6b9-7e75-6902-be1d-000000002e00}14716C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029867Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:08.915{8223a6b9-7e78-6902-bf1d-000000002e00}3064C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029868Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:10.526{8223a6b9-7e79-6902-c11d-000000002e00}15488C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029869Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:10.530{8223a6b9-7e79-6902-c21d-000000002e00}14228C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029870Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:11.873{8223a6b9-7e78-6902-c01d-000000002e00}13880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029871Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:12.104{8223a6b9-7e7b-6902-c41d-000000002e00}16192C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029872Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:13.536{8223a6b9-7e7a-6902-c31d-000000002e00}10812C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029873Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:15.448{8223a6b9-7e7c-6902-c51d-000000002e00}14324C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029874Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:15.527{8223a6b9-7e7e-6902-c61d-000000002e00}13948C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029875Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:15.530{8223a6b9-7e7e-6902-c71d-000000002e00}14232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029876Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:15.558{8223a6b9-7e7f-6902-c91d-000000002e00}11968C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029877Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:15.781{8223a6b9-7e7f-6902-ca1d-000000002e00}15300C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029878Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:16.061{8223a6b9-7e7f-6902-cb1d-000000002e00}14416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029879Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:18.537{8223a6b9-7e7f-6902-c81d-000000002e00}13840C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029880Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:19.044{8223a6b9-7e80-6902-cc1d-000000002e00}15164C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029881Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:19.144{8223a6b9-7e83-6902-cd1d-000000002e00}14376C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029882Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:19.260{8223a6b9-7e83-6902-ce1d-000000002e00}16308C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029883Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:19.446{8223a6b9-7e83-6902-cf1d-000000002e00}5912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029884Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:20.526{8223a6b9-7e83-6902-d11d-000000002e00}14724C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029885Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:20.531{8223a6b9-7e83-6902-d21d-000000002e00}13072C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029886Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:20.924{8223a6b9-7e83-6902-d01d-000000002e00}10720C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029887Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:21.041{8223a6b9-7e84-6902-d41d-000000002e00}15740C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029888Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:21.217{8223a6b9-7e85-6902-d51d-000000002e00}15224C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029889Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:21.342{8223a6b9-7e85-6902-d61d-000000002e00}14636C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029890Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:22.109{8223a6b9-7e85-6902-d71d-000000002e00}9952C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029891Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:22.203{8223a6b9-7e86-6902-d81d-000000002e00}15368C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029892Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:22.850{8223a6b9-7e86-6902-d91d-000000002e00}15948C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029893Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:22.937{8223a6b9-7e86-6902-da1d-000000002e00}15020C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029894Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:23.273{8223a6b9-7e86-6902-db1d-000000002e00}10092C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029895Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:23.432{8223a6b9-7e87-6902-dc1d-000000002e00}10852C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029896Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:23.544{8223a6b9-7e84-6902-d31d-000000002e00}13752C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029897Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:24.692{8223a6b9-7e87-6902-dd1d-000000002e00}5324C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029898Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:24.805{8223a6b9-7e88-6902-e01d-000000002e00}13616C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029899Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:25.030{8223a6b9-7e88-6902-e11d-000000002e00}15904C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029900Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:25.122{8223a6b9-7e89-6902-e21d-000000002e00}14696C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029901Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:25.327{8223a6b9-7e89-6902-e41d-000000002e00}15844C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029902Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:25.391{8223a6b9-7e89-6902-e51d-000000002e00}12944C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029903Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:25.486{8223a6b9-7e89-6902-e61d-000000002e00}14668C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029904Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:25.527{8223a6b9-7e88-6902-de1d-000000002e00}7708C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029905Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:25.530{8223a6b9-7e88-6902-df1d-000000002e00}11876C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029906Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:25.613{8223a6b9-7e89-6902-e71d-000000002e00}396C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029907Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:26.852{8223a6b9-7e89-6902-e81d-000000002e00}2128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029908Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:26.937{8223a6b9-7e8a-6902-e91d-000000002e00}14700C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029909Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:27.034{8223a6b9-7e8a-6902-ea1d-000000002e00}14536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029910Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:27.192{8223a6b9-7e8b-6902-eb1d-000000002e00}3768C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029911Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:28.532{8223a6b9-7e89-6902-e31d-000000002e00}15100C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029912Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:30.529{8223a6b9-7e8d-6902-ed1d-000000002e00}924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029913Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:30.531{8223a6b9-7e8d-6902-ee1d-000000002e00}13400C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029914Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:33.549{8223a6b9-7e8e-6902-ef1d-000000002e00}13428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029915Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:35.530{8223a6b9-7e92-6902-f01d-000000002e00}2224C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029916Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:35.532{8223a6b9-7e92-6902-f11d-000000002e00}5744C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029917Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:38.538{8223a6b9-7e93-6902-f21d-000000002e00}15984C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029918Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:40.529{8223a6b9-7e97-6902-f31d-000000002e00}14076C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029919Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:40.531{8223a6b9-7e97-6902-f41d-000000002e00}11360C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029920Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:43.592{8223a6b9-7e98-6902-f51d-000000002e00}11216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029921Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:45.527{8223a6b9-7e9c-6902-f61d-000000002e00}2584C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029922Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:45.530{8223a6b9-7e9c-6902-f71d-000000002e00}15976C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029923Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:48.532{8223a6b9-7e9d-6902-f81d-000000002e00}16104C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029924Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:50.527{8223a6b9-7ea1-6902-f91d-000000002e00}14688C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029925Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:50.530{8223a6b9-7ea1-6902-fa1d-000000002e00}14816C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029926Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:53.533{8223a6b9-7ea2-6902-fb1d-000000002e00}14920C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029927Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:54.912{8223a6b9-7e8b-6902-ec1d-000000002e00}14116C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029928Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:55.042{8223a6b9-7ea6-6902-fe1d-000000002e00}14716C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029929Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:55.472{8223a6b9-7ea7-6902-ff1d-000000002e00}16228C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029930Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:55.529{8223a6b9-7ea6-6902-fc1d-000000002e00}5116C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029931Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:55.531{8223a6b9-7ea6-6902-fd1d-000000002e00}936C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029932Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:55.599{8223a6b9-7ea7-6902-011e-000000002e00}15488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029933Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:52:58.540{8223a6b9-7ea7-6902-001e-000000002e00}13860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029934Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:00.529{8223a6b9-7eab-6902-031e-000000002e00}16160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029935Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:00.530{8223a6b9-7eab-6902-041e-000000002e00}13900C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029936Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:03.537{8223a6b9-7eac-6902-051e-000000002e00}10664C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029937Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:05.527{8223a6b9-7eb0-6902-061e-000000002e00}12800C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029938Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:05.530{8223a6b9-7eb0-6902-071e-000000002e00}14232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029939Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:08.546{8223a6b9-7eb1-6902-081e-000000002e00}1472C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029940Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:10.527{8223a6b9-7eb5-6902-091e-000000002e00}13996C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029941Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:10.530{8223a6b9-7eb5-6902-0a1e-000000002e00}15384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029942Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:13.533{8223a6b9-7eb6-6902-0b1e-000000002e00}13416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029943Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:15.527{8223a6b9-7eba-6902-0c1e-000000002e00}15708C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029944Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:15.530{8223a6b9-7eba-6902-0d1e-000000002e00}3280C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029945Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:18.535{8223a6b9-7ebb-6902-0e1e-000000002e00}2556C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029946Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:19.858{8223a6b9-7d93-6902-e91c-000000002e00}14340C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029947Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:20.527{8223a6b9-7ebf-6902-0f1e-000000002e00}11000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029948Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:20.531{8223a6b9-7ebf-6902-101e-000000002e00}14892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029949Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:23.578{8223a6b9-7ec0-6902-111e-000000002e00}5064C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029950Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:25.526{8223a6b9-7ec4-6902-121e-000000002e00}9952C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029951Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:25.529{8223a6b9-7ec4-6902-131e-000000002e00}11164C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029952Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:28.585{8223a6b9-7ec5-6902-141e-000000002e00}4024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029953Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:30.526{8223a6b9-7ec9-6902-151e-000000002e00}15388C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029954Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:30.531{8223a6b9-7ec9-6902-161e-000000002e00}6508C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029955Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:32.005{8223a6b9-7ea7-6902-021e-000000002e00}14024C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029956Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:32.133{8223a6b9-7ecc-6902-181e-000000002e00}14936C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029957Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:32.801{8223a6b9-7ecc-6902-191e-000000002e00}13372C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029958Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:32.881{8223a6b9-7ecc-6902-1a1e-000000002e00}14960C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029959Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:33.513{8223a6b9-7ecc-6902-1b1e-000000002e00}1016C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029960Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:33.539{8223a6b9-7eca-6902-171e-000000002e00}10852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029961Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:33.601{8223a6b9-7ecd-6902-1c1e-000000002e00}15640C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029962Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:33.740{8223a6b9-7ecd-6902-1d1e-000000002e00}16344C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029963Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:33.835{8223a6b9-7ecd-6902-1e1e-000000002e00}14988C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029964Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:34.907{8223a6b9-7ecd-6902-1f1e-000000002e00}16036C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029965Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:34.983{8223a6b9-7ece-6902-221e-000000002e00}15536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029966Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:35.079{8223a6b9-7ece-6902-231e-000000002e00}11816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029967Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:35.153{8223a6b9-7ecf-6902-241e-000000002e00}16132C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029968Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:35.227{8223a6b9-7ecf-6902-261e-000000002e00}6992C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029969Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:35.317{8223a6b9-7ecf-6902-271e-000000002e00}13940C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029970Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:35.527{8223a6b9-7ece-6902-201e-000000002e00}2796C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029971Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:35.531{8223a6b9-7ece-6902-211e-000000002e00}9688C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029972Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:36.107{8223a6b9-7ecf-6902-281e-000000002e00}15800C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029973Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:36.198{8223a6b9-7ed0-6902-291e-000000002e00}12984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029974Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:37.285{8223a6b9-7ed0-6902-2a1e-000000002e00}15068C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029975Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:37.444{8223a6b9-7ed1-6902-2b1e-000000002e00}7588C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029976Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:38.528{8223a6b9-7ecf-6902-251e-000000002e00}9024C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029977Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:39.430{8223a6b9-7ed1-6902-2c1e-000000002e00}10296C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029978Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:39.486{8223a6b9-7ed3-6902-2d1e-000000002e00}14344C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029979Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:39.599{8223a6b9-7ed3-6902-2e1e-000000002e00}868C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029980Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:40.462{8223a6b9-7ed3-6902-311e-000000002e00}11360C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029981Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:40.527{8223a6b9-7ed3-6902-2f1e-000000002e00}8164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000029982Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:40.530{8223a6b9-7ed3-6902-301e-000000002e00}13420C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000029983Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:40.537{8223a6b9-7ed4-6902-331e-000000002e00}13248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029984Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:41.147{8223a6b9-7ed4-6902-341e-000000002e00}11764C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029985Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:41.222{8223a6b9-7ed5-6902-351e-000000002e00}6112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029986Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:41.542{8223a6b9-7ed5-6902-361e-000000002e00}11924C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029987Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:41.622{8223a6b9-7ed5-6902-371e-000000002e00}15188C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029988Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:41.989{8223a6b9-7ed5-6902-381e-000000002e00}15240C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029989Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:42.051{8223a6b9-7ed5-6902-391e-000000002e00}14572C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029990Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:42.155{8223a6b9-7ed6-6902-3a1e-000000002e00}8416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029991Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:43.539{8223a6b9-7ed4-6902-321e-000000002e00}7388C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000029992Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:44.776{8223a6b9-7ed6-6902-3b1e-000000002e00}3336C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029993Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:44.842{8223a6b9-7ed8-6902-3e1e-000000002e00}15516C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029994Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:44.922{8223a6b9-7ed8-6902-3f1e-000000002e00}6568C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029995Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:44.981{8223a6b9-7ed8-6902-401e-000000002e00}15488C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029996Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.070{8223a6b9-7ed8-6902-411e-000000002e00}13860C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029997Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.139{8223a6b9-7ed9-6902-421e-000000002e00}14744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029998Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.251{8223a6b9-7ed9-6902-441e-000000002e00}5992C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000029999Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.377{8223a6b9-7ed9-6902-451e-000000002e00}14392C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030000Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.527{8223a6b9-7ed8-6902-3c1e-000000002e00}7316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030001Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.533{8223a6b9-7ed8-6902-3d1e-000000002e00}13264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030002Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.587{8223a6b9-7ed9-6902-461e-000000002e00}14216C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030003Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.737{8223a6b9-7ed9-6902-471e-000000002e00}15264C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030004Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:45.948{8223a6b9-7ed9-6902-481e-000000002e00}4308C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030005Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:46.066{8223a6b9-7ed9-6902-491e-000000002e00}8248C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030006Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:48.427{8223a6b9-7eda-6902-4a1e-000000002e00}15900C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030007Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:48.517{8223a6b9-7edc-6902-4b1e-000000002e00}10504C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030008Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:48.536{8223a6b9-7ed9-6902-431e-000000002e00}4468C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030009Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:48.950{8223a6b9-7edc-6902-4c1e-000000002e00}8324C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030010Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:49.014{8223a6b9-7edc-6902-4d1e-000000002e00}5936C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030011Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:49.101{8223a6b9-7edd-6902-4e1e-000000002e00}2028C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030012Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:49.157{8223a6b9-7edd-6902-4f1e-000000002e00}14340C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030013Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:49.316{8223a6b9-7edd-6902-501e-000000002e00}5912C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030014Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:50.528{8223a6b9-7edd-6902-521e-000000002e00}7508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030015Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:50.531{8223a6b9-7edd-6902-531e-000000002e00}5652C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030016Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:53.558{8223a6b9-7ede-6902-541e-000000002e00}13528C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030017Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:55.527{8223a6b9-7ee2-6902-551e-000000002e00}5340C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030018Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:55.530{8223a6b9-7ee2-6902-561e-000000002e00}14196C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030019Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:53:58.539{8223a6b9-7ee3-6902-571e-000000002e00}14840C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030020Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:00.527{8223a6b9-7ee7-6902-581e-000000002e00}4380C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030021Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:00.531{8223a6b9-7ee7-6902-591e-000000002e00}1492C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030022Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:03.530{8223a6b9-7ee8-6902-5a1e-000000002e00}5532C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030023Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:05.527{8223a6b9-7eec-6902-5b1e-000000002e00}10852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030024Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:05.530{8223a6b9-7eec-6902-5c1e-000000002e00}15356C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030025Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:08.547{8223a6b9-7eed-6902-5d1e-000000002e00}14732C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030026Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:10.527{8223a6b9-7ef1-6902-5e1e-000000002e00}12944C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030027Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:10.530{8223a6b9-7ef1-6902-5f1e-000000002e00}14352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030028Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:13.537{8223a6b9-7ef2-6902-601e-000000002e00}15588C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030029Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:15.528{8223a6b9-7ef6-6902-611e-000000002e00}14668C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030030Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:15.530{8223a6b9-7ef6-6902-621e-000000002e00}10108C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030031Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:16.326{8223a6b9-7edd-6902-511e-000000002e00}8352C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030032Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:16.712{8223a6b9-7ef8-6902-641e-000000002e00}4012C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030033Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:18.014{8223a6b9-7ef8-6902-651e-000000002e00}16132C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030034Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:18.231{8223a6b9-7efa-6902-661e-000000002e00}2596C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030035Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:18.530{8223a6b9-7ef7-6902-631e-000000002e00}16036C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030036Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:20.527{8223a6b9-7efb-6902-681e-000000002e00}12924C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030037Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:20.532{8223a6b9-7efb-6902-691e-000000002e00}15940C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030038Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:23.539{8223a6b9-7efc-6902-6a1e-000000002e00}5956C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030039Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:25.527{8223a6b9-7f00-6902-6b1e-000000002e00}16360C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030040Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:25.529{8223a6b9-7f00-6902-6c1e-000000002e00}9024C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030041Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:28.011{8223a6b9-7efa-6902-671e-000000002e00}9400C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030042Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:28.155{8223a6b9-7f04-6902-6e1e-000000002e00}14404C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030043Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:28.538{8223a6b9-7f01-6902-6d1e-000000002e00}15560C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030044Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:28.554{8223a6b9-7f04-6902-6f1e-000000002e00}8936C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030045Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:28.736{8223a6b9-7f04-6902-701e-000000002e00}13744C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030046Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:30.527{8223a6b9-7f05-6902-721e-000000002e00}9840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030047Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:30.530{8223a6b9-7f05-6902-731e-000000002e00}14684C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030048Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:33.542{8223a6b9-7f06-6902-741e-000000002e00}13964C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030049Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:34.657{8223a6b9-7f04-6902-711e-000000002e00}14160C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030050Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:34.800{8223a6b9-7f0a-6902-771e-000000002e00}14572C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030051Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:35.527{8223a6b9-7f0a-6902-751e-000000002e00}11116C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030052Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:35.530{8223a6b9-7f0a-6902-761e-000000002e00}15888C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030053Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:38.529{8223a6b9-7f0b-6902-791e-000000002e00}14356C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030054Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:40.527{8223a6b9-7f0f-6902-7a1e-000000002e00}1244C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030055Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:40.531{8223a6b9-7f0f-6902-7b1e-000000002e00}5116C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030056Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:43.538{8223a6b9-7f10-6902-7c1e-000000002e00}10536C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030057Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:45.527{8223a6b9-7f14-6902-7d1e-000000002e00}15488C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030058Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:45.530{8223a6b9-7f14-6902-7e1e-000000002e00}13380C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030059Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:48.532{8223a6b9-7f15-6902-7f1e-000000002e00}15268C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030060Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:50.527{8223a6b9-7f19-6902-801e-000000002e00}16288C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030061Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:50.530{8223a6b9-7f19-6902-811e-000000002e00}6216C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030062Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:53.529{8223a6b9-7f1a-6902-821e-000000002e00}10396C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030063Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:55.528{8223a6b9-7f1e-6902-831e-000000002e00}14232C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030064Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:55.531{8223a6b9-7f1e-6902-841e-000000002e00}14748C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030065Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:54:58.590{8223a6b9-7f1f-6902-851e-000000002e00}14416C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030066Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:00.527{8223a6b9-7f23-6902-861e-000000002e00}976C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030067Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:00.531{8223a6b9-7f23-6902-871e-000000002e00}16224C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030068Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:03.538{8223a6b9-7f24-6902-881e-000000002e00}488C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030069Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:05.527{8223a6b9-7f28-6902-891e-000000002e00}1140C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030070Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:05.530{8223a6b9-7f28-6902-8a1e-000000002e00}6440C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030071Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:08.535{8223a6b9-7f29-6902-8b1e-000000002e00}3892C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030072Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:10.527{8223a6b9-7f2d-6902-8c1e-000000002e00}10808C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030073Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:10.530{8223a6b9-7f2d-6902-8d1e-000000002e00}1004C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030074Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:11.866{8223a6b9-7f0a-6902-781e-000000002e00}8416C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030075Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:12.293{8223a6b9-7f2f-6902-8f1e-000000002e00}5676C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030076Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:13.538{8223a6b9-7f2e-6902-8e1e-000000002e00}15372C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030077Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:15.526{8223a6b9-7f32-6902-911e-000000002e00}16316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030078Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:15.529{8223a6b9-7f32-6902-921e-000000002e00}492C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030079Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:18.548{8223a6b9-7f33-6902-931e-000000002e00}5612C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030080Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:20.017{8223a6b9-7f30-6902-901e-000000002e00}8512C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030081Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:20.199{8223a6b9-7f38-6902-961e-000000002e00}14196C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030082Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:20.528{8223a6b9-7f37-6902-941e-000000002e00}9612C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030083Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:20.532{8223a6b9-7f37-6902-951e-000000002e00}15568C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030084Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:20.556{8223a6b9-7f38-6902-981e-000000002e00}12880C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030085Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:21.207{8223a6b9-7f38-6902-991e-000000002e00}4380C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030086Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:23.541{8223a6b9-7f38-6902-971e-000000002e00}13572C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030087Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:24.021{8223a6b9-7f39-6902-9a1e-000000002e00}14532C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030088Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:24.177{8223a6b9-7f3c-6902-9b1e-000000002e00}11040C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030089Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:24.385{8223a6b9-7f3c-6902-9c1e-000000002e00}15784C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030090Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:24.602{8223a6b9-7f3c-6902-9d1e-000000002e00}3464C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030091Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:25.151{8223a6b9-7f3c-6902-a01e-000000002e00}13348C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030092Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:25.350{8223a6b9-7f3d-6902-a21e-000000002e00}8644C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030093Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:25.527{8223a6b9-7f3c-6902-9e1e-000000002e00}396C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030094Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:25.530{8223a6b9-7f3c-6902-9f1e-000000002e00}15208C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030095Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:25.898{8223a6b9-7f3d-6902-a31e-000000002e00}4840C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030096Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:26.158{8223a6b9-7f3d-6902-a41e-000000002e00}9820C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030097Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:26.659{8223a6b9-7f3e-6902-a51e-000000002e00}4020C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030354Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:17.799{8223a6b9-809a-6902-9d1f-000000002e00}13632C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030353Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:14.791{8223a6b9-809a-6902-9c1f-000000002e00}7016C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030352Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:14.781{8223a6b9-809a-6902-9b1f-000000002e00}5136C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030351Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:12.811{8223a6b9-8095-6902-9a1f-000000002e00}11780C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030350Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:09.813{8223a6b9-8095-6902-991f-000000002e00}15696C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030349Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:09.806{8223a6b9-8095-6902-981f-000000002e00}8340C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030348Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:07.777{8223a6b9-8090-6902-971f-000000002e00}15280C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030347Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:04.783{8223a6b9-8090-6902-961f-000000002e00}13520C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030346Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:04.769{8223a6b9-8090-6902-951f-000000002e00}13756C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030345Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:01:02.825{8223a6b9-808b-6902-941f-000000002e00}6036C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030344Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:59.835{8223a6b9-808b-6902-931f-000000002e00}5476C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030343Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:59.826{8223a6b9-808b-6902-921f-000000002e00}15372C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030342Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:57.814{8223a6b9-8086-6902-911f-000000002e00}14120C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030341Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:54.828{8223a6b9-8086-6902-901f-000000002e00}3228C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030340Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:54.816{8223a6b9-8086-6902-8f1f-000000002e00}15064C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030339Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:52.758{8223a6b9-8081-6902-8e1f-000000002e00}2296C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030338Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:49.760{8223a6b9-8081-6902-8d1f-000000002e00}13036C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030337Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:49.750{8223a6b9-8081-6902-8c1f-000000002e00}3280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030336Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:47.823{8223a6b9-807c-6902-8b1f-000000002e00}15276C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030335Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:44.821{8223a6b9-807c-6902-8a1f-000000002e00}15500C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030334Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:44.806{8223a6b9-807c-6902-891f-000000002e00}14576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030333Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:42.815{8223a6b9-8077-6902-881f-000000002e00}14316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030332Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:39.822{8223a6b9-8077-6902-871f-000000002e00}5000C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030331Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:39.818{8223a6b9-8077-6902-861f-000000002e00}14920C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030330Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:37.775{8223a6b9-8072-6902-851f-000000002e00}14372C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030329Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:34.760{8223a6b9-8072-6902-841f-000000002e00}4700C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030328Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:34.749{8223a6b9-8072-6902-831f-000000002e00}10508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030327Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:32.781{8223a6b9-806d-6902-821f-000000002e00}13264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030326Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:29.789{8223a6b9-806d-6902-811f-000000002e00}2028C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030325Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:29.774{8223a6b9-806d-6902-801f-000000002e00}13616C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030324Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:27.787{8223a6b9-8068-6902-7f1f-000000002e00}1568C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030323Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:24.786{8223a6b9-8068-6902-7e1f-000000002e00}280C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030322Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:24.779{8223a6b9-8068-6902-7d1f-000000002e00}2948C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030321Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:22.801{8223a6b9-8063-6902-7c1f-000000002e00}13612C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030320Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:19.808{8223a6b9-8063-6902-7b1f-000000002e00}8552C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030319Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:19.798{8223a6b9-8063-6902-7a1f-000000002e00}14584C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030318Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:17.779{8223a6b9-805e-6902-791f-000000002e00}14620C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030317Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:14.771{8223a6b9-805e-6902-781f-000000002e00}12788C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030316Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:14.766{8223a6b9-805e-6902-771f-000000002e00}16120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030315Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:12.825{8223a6b9-8059-6902-761f-000000002e00}15764C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030314Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:09.808{8223a6b9-8059-6902-751f-000000002e00}16256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030313Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:09.797{8223a6b9-8059-6902-741f-000000002e00}16252C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030312Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:07.755{8223a6b9-8054-6902-731f-000000002e00}15316C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030311Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:04.776{8223a6b9-8054-6902-721f-000000002e00}15344C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030310Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:04.773{8223a6b9-8054-6902-711f-000000002e00}5608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030309Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 21:00:02.785{8223a6b9-804f-6902-701f-000000002e00}2092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030308Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:59.781{8223a6b9-804f-6902-6f1f-000000002e00}5648C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030307Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:59.776{8223a6b9-804f-6902-6e1f-000000002e00}14780C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030306Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:57.850{8223a6b9-804a-6902-6d1f-000000002e00}14124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030305Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:54.810{8223a6b9-804a-6902-6c1f-000000002e00}14832C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030304Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:54.803{8223a6b9-804a-6902-6b1f-000000002e00}10256C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030303Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:52.828{8223a6b9-8045-6902-6a1f-000000002e00}13724C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030302Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:49.908{8223a6b9-8045-6902-691f-000000002e00}13592C:\Windows\System32\wevtutil.exesoc101win11\Administrator +534500x800000000000000030301Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:49.786{8223a6b9-8045-6902-681f-000000002e00}13188C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030300Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:49.783{8223a6b9-8045-6902-671f-000000002e00}7604C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030299Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:47.761{8223a6b9-8040-6902-661f-000000002e00}14368C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030298Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:44.784{8223a6b9-8040-6902-651f-000000002e00}14136C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030297Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:44.774{8223a6b9-8040-6902-641f-000000002e00}13668C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030296Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:42.777{8223a6b9-803b-6902-631f-000000002e00}11908C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030295Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:39.763{8223a6b9-803b-6902-621f-000000002e00}15540C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030294Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:39.757{8223a6b9-803b-6902-611f-000000002e00}11164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030293Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:37.783{8223a6b9-8036-6902-601f-000000002e00}14640C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030292Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:34.772{8223a6b9-8036-6902-5f1f-000000002e00}14884C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030291Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:34.762{8223a6b9-8036-6902-5e1f-000000002e00}14076C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030290Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:32.790{8223a6b9-8031-6902-5d1f-000000002e00}14264C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030289Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:29.777{8223a6b9-8031-6902-5c1f-000000002e00}15312C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030288Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:29.769{8223a6b9-8031-6902-5b1f-000000002e00}4840C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030287Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:27.836{8223a6b9-802c-6902-5a1f-000000002e00}12016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030286Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:24.847{8223a6b9-802c-6902-591f-000000002e00}13468C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030285Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:24.823{8223a6b9-802c-6902-581f-000000002e00}12752C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030284Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:22.795{8223a6b9-8027-6902-571f-000000002e00}11016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030283Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:19.787{8223a6b9-8027-6902-561f-000000002e00}11040C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030282Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:19.783{8223a6b9-8027-6902-551f-000000002e00}15280C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030281Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:17.781{8223a6b9-8022-6902-541f-000000002e00}12412C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030280Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:14.776{8223a6b9-8022-6902-531f-000000002e00}2892C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030279Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:14.770{8223a6b9-8022-6902-521f-000000002e00}15632C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030278Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:12.837{8223a6b9-801d-6902-511f-000000002e00}11524C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030277Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:09.795{8223a6b9-801d-6902-501f-000000002e00}12924C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030276Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:09.786{8223a6b9-801d-6902-4f1f-000000002e00}15568C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030275Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:07.834{8223a6b9-8018-6902-4e1f-000000002e00}16180C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030274Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:04.783{8223a6b9-8018-6902-4d1f-000000002e00}7024C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030273Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:04.775{8223a6b9-8018-6902-4c1f-000000002e00}13348C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030272Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:59:02.783{8223a6b9-8013-6902-4b1f-000000002e00}11128C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030271Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:59.771{8223a6b9-8013-6902-4a1f-000000002e00}13036C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030270Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:59.763{8223a6b9-8013-6902-491f-000000002e00}5592C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030269Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:57.780{8223a6b9-800e-6902-481f-000000002e00}4712C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030268Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:54.780{8223a6b9-800e-6902-471f-000000002e00}15700C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030267Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:54.774{8223a6b9-800e-6902-461f-000000002e00}13788C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030266Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:52.798{8223a6b9-8009-6902-451f-000000002e00}1216C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030265Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:49.804{8223a6b9-8009-6902-441f-000000002e00}4352C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030264Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:49.794{8223a6b9-8009-6902-431f-000000002e00}2260C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030263Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:47.774{8223a6b9-8004-6902-421f-000000002e00}13884C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030262Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:44.769{8223a6b9-8004-6902-411f-000000002e00}16292C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030261Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:44.762{8223a6b9-8004-6902-401f-000000002e00}15164C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030260Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:42.777{8223a6b9-7fff-6902-3f1f-000000002e00}10088C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030259Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:39.771{8223a6b9-7fff-6902-3e1f-000000002e00}14232C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030258Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:39.762{8223a6b9-7fff-6902-3d1f-000000002e00}4272C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030257Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:37.791{8223a6b9-7ffa-6902-3c1f-000000002e00}15548C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030256Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:34.787{8223a6b9-7ffa-6902-3b1f-000000002e00}14748C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030255Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:34.782{8223a6b9-7ffa-6902-3a1f-000000002e00}11004C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030254Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:32.774{8223a6b9-7ff5-6902-391f-000000002e00}13464C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030253Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:29.774{8223a6b9-7ff5-6902-381f-000000002e00}13984C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030252Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:29.768{8223a6b9-7ff5-6902-371f-000000002e00}6508C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030251Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:27.833{8223a6b9-7ff0-6902-361f-000000002e00}14860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030250Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:24.835{8223a6b9-7ff0-6902-351f-000000002e00}11968C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030249Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:24.821{8223a6b9-7ff0-6902-341f-000000002e00}15608C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030248Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:22.748{8223a6b9-7feb-6902-321f-000000002e00}12000C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030247Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:21.635{8223a6b9-7fed-6902-331f-000000002e00}11216C:\Windows\System32\wevtutil.exesoc101win11\Administrator +534500x800000000000000030246Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:19.768{8223a6b9-7feb-6902-311f-000000002e00}14572C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030245Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:19.759{8223a6b9-7feb-6902-301f-000000002e00}15416C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030244Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:17.785{8223a6b9-7fe6-6902-2f1f-000000002e00}15512C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030243Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:14.788{8223a6b9-7fe6-6902-2e1f-000000002e00}13744C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030242Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:14.783{8223a6b9-7fe6-6902-2d1f-000000002e00}8120C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030241Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:12.776{8223a6b9-7fe1-6902-2c1f-000000002e00}16124C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030240Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:09.776{8223a6b9-7fe1-6902-2b1f-000000002e00}14684C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030239Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:09.767{8223a6b9-7fe1-6902-2a1f-000000002e00}14688C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030238Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:07.775{8223a6b9-7fdc-6902-291f-000000002e00}15860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030237Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:04.778{8223a6b9-7fdc-6902-281f-000000002e00}7604C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030236Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:04.773{8223a6b9-7fdc-6902-271f-000000002e00}15224C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030235Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:58:02.777{8223a6b9-7fd7-6902-261f-000000002e00}13176C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030234Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:59.771{8223a6b9-7fd7-6902-251f-000000002e00}9292C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030233Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:59.765{8223a6b9-7fd7-6902-241f-000000002e00}10692C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030232Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:57.858{8223a6b9-7fd2-6902-231f-000000002e00}1428C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030231Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:54.875{8223a6b9-7fd2-6902-221f-000000002e00}14516C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030230Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:54.866{8223a6b9-7fd2-6902-211f-000000002e00}15540C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030229Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:52.891{8223a6b9-7fcd-6902-201f-000000002e00}15948C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030228Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:49.895{8223a6b9-7fcd-6902-1f1f-000000002e00}2612C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030227Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:49.892{8223a6b9-7fcd-6902-1e1f-000000002e00}2068C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030226Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:47.770{8223a6b9-7fc8-6902-1d1f-000000002e00}15184C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030225Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:44.775{8223a6b9-7fc8-6902-1c1f-000000002e00}8248C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030224Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:44.766{8223a6b9-7fc8-6902-1b1f-000000002e00}14128C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030223Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:42.756{8223a6b9-7fc3-6902-1a1f-000000002e00}12016C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030222Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:39.777{8223a6b9-7fc3-6902-191f-000000002e00}3768C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030221Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:39.761{8223a6b9-7fc3-6902-181f-000000002e00}14320C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030220Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:37.767{8223a6b9-7fbe-6902-171f-000000002e00}14424C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030219Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:34.785{8223a6b9-7fbe-6902-161f-000000002e00}14660C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030218Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:34.779{8223a6b9-7fbe-6902-151f-000000002e00}14668C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030217Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:32.797{8223a6b9-7fb9-6902-141f-000000002e00}13520C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030216Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:29.794{8223a6b9-7fb9-6902-131f-000000002e00}13760C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030215Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:29.781{8223a6b9-7fb9-6902-121f-000000002e00}13572C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030214Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:27.796{8223a6b9-7fb4-6902-111f-000000002e00}3092C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030213Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:24.798{8223a6b9-7fb4-6902-101f-000000002e00}14672C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030212Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:24.787{8223a6b9-7fb4-6902-0f1f-000000002e00}15348C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030211Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:22.751{8223a6b9-7faf-6902-0e1f-000000002e00}16184C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030210Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:19.767{8223a6b9-7faf-6902-0d1f-000000002e00}12804C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030209Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:19.763{8223a6b9-7faf-6902-0c1f-000000002e00}9808C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030208Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:17.810{8223a6b9-7faa-6902-0b1f-000000002e00}15912C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030207Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:14.810{8223a6b9-7faa-6902-0a1f-000000002e00}13412C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030206Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:14.806{8223a6b9-7faa-6902-091f-000000002e00}13528C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030205Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:12.865{8223a6b9-7fa5-6902-081f-000000002e00}13788C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030204Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:09.874{8223a6b9-7fa5-6902-071f-000000002e00}2304C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030203Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:09.870{8223a6b9-7fa5-6902-061f-000000002e00}2844C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030202Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:07.761{8223a6b9-7fa0-6902-051f-000000002e00}2852C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030201Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:04.780{8223a6b9-7fa0-6902-041f-000000002e00}2760C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030200Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:04.775{8223a6b9-7fa0-6902-031f-000000002e00}8100C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030199Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:57:02.825{8223a6b9-7f9b-6902-021f-000000002e00}13884C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030198Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:59.787{8223a6b9-7f9b-6902-011f-000000002e00}16292C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030197Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:59.781{8223a6b9-7f9b-6902-001f-000000002e00}12856C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030196Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:58.030{8223a6b9-7f96-6902-fd1e-000000002e00}4728C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030195Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:55.040{8223a6b9-7f96-6902-ff1e-000000002e00}15920C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030194Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:55.030{8223a6b9-7f96-6902-fe1e-000000002e00}15264C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030193Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.798{8223a6b9-7f96-6902-fc1e-000000002e00}13612C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030192Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.789{8223a6b9-7f96-6902-fb1e-000000002e00}4336C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030191Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.234{8223a6b9-7e2c-6902-481d-000000002e00}5196C:\Windows\System32\taskhostw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030190Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.228{8223a6b9-7e2e-6902-5a1d-000000002e00}13656C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030189Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.222{8223a6b9-7e2e-6902-591d-000000002e00}11132C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000030188Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.209{8223a6b9-7e2e-6902-5d1d-000000002e00}13224C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000030187Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.197{8223a6b9-7e2c-6902-4e1d-000000002e00}12380C:\Windows\System32\conhost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030186Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.187{8223a6b9-7e2c-6902-4c1d-000000002e00}8552C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exeNT AUTHORITY\SYSTEM +534500x800000000000000030185Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.181{8223a6b9-7f90-6902-f51e-000000002e00}15648C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030184Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.172{8223a6b9-7e2d-6902-541d-000000002e00}9356C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exeNT AUTHORITY\SYSTEM +534500x800000000000000030183Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.152{8223a6b9-7f96-6902-fa1e-000000002e00}15808C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030182Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:54.126{8223a6b9-7f96-6902-f91e-000000002e00}13380C:\Windows\System32\svchost.exeNT AUTHORITY\LOCAL SERVICE +534500x800000000000000030181Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:53.542{8223a6b9-7f92-6902-f81e-000000002e00}3336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030180Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:50.531{8223a6b9-7f91-6902-f71e-000000002e00}14604C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030179Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:50.527{8223a6b9-7f91-6902-f61e-000000002e00}14704C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030178Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:48.543{8223a6b9-7f8d-6902-f11e-000000002e00}392C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030177Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:48.382{8223a6b9-7f90-6902-f41e-000000002e00}10320C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030176Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:48.183{8223a6b9-7f8f-6902-f31e-000000002e00}15844C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030175Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:47.834{8223a6b9-7f8f-6902-f21e-000000002e00}9828C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030174Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:47.703{8223a6b9-7f8c-6902-ee1e-000000002e00}1732C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030173Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:45.530{8223a6b9-7f8c-6902-f01e-000000002e00}13964C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030172Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:45.526{8223a6b9-7f8c-6902-ef1e-000000002e00}11636C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030171Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:44.300{8223a6b9-7f8c-6902-ed1e-000000002e00}6112C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030170Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:44.141{8223a6b9-7f87-6902-e91e-000000002e00}11348C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030169Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:43.537{8223a6b9-7f88-6902-ec1e-000000002e00}15860C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030168Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:40.530{8223a6b9-7f87-6902-eb1e-000000002e00}2280C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030167Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:40.527{8223a6b9-7f87-6902-ea1e-000000002e00}14852C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030166Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:39.176{8223a6b9-7f86-6902-e81e-000000002e00}14808C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030165Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:38.988{8223a6b9-7f86-6902-e71e-000000002e00}15952C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030164Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:38.546{8223a6b9-7f83-6902-e51e-000000002e00}7288C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030163Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:38.018{8223a6b9-7f85-6902-e61e-000000002e00}15668C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030162Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:37.683{8223a6b9-7f76-6902-dc1e-000000002e00}13712C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030161Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:35.533{8223a6b9-7f82-6902-e41e-000000002e00}13624C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030160Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:35.527{8223a6b9-7f82-6902-e31e-000000002e00}3720C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030159Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:33.544{8223a6b9-7f7e-6902-e21e-000000002e00}16304C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030158Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:30.530{8223a6b9-7f7d-6902-e11e-000000002e00}14264C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030157Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:30.527{8223a6b9-7f7d-6902-e01e-000000002e00}14676C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030156Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:28.537{8223a6b9-7f79-6902-df1e-000000002e00}15840C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030155Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:25.530{8223a6b9-7f78-6902-de1e-000000002e00}8896C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030154Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:25.526{8223a6b9-7f78-6902-dd1e-000000002e00}16328C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030153Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:24.212{8223a6b9-7d20-6902-a01c-000000002e00}13336C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030152Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:23.557{8223a6b9-7f74-6902-d71e-000000002e00}14536C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030151Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:22.695{8223a6b9-7f76-6902-db1e-000000002e00}15536C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030150Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:22.553{8223a6b9-7f75-6902-da1e-000000002e00}9260C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030149Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:21.867{8223a6b9-7f75-6902-d91e-000000002e00}15640C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030148Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:21.757{8223a6b9-7f74-6902-d81e-000000002e00}1476C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030147Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:20.531{8223a6b9-7f73-6902-d51e-000000002e00}16256C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030146Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:20.527{8223a6b9-7f73-6902-d41e-000000002e00}16196C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030145Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:20.253{8223a6b9-7f73-6902-d61e-000000002e00}11456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030144Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:19.972{8223a6b9-7f71-6902-d31e-000000002e00}9692C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030143Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:18.550{8223a6b9-7f6f-6902-d11e-000000002e00}1488C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030142Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:17.468{8223a6b9-7f71-6902-d21e-000000002e00}5128C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030141Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:17.094{8223a6b9-7f68-6902-cb1e-000000002e00}11144C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030140Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:15.530{8223a6b9-7f6e-6902-d01e-000000002e00}16008C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030139Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:15.527{8223a6b9-7f6e-6902-cf1e-000000002e00}6296C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030138Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:13.546{8223a6b9-7f6a-6902-ce1e-000000002e00}15924C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030137Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:10.530{8223a6b9-7f69-6902-cd1e-000000002e00}14912C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030136Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:10.527{8223a6b9-7f69-6902-cc1e-000000002e00}16172C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030135Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:08.539{8223a6b9-7f65-6902-c71e-000000002e00}9564C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030134Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:08.259{8223a6b9-7f68-6902-ca1e-000000002e00}14456C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030133Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:07.998{8223a6b9-7f67-6902-c91e-000000002e00}984C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030132Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:07.185{8223a6b9-7f67-6902-c81e-000000002e00}12876C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030131Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:07.038{8223a6b9-7f43-6902-b21e-000000002e00}14920C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030130Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:05.531{8223a6b9-7f64-6902-c61e-000000002e00}488C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030129Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:05.529{8223a6b9-7f64-6902-c51e-000000002e00}576C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030128Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:03.534{8223a6b9-7f60-6902-c41e-000000002e00}13480C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030127Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:00.530{8223a6b9-7f5f-6902-c31e-000000002e00}15384C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030126Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:56:00.527{8223a6b9-7f5f-6902-c21e-000000002e00}10000C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030125Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:58.548{8223a6b9-7f5b-6902-c11e-000000002e00}8112C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030124Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:55.530{8223a6b9-7f5a-6902-c01e-000000002e00}10088C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030123Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:55.527{8223a6b9-7f5a-6902-bf1e-000000002e00}15160C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030122Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:53.536{8223a6b9-7f56-6902-be1e-000000002e00}14272C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030121Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:50.530{8223a6b9-7f55-6902-bd1e-000000002e00}2808C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030120Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:50.527{8223a6b9-7f55-6902-bc1e-000000002e00}8404C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030119Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:48.546{8223a6b9-7f51-6902-bb1e-000000002e00}13368C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030118Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:45.533{8223a6b9-7f50-6902-ba1e-000000002e00}13860C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030117Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:45.529{8223a6b9-7f50-6902-b91e-000000002e00}15316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030116Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:43.529{8223a6b9-7f4c-6902-b81e-000000002e00}16228C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030115Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:40.530{8223a6b9-7f4b-6902-b71e-000000002e00}6372C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030114Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:40.528{8223a6b9-7f4b-6902-b61e-000000002e00}15552C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030113Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:38.537{8223a6b9-7f47-6902-b51e-000000002e00}5648C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030112Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:35.530{8223a6b9-7f46-6902-b41e-000000002e00}13692C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030111Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:35.527{8223a6b9-7f46-6902-b31e-000000002e00}14908C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030110Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:33.533{8223a6b9-7f42-6902-ae1e-000000002e00}13744C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030109Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:31.198{8223a6b9-7f42-6902-b11e-000000002e00}12000C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030108Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:30.976{8223a6b9-7f42-6902-b01e-000000002e00}14684C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030107Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:30.706{8223a6b9-7f42-6902-af1e-000000002e00}14816C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030106Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:30.549{8223a6b9-7f41-6902-ab1e-000000002e00}16056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030105Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:30.531{8223a6b9-7f41-6902-ad1e-000000002e00}15860C:\Windows\System32\conhost.exesoc101win11\Administrator +534500x800000000000000030104Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:30.527{8223a6b9-7f41-6902-ac1e-000000002e00}13316C:\Windows\System32\netsh.exesoc101win11\Administrator +534500x800000000000000030103Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:29.161{8223a6b9-7f40-6902-aa1e-000000002e00}13844C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030102Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:28.860{8223a6b9-7f3f-6902-a91e-000000002e00}14136C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030101Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:28.541{8223a6b9-7f3d-6902-a11e-000000002e00}15364C:\Windows\System32\svchost.exeNT AUTHORITY\SYSTEM +534500x800000000000000030100Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:27.393{8223a6b9-7f3f-6902-a81e-000000002e00}2224C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030099Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:27.009{8223a6b9-7f3e-6902-a71e-000000002e00}9056C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM +534500x800000000000000030098Microsoft-Windows-Sysmon/Operationalsoc101win11-2025-10-29 20:55:26.819{8223a6b9-7f3e-6902-a61e-000000002e00}14884C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exeNT AUTHORITY\SYSTEM From 44bed237249332026035b714f5fa49a8280c82ea Mon Sep 17 00:00:00 2001 From: Rod Soto Date: Wed, 12 Nov 2025 12:08:18 -0500 Subject: [PATCH 2/7] yml --- .../local_llms/suspicious_local_llm_frameworks.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml diff --git a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml new file mode 100644 index 00000000..eb03afc0 --- /dev/null +++ b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml @@ -0,0 +1,13 @@ +author: Rod Soto +id: f936bf82-07dd-40f9-a04b-c8b392cafc97 +date: '2025-11-12' +description: These datasets contain events related to suspicious executions of local LLM frameworks on endpoints, which may indicate potential misuse or unauthorized activities. +environment: attack_range +dataset: +- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/sysmon_local_llms.txt +- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt +sourcetypes: +- XmlWinEventLog:Microsoft-Windows-Sysmon/Operational +- WinEventLog:Security +references: +- https://attack.mitre.org/techniques/T1543/ From d3a164e0a112da9ce46c86c2379257a5d7e4d0d5 Mon Sep 17 00:00:00 2001 From: Rod Soto Date: Wed, 12 Nov 2025 12:11:40 -0500 Subject: [PATCH 3/7] fixedproperty --- .../local_llms/suspicious_local_llm_frameworks.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml index eb03afc0..60d7ec7d 100644 --- a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml +++ b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml @@ -3,7 +3,7 @@ id: f936bf82-07dd-40f9-a04b-c8b392cafc97 date: '2025-11-12' description: These datasets contain events related to suspicious executions of local LLM frameworks on endpoints, which may indicate potential misuse or unauthorized activities. environment: attack_range -dataset: +datasets: - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/sysmon_local_llms.txt - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt sourcetypes: From 5fcd80a76ce5872e75820a3ae9fe0555e5ac60cd Mon Sep 17 00:00:00 2001 From: Rod Soto Date: Wed, 12 Nov 2025 12:15:18 -0500 Subject: [PATCH 4/7] fixextra --- .../local_llms/suspicious_local_llm_frameworks.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml index 60d7ec7d..fb6d57c2 100644 --- a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml +++ b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml @@ -6,8 +6,8 @@ environment: attack_range datasets: - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/sysmon_local_llms.txt - https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt -sourcetypes: -- XmlWinEventLog:Microsoft-Windows-Sysmon/Operational -- WinEventLog:Security -references: -- https://attack.mitre.org/techniques/T1543/ +#sourcetypes: +#- XmlWinEventLog:Microsoft-Windows-Sysmon/Operational +#- WinEventLog:Security +#references: +#- https://attack.mitre.org/techniques/T1543/ From cd0662d47d7db4807fcfd431505f6feb6c77e0df Mon Sep 17 00:00:00 2001 From: Rod Soto Date: Wed, 12 Nov 2025 12:18:03 -0500 Subject: [PATCH 5/7] fixedagain --- .../suspicious_local_llm_frameworks.yml | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml index fb6d57c2..dfe303df 100644 --- a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml +++ b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml @@ -4,10 +4,11 @@ date: '2025-11-12' description: These datasets contain events related to suspicious executions of local LLM frameworks on endpoints, which may indicate potential misuse or unauthorized activities. environment: attack_range datasets: -- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/sysmon_local_llms.txt -- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt -#sourcetypes: -#- XmlWinEventLog:Microsoft-Windows-Sysmon/Operational -#- WinEventLog:Security -#references: -#- https://attack.mitre.org/techniques/T1543/ +- name: sysmon_local_llms + source: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/sysmon_local_llms.txt + sourcetype: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational +- name: 4688_local_llms + source: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt + sourcetype: XmlWinEventLog:Security +references: +- https://attack.mitre.org/techniques/T1543/ From 8386222184224c15edfe6c849c5d8e7cd19c0adf Mon Sep 17 00:00:00 2001 From: Rod Soto Date: Wed, 12 Nov 2025 12:20:31 -0500 Subject: [PATCH 6/7] fixing --- .../local_llms/suspicious_local_llm_frameworks.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml index dfe303df..aead59de 100644 --- a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml +++ b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml @@ -10,5 +10,4 @@ datasets: - name: 4688_local_llms source: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt sourcetype: XmlWinEventLog:Security -references: -- https://attack.mitre.org/techniques/T1543/ + From 0c2dcd791c50404a12b61cd0fd818ebc8a78507e Mon Sep 17 00:00:00 2001 From: Rod Soto Date: Wed, 12 Nov 2025 12:23:37 -0500 Subject: [PATCH 7/7] fixone --- .../local_llms/suspicious_local_llm_frameworks.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml index aead59de..7314bd74 100644 --- a/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml +++ b/datasets/suspicious_behaviour/local_llms/suspicious_local_llm_frameworks.yml @@ -3,11 +3,15 @@ id: f936bf82-07dd-40f9-a04b-c8b392cafc97 date: '2025-11-12' description: These datasets contain events related to suspicious executions of local LLM frameworks on endpoints, which may indicate potential misuse or unauthorized activities. environment: attack_range +directory: local_llms +mitre_technique: [] datasets: - name: sysmon_local_llms + path: /datasets/local_llms/sysmon_local_llms.txt source: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/sysmon_local_llms.txt sourcetype: XmlWinEventLog:Microsoft-Windows-Sysmon/Operational - name: 4688_local_llms + path: /datasets/local_llms/4688_local_llms.txt source: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/suspicious_behaviour/local_llms/4688_local_llms.txt sourcetype: XmlWinEventLog:Security